Effective date: August 31, 2026
Last updated: August 31, 2026
Stubs is a social app for the live music you go to. A show is a night an artist played. A stub is the record you kept of a show you attended. "Stubs", "we", "us" and "our" mean Weston Software LLC. "You" means the person using the app.
This policy explains what we collect, how we use it, who we share it with, and how to delete it.
1. What we collect
Account information. When you use a third-party sign-in service, we receive the account identifier it creates for Stubs and, if you choose to share them, your name and email address. We use the sign-in email address once to suggest a handle for your new account, and we do not retain that email address. You can change your handle and display name at any time.
Phone authentication. If phone sign-in is available and you choose it, we process the phone number you enter to check that it is an eligible mobile line and to send a one-time code. The plaintext number is held only while those requests are processed and is not stored or logged by Stubs. We store a one-way digest linked to your account, verification timestamps, and limited abuse and rate-limit records. We also keep a limited record of the disclosure and consent for each text request, including a one-way destination record, purpose, disclosure version, and timestamp. It does not contain the plaintext number, verification code, contact names, or message content. The routing check may return country, line-type, and carrier information. The routing check does not identify the subscriber, prove that the same person controlled the number earlier, or detect a recycled or reassigned number. We delete each messaging-consent record four years after the text request. If you unlink a phone sign-in method, a one-way marker prevents the number from being claimed by another account for 90 days and is then removed.
Contact matching. If contact matching is available and you choose it, phone numbers from your address book are normalized and changed into one-way codes on your device. Contact names do not leave your device. The server compares the submitted codes, returns any matches, and does not store the submitted codes or match results. It keeps only aggregate request counters to prevent abuse. You must separately verify your own phone number before matching contacts. The one-way record that makes your account discoverable expires after 30 days unless you verify again. Turning off phone discovery removes that record, and phone sign-in never turns discovery on by itself.
Phone and contact features are unavailable unless the app offers them to you. Stubs does not process phone numbers or address-book contacts through those features while they are unavailable.
Content you post. Your profile, meaning your handle, display name, bio, and profile photo; your stubs, meaning the show, the date, your score, your ranking, and your review; the photos you choose to add; the shows you mark as going to; the artists you pick during setup; the people you tag as having attended a show with you; and your follows, likes, blocks, and the reports you file.
Usage information. How the app is used, such as the screens you visit and the actions you take, with identifiers for your device and account. We may also record a limited sample of app sessions to find screens that are confusing or broken. The recording configuration masks text inputs, images, and sandboxed views and excludes replay logs and network telemetry.
Invitations. An invitation uses a random link token. Anyone who has the link may see the inviter's public profile information and the profile, stub, or show shared with it. We do not record who you select in the share sheet. If you claim an invitation while signed in, we keep the connection between your account, the inviter's account, and that invitation so the claim stays reliable and we can suggest each of you to the other for 90 days.
Diagnostics. Crash reports, errors, and performance data, including your device model, operating system version, and app version. A diagnostic report may include an approximate region based on the network connection that delivered it, never your precise location.
Server logs. Like any online service, our servers keep standard request logs, which include the IP address a request came from.
Searches. When you search for a show and our own catalogue cannot answer, the search text is sent to music data services, and nothing that identifies you is sent with it. To enforce a daily provider limit, we retain a one-way digest of the search linked to your account until the next UTC midnight. We do not retain the search text for this purpose.
Notifications. If you allow notifications, we store the push token your device supplies, your notification preferences, and your time zone.
Messages to us. If you contact support, privacy, safety, security, or legal, we receive the message and the contact information you choose to provide.
We do not collect precise location, health data, financial data, browsing history, biometrics, or advertising identifiers.
2. How we use it
- Run the service: sign you in, store your content, deliver optional features you request, and power the feed, profiles, and artist and venue pages.
- Show your content to other people, as described in section 3.
- Keep the service safe: public photos and text may be checked automatically before publication, and we act on reports and blocks.
- Fix problems and improve the app: debugging, crash and performance monitoring, rate limits, abuse prevention, product analytics, and understanding which features work.
- Respond to you, enforce our Terms, protect legal rights, and comply with the law.
Where the GDPR or UK GDPR applies, we process information as needed to perform our contract with you, with your consent for optional features where consent is required, for our legitimate interests in running a safe and reliable service, and to comply with legal obligations. Our legitimate interests include security, fraud prevention, service reliability, and improving Stubs. You may withdraw consent at any time through the applicable app or device setting or by contacting us. Withdrawal does not affect processing that already occurred lawfully.
3. What other people can see
Stubs is a social app, and what you post is visible to other people: your profile, your stubs, your scores and rankings, your reviews, your photos, your follower and following lists, and the shows you mark as going to. If you tag someone as having attended with you, the tag is visible on that stub. There is no private account mode. If you do not want something to be public, do not post it.
Anyone with an invitation link may see the public invitation information described in section 1. If you claim an invitation, the account that shared it may see you as a suggested person to follow for up to 90 days. Your blocks, contact matches, and the reports you file are private to you.
5. Text messaging privacy
Messages are delivered through AWS Notify. AWS does not share end user phone numbers with third parties for marketing or promotional purposes.
No mobile numbers will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We may share a number with service providers only as needed to check routing eligibility, deliver a code, prevent abuse, or comply with law, subject to section 4.
The Terms of Service contain the text-messaging terms.
6. What we do not do
We do not show ads. We do not sell your personal information. We do not share personal information for cross-context behavioural advertising. We do not track you across other companies' apps or websites. We do not use your content to train machine-learning models.
Stubs does not respond differently to browser Do Not Track or Global Privacy Control signals because it does not sell, share, or use personal information for the cross-service tracking those signals address. Service providers may collect app, website, or server information on our behalf as described in section 4, but they may not use it for their own cross-service advertising.
7. How long we keep it
Your account and the content you posted are kept while your account exists. Server logs are kept for 30 days and database backups for 7 days. Analytics and diagnostic records are kept for limited periods and then deleted automatically. Support and legal correspondence is kept as long as needed to answer the request, keep a record of the response, and meet legal obligations. Moderation reports are kept as the record of what was reported and how it was handled.
Invitation claims are kept while the linked accounts exist so a completed claim cannot be spent twice. Their use for follow suggestions ends after 90 days. Phone and contact retention is described in section 1. Messaging-consent records are kept for four years after each text request to demonstrate compliance and resolve provider or carrier questions, then deleted.
8. Deleting your content and account
You can delete a stub, a photo, or a review in the app at any time, and deletions take effect immediately.
To delete your account, go to You, then Settings, then Delete account in the app. Deletion is immediate and permanent, and it removes your profile, your stubs, your reviews, your photos, your follows, your likes, and active phone records. A few things remain: a show you added to the shared catalogue stays, unlinked from you; reports other people filed about you stay as a moderation record; a phone unlink marker may remain for the security period in section 1; analytics, diagnostic, support, legal, and messaging-consent records are retained for the periods in section 7; and aggregate figures that cannot identify you, such as a show's community average score, remain.
If you no longer have the app, write to privacy@joinstubs.com with your handle. We will process the request within the time required by law, ordinarily within 30 days.
9. Your choices and rights
You may edit your profile, delete your content, turn off optional phone discovery, change notification permissions in device settings, and delete your account. Depending on where you live, you may also have the right to access, correct, delete, or receive a portable copy of your personal information; withdraw consent; object to or restrict some processing; or appeal our response to a request.
Write to privacy@joinstubs.com to exercise a right. We will respond within the time required by applicable law, ordinarily within 30 days, and we do not charge unless the law permits a fee. We may ask for information reasonably necessary to verify that you control the account. Authorized agents may submit requests where applicable law permits them. We will not discriminate against you for exercising a privacy right.
If you are in California, we do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we have not done so in the preceding twelve months.
If you are in the EEA, the United Kingdom, or Switzerland, you may lodge a complaint with your local data-protection authority. Stubs does not make decisions based solely on automated processing that produce legal or similarly significant effects about you.
10. International transfers
Stubs is operated from the United States, and information may be processed in the United States and other countries where our service providers operate. Where applicable law requires a transfer mechanism, we use a legally recognized mechanism and appropriate safeguards. Contact privacy@joinstubs.com to ask about safeguards relevant to your information.
11. Children
Stubs is not directed to children under 13, and they may not use the service. Where local law requires a higher age to consent to an online service, a person below that age may use Stubs only with a parent or guardian who provides any required consent and agrees to the Terms. If you believe a child is using Stubs unlawfully, write to privacy@joinstubs.com and we will investigate and delete the information when required.
12. Security
Traffic between the app and our servers is encrypted in transit, and our databases are encrypted at rest. We limit access to personal information based on operational need. No system is perfectly secure and we cannot promise absolute security.
13. Changes to this policy
If we make a material change, we will update the date at the top and, where the law requires it, give notice before the change takes effect.
14. Contact
Weston Software LLC
privacy@joinstubs.com