1. Introduction
Welcome to SoundCrew ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.
2. Data Controller
SoundCrew is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us at:
Email: privacy@soundcrew.app
3. Information We Collect
We collect the following types of information:
Account Information:
- Email address (required for account creation)
- Username (required, visible to other SoundCrew users)
- Password (stored securely using industry-standard encryption)
Profile Information:
- Profile photo (optional, uploaded by you)
- Preferred music platform setting
- Discoverability preferences
Content You Create:
- Music links you share. Your posts are visible only to your friends, or to the friends and groups you select.
- Songs you save to favorites
- Friendship and group relationships
- Comments and reactions
- Group names, descriptions, and avatars
Technical Information:
- Device push notification tokens (for sending you notifications)
- Device information (brand, model, operating system and version), recorded with error reports to help us fix problems
4. How We Use Your Information
We use your information to:
- Create and manage your account
- Enable you to share music with friends
- Send push notifications when your friends share music
- Convert music links across different streaming platforms (Spotify, Apple Music, Deezer, YouTube, SoundCloud, Tidal)
- Allow other users to find you and send you friend requests (if you enable discoverability)
- Improve our services and user experience
5. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your data based on:
- Contract: Processing necessary to provide our services to you
- Consent: For optional features like push notifications and discoverability
- Legitimate Interest: To improve our services and ensure security
6. Data Sharing and Third Parties
We share your data with the following service providers:
- Supabase: Our backend infrastructure provider (stores your account data securely)
- Music platforms and catalogs (Spotify, Deezer, Apple, YouTube, MusicBrainz, SoundCloud, Tidal): queried by our servers to find a shared song on other platforms (receive only the music link or the song title and artist, never personal data)
- Expo: Push notification delivery service (receives only device tokens)
We do not sell your personal data to third parties.
7. Data Retention & Account Deletion
We retain your personal data for as long as your account is active. You can delete your account at any time through the app settings. Account deletion is robust and immediate: it permanently wipes your profile, authentication records, posts, comments, favorites, friendships, and group memberships.
Technical logs or records required for legal compliance or security purposes may be retained for up to 30 days before permanent deletion.
8. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data via your profile settings
- Erasure: Delete your account and all associated data
- Portability: Request your data in a portable format
- Objection: Object to certain processing activities
- Withdraw Consent: Disable notifications or discoverability at any time in settings
To exercise these rights, contact us at privacy@soundcrew.app
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- HTTPS encryption for all data in transit
- Secure password hashing
- Access controls and authentication
- Regular security reviews
10. International Transfers
Your data may be processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
11. Children's Privacy
SoundCrew is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email. Your continued use of SoundCrew after changes constitutes acceptance of the updated policy.
13. Contact Us
For any questions, concerns, or to exercise your rights, please contact us:
Email: privacy@soundcrew.app