Privacy Policy

1. Information We Collect

We collect the following types of information when you use the HYMNZ service:

Account Information: When you create an account, we collect your name and email address. If you sign in with Google or Apple, we receive your name and email from those services.

Usage Data: We collect information about how you use the Service, including tracks you listen to, play counts, songs you mark as favorites, and your listening preferences.

Device and Technical Data: We automatically collect certain technical information including your IP address, browser type, device type, operating system, and general location (country/region level).

Payment Data: Payment information (such as credit card details) is collected and processed directly by our payment processor, Stripe. We do not store your full payment details on our servers. We receive only a reference to your Stripe customer account and subscription status.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service.
• Process your subscription and manage your account.
• Personalize your experience, such as recommending music based on your listening history.
• Send you service-related communications (account updates, security alerts).
• Send you marketing communications about new music and HYMNZ news, only if you have opted in.
• Detect and prevent fraud, abuse, and security issues.

3. Third-Party Services

We use the following third-party services to operate the HYMNZ platform. Each has its own privacy policy governing how they handle your data:

• Stripe — Payment processing and subscription management.
• Google — Authentication (Sign in with Google).
• Apple — Authentication (Sign in with Apple).
• Amazon Web Services (AWS) — Cloud hosting, media storage (S3), and content delivery (CloudFront).
• Resend — Email delivery for account notifications and newsletters.
• Vercel — Web application hosting.

4. Cookies and Local Storage

We use cookies and local storage to maintain your login session and remember your preferences. We use a session cookie for authentication purposes. We do not use third-party tracking cookies or advertising cookies.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encrypted connections (HTTPS/TLS), secure password hashing, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete your personal data, listening history, favorites, and other account data within 30 days. We may retain certain data as required by law or for legitimate business purposes (such as fraud prevention).

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Delete your account and associated data at any time through your profile settings.
• Opt-Out: Unsubscribe from marketing emails at any time via your profile settings or the unsubscribe link in our emails.
• Data Portability: Request a copy of your data in a portable format.

To exercise any of these rights, contact us at hello@hymnz.com.

8. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your personal information. We do not sell your personal information. To exercise your CCPA rights, contact us at hello@hymnz.com.

9. European Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data based on: your consent (e.g., marketing emails), contractual necessity (e.g., providing the Service), and legitimate interests (e.g., security and fraud prevention). You have the right to withdraw consent at any time, lodge a complaint with a supervisory authority, and exercise the rights listed in Section 7.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at hello@hymnz.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, please contact us at hello@hymnz.com.