Privacy Policy

1. Data Controller & Contact

Data Protection Officer (if applicable): Not required.

2. Scope & Jurisdiction

This Privacy Policy applies to all users of the SoulTune mobile application (iOS & Android), regardless of location. For users in the European Union (EU) and European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). For UK users, we comply with the UK GDPR.

3. Data Processing Overview

SoulTune operates under a privacy-by-design principle. We do not collect, transmit, or store personal data on external servers.

3.1 Data Stored Locally on Your Device

Legal Basis: Art. 6(1)(b) GDPR (Performance of a contract / service provision)

Data Deletion: All data is automatically deleted when you uninstall the app or manually clear app data via device settings.

3.2 Device Permissions

SoulTune requires the following permissions:

• 📁 Storage/Media Access: To read and process your music files. On Android 11+, we use Scoped Storage (access only to files you explicitly select).
• 🌐 Internet Access: Required for the optional in-app browser feature only. No background data transmission occurs.

Legal Basis: Art. 6(1)(b) GDPR (Necessary for app functionality)

3.3 In-App Browser (Web View)

SoulTune includes an optional web browser for opening external links.

• Data Processed: URLs visited, timestamps, cookies (stored locally)
• Third-Party Websites: When you visit external websites via the browser, those sites may collect data according to their own privacy policies
• No Tracking: We do not track or log your browsing activity

Legal Basis: Art. 6(1)(f) GDPR (Legitimate interest in providing full app functionality)

4. No Third-Party Services

SoulTune does NOT integrate with any third-party services:

• ✗ No Analytics (Google Analytics, Firebase, Mixpanel, etc.)
• ✗ No Advertising SDKs
• ✗ No Crash Reporting (Crashlytics, Sentry, etc.)
• ✗ No Social Media SDKs (Facebook, Twitter, etc.)
• ✗ No Cloud Sync (Google Drive, iCloud, Dropbox, etc.)

5. App Store Data Collection

When you download SoulTune from app stores, the store operators automatically process certain data:

• Google Play Store (Google LLC): See Google Privacy Policy
• Apple App Store (Apple Inc.): See Apple Privacy Policy

Important: We do not have access to this data. For inquiries, contact the respective store operator directly.

6. International Data Transfers

For EU/EEA Users: Since all data is stored locally on your device, no international data transfers occur. We do not operate servers or transfer data outside the EU/EEA.

Exception: If you use the in-app browser to visit websites hosted outside the EU/EEA, standard GDPR safeguards (e.g., Standard Contractual Clauses) apply to those third-party services.

7. Data Security

We implement technical and organizational measures to protect your data:

• App Sandboxing: iOS/Android isolate app data from other apps
• Device Encryption: Automatic encryption via OS (iOS FileVault / Android FDE)
• No Network Transmission: Zero personal data sent to external servers
• Regular Updates: Security patches released via app store updates
• Secure Code Practices: Follows OWASP Mobile Security guidelines

Legal Compliance: Art. 32 GDPR (Security of Processing)

8. Your Privacy Rights (GDPR)

If you are in the EU/EEA, you have the following rights under the GDPR:

To Exercise Your Rights: Since all data is stored locally, you have full control via your device. For questions, contact us at support@soultune.app.

9. Supervisory Authority & Complaints

If you believe we are not complying with GDPR, you have the right to lodge a complaint with a supervisory authority:

Note: Each EU country has its own supervisory authority. Find your local authority: EDPB Member List

10. Children's Privacy

SoulTune is not directed at children under 16 years old (or the minimum age in your country). We do not knowingly collect personal data from children without parental consent (GDPR Art. 8).

If you are a parent/guardian: If you believe your child has provided data to us, contact us at support@soultune.app so we can assist in deletion (though all data is local to the device).

11. Data Retention

Since all data is stored locally on your device, retention is controlled by you:

• Automatic Deletion: Upon app uninstallation
• Manual Deletion: Via "Clear App Data" in device settings
• No Server Storage: We do not retain any data on external servers

12. Cookies & Tracking Technologies

SoulTune does NOT use cookies, tracking pixels, or similar technologies within the app itself.

Exception: The in-app browser (web view) may store cookies from websites you visit. These are managed by the OS and automatically deleted when you clear browser data.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

• Legal requirements (e.g., new privacy laws)
• App features or functionality
• Best practices for data protection

Notification: Significant changes will be communicated via:

• In-app notification (pop-up) upon next launch
• Updated "Last Modified" date at the top of this policy

Your Continued Use: By continuing to use SoulTune after changes, you accept the updated policy.

14. Do Not Track (DNT) Signals

Since SoulTune does not track user activity, we automatically respect all "Do Not Track" signals. No additional action is required on your part.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us:

16. Legal Bases Summary