This application (the "app") is an audio-first matching platform for music
creators, published by Adam Khazrane ("we"). This policy explains what
personal data we process, why, and the rights you hold over it under the EU
General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is Adam Khazrane. For any privacy matter, reach us through the
support contact published on the app's App Store or Google Play
listing.
2. Data we process, and why
Account & profile — email address and sign-in identity
(managed by our authentication provider, Supabase; we never see or store your
password), artist name, handle, role (singer/rapper or beatmaker), city,
country, optional first/last name, bio, links to your music profiles, profile
picture. Purpose: running your account and showing your public creator
profile. Legal basis: performance of the contract (our Terms).
Content you publish — the tracks you upload, their titles,
descriptions, genres, tags and covers. Purpose: making your music
discoverable by other creators. Legal basis: contract.
Audio analysis — each uploaded track is analysed by our
own software to derive technical audio descriptors used to rank the discovery
feed. This describes the sound, not you; no profiling with legal
effect is performed. Legal basis: contract (audio-first discovery is
the service).
Activity — likes, skips, listening time, matches
("connections"), messages and files you send in conversations, people you
block or report. Purpose: matching, messaging, moderation, and
ranking your feed. Legal basis: contract; moderation data also serves
our legitimate interest in keeping the platform safe.
Onboarding answer — the optional "why did you install
the app" answer. Purpose: product research only; never shown to other
users. Legal basis: legitimate interest; the question is skippable.
Aggregated product usage — daily counters for app sessions,
main sections visited, filter use, views of incoming reactions, uploads,
Superlikes, actual audible playback time and the highest number of tracks
published. Investor reporting contains daily totals such as minutes listened
and messages exchanged, without user identifiers or message content. We do not record raw navigation histories, search
text, audio content, advertising identifiers or device fingerprints.
Purpose: understand beta retention and decide which creator tools are
useful. Legal basis: legitimate interest in improving the service.
Push notifications — a device token if you enable
notifications (Firebase Cloud Messaging). Legal basis: your consent
via the system permission; revocable in your OS settings.
Technical logs — our servers log IP addresses and request
metadata for security and debugging. Logs rotate automatically and are kept
for a maximum of about 50 MB of history (a few weeks at most).
Legal basis: legitimate interest (security).
We do not use advertising trackers or third-party analytics SDKs, and we do
not sell personal data. Product-usage counters are first-party, private and
aggregated per account and day. We never publish raw like counts or listening
statistics to other users.
3. Who can see what
Your artist name, handle, role, city, country, bio, links, profile picture
and published tracks are visible to other users. Your email, real name,
onboarding answer, likes, listening activity and reports are not. Files sent
in a conversation are visible only to its members and expire after
24 hours.
4. Processors and hosting
Supabase — authentication and database, hosted in the EU
(AWS eu-west-3, Paris).
Cloudflare R2 — storage of audio files and images.
Google Firebase — push notification delivery.
Oracle Cloud — application server hosting.
Each provider processes data under a data-processing agreement. Where a
transfer outside the EU occurs, it is covered by the European Commission's
Standard Contractual Clauses or an adequacy decision.
5. Retention
Your data is kept while your account exists. Deleting your account
(Settings → Account → Delete account) immediately and irreversibly erases your
profile, tracks, audio files, likes, matches, messages and reports, and
deletes your sign-in identity. Server logs expire on their own rotation
schedule.
6. Your rights
You can, at any time:
Access / portability — export a machine-readable copy of
your data in-app (Settings → Account → Export my data).
Rectification — edit your profile and tracks in-app.
Erasure — delete your account in-app, effective
immediately.
Objection / restriction — reach us through the support
contact on the app's store listing.
You may also lodge a complaint with your supervisory authority (in France:
the CNIL, cnil.fr).
7. Children
The app is not directed at children under 15. If you believe a child is
using the service, contact us and we will delete the account.
8. Changes
If this policy changes materially, the app will ask you to review and
accept the new version before you continue.