DigFlow privacy policy

Last updated: October 1, 2026

1. Scope

This policy applies to DigFlow (“the App”), an Android application published by Safe Studios, Amsterdam, the Netherlands (KvK 63889943) (“Safe Studios”, “we”). It describes which data the App stores, which data it transmits and to whom. The App is a client for the Discogs marketplace and database; it requires a Discogs account.

2. Data collected by Safe Studios

Safe Studios does not collect, receive, sell or share personal data through the App. The App does not report to any server operated by Safe Studios and contains no analytics, advertising or tracking software.

3. Data stored on the device

The App stores the following data in its private storage on the device. This data is not accessible to Safe Studios.

  • Discogs access token. Obtained from Discogs when the user signs in with “Log in with Discogs” (OAuth). It is transmitted only to Discogs, to authenticate requests made on the user’s behalf. The associated Discogs username is displayed in the App’s settings.
  • discogs.com session cookies. Set when the user signs in to discogs.com in the App’s embedded browser view, which is used to add listings to the user’s Discogs cart.
  • App data. Listings and release details retrieved from Discogs, filter presets, sessions, shortlists and the tracks selected for a playlist, held in a local database.

The App opts out of Android’s automatic backup. The data above is not copied to cloud backups or transferred to other devices by the App.

4. Barcode scanning and text recognition

In an in-store session the user may scan a barcode or photograph a record sleeve or label. Barcodes are read by Google’s code scanner and text by Google’s ML Kit text recognition. Both are provided by Google Play services and process the data on the device. The App does not hold the camera permission; photographs are taken by the device’s camera application, stored temporarily in the App’s cache, and deleted after processing. Photographs are not uploaded. The resulting barcode number or text is sent to Discogs as a search query.

Google Play services may transmit diagnostic information about these features to Google, namely device model, operating system version, the App’s package name and version, performance metrics and error codes. Images, barcodes and recognised text are not included. See Google’s ML Kit data disclosure.

5. Third-party services

The App exchanges data with the following services, each under its own privacy policy:

  • Discogs (api.discogs.com, www.discogs.com, i.discogs.com): seller inventories, release data, community reviews, images, search queries and the user’s cart, using the user’s Discogs account. Requests identify the App by name and version. Discogs privacy policy.
  • YouTube (Google): videos are played in YouTube’s embedded player, or opened in the YouTube app at the user’s request, including as a playlist. Google privacy policy.
  • Frankfurter (api.frankfurter.dev): daily exchange rates published by the European Central Bank, requested only when a price filter’s currency differs from a listing’s currency. These requests contain no identifiers.
  • Google Play services: barcode scanning and text recognition, as described in section 4.

6. Retention and deletion

Data stored on the device is retained until the user deletes it. Signing out in the App’s settings deletes the Discogs access token. Clearing the App’s data in Android’s settings, or uninstalling the App, deletes all data listed in section 3. Access granted to the App can also be revoked in the Discogs account under Settings → Applications.

7. Your rights

As Safe Studios holds no personal data from the App, requests to access, correct or delete data held by Discogs or Google should be directed to those parties. Questions about this policy can be sent to [email protected]. You may also lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

8. Children

The App is not directed at children under 13 and does not knowingly collect personal information from them.

9. Changes

This policy may be updated. Changes take effect when published on this page, with a revised “Last updated” date.

10. Contact

Safe Studios, Amsterdam, the Netherlands. KvK 63889943. Email: [email protected].