What we collect
- Your account: your name, singer ID, and your phone number or email if you give them. Your PIN is stored only in a scrambled form we can't read back.
- Your plan: which plan you have, until when it's paid, your credits, and the songs in your list.
- Payments: Stripe handles your card, Apple Pay or Google Pay. We keep only Stripe's customer and subscription IDs and the status of your plan, never your card number.
- Use of the app: to protect the library, we record sign-ins and plays with the time, the kind of device and browser, the internet address, and an approximate location (city and country) worked out from it. A small cookie remembers your device, and another keeps you signed in.
- Uploads and reports: files you upload, when you accepted the upload rules, and reports you send.
Why we use it
- To run your account and plan, take payments and send receipts (by Stripe).
- To stop accounts being shared and songs being copied (device limits and the usage record).
- To give credits for approved uploads, and to handle copyright reports.
- We don't sell your information, don't use it for advertising, and don't send marketing messages without asking you first.
Who else handles it
Service providers that run parts of the app for us, under contract: Netlify (website hosting), Supabase (database), Cloudflare (file storage) and Stripe (payments). Some of them store data outside Canada and the EU, including in the United States, where it may be accessible to authorities under local law. We use only what each provider needs.
How long we keep it
Account and plan details: while your account is open, then up to 12 months. Payment records: as long as tax law requires (up to 7 years). Usage records: up to 12 months. Coordinators can delete a singer's account; ask them, or us, if you want yours removed.
Your rights
You can ask to see the information we hold about you, have it corrected, or have it deleted (except what we must keep by law). In Quebec and the EU you can also ask for a copy in a portable format and object to some uses. EU residents can complain to their data protection authority; Canadian residents to the Office of the Privacy Commissioner of Canada (or the Commission d'accès à l'information in Quebec). Contact: [privacy email to add].
Cookies
The app uses only the cookies it needs to work: one to keep you signed in and one to recognise your device. No advertising or tracking cookies.
Security
Connections are encrypted, PINs and passwords are scrambled, track storage is private, and play links expire after a short time. If a breach could harm you, we'll tell you and the authorities as the law requires.