Privacy policy

This policy explains what personal data Choon ID collects, why, and your rights. [COMPANY NAME] (company number [NUMBER], registered office [ADDRESS]) is the controller. Contact us at privacy@choonid.com. We are registered with the Information Commissioner’s Office under number [ICO NUMBER].

The short version

• We only use the microphone when you tap Listen. The recording is matched and deleted straight away; we never keep fans’ audio.
• If you switch hunting on and we can’t find a track, we keep a fingerprint of your clip (not the audio) for 90 days.
• Artists and labels see numbers (how many people identified or follow a track, and from which countries), never who you are.
• Every identification records the country it happened in, whether you’re signed in or not. Signing in isn’t what starts this.
• You can delete your account and everything linked to it from the app, at any time.

What we collect, and why

• Account: your email address, or the identifier Sign in with Apple gives us. To sign you in and keep your IDs. (Contract.)
• Your IDs and follows: the tracks you identify, save and follow, with dates. To show them in My IDs and notify you. (Contract.)
• Identifications: each search’s result, score and time, and whether it came from the microphone or a video. To run and improve recognition. (Legitimate interests.)
• Hunts: only with your consent, a fingerprint of an unmatched clip, kept for 90 days, then deleted. A fingerprint is a list of points in the sound; it can’t be played back. (Consent, which you can withdraw in Settings.)
• Notifications: your device’s push token and notification preferences. (Contract.)
• Device identifier: a random code made by the app, used only to stop abuse (rate limiting). It isn’t linked to your account. (Legitimate interests.)
• Crash reports: technical details of app or server errors, with personal data (IP address, email, request contents) removed before they’re sent. (Legitimate interests.)
• Country of each identification: for every identification, signed in or not, we record the country it happened in. We work it out on our own server from the internet address of the connection, using a database stored on that server, and then discard the address: it isn’t stored, logged or sent to anyone. We never use your phone’s location or GPS. Behind a VPN the country may be wrong. To show artists and labels where their music is being heard, as totals. (Legitimate interests.)
• Where you’re from: only if you tell us (the app suggests your phone’s region setting, but saves nothing until you confirm). It’s recorded with your later identifications so artists and labels can see, as totals, which countries their fans come from. You can change or remove it in Settings. (Consent.)
• City or precise location: we don’t collect it.
• Artists and labels: name, email, the links you give us to verify you, uploads and your acceptance of the artist agreement. Uploaded audio is deleted once it has been checked, unless you ask us to keep an encrypted copy. For label team members: which label you belong to, your role, and a log of the insights you export.
• Messages to us: what you send through the contact or takedown forms. To respond. (Legitimate interests; legal obligation for rights complaints.)

Who processes data for us

• Supabase (database, sign-in, file storage), servers in London, UK.
• Fly.io (recognition servers), London, UK.
• Vercel (this website).
• Expo and Apple (delivering push notifications).
• Sentry (crash reports, with personal data removed), EU.
• Resend (sending emails).

[LAWYER TO REVIEW: international transfer safeguards for any processor outside the UK/EEA.] We never sell your data.

What artists and labels see

Artists see totals for their own tracks, and for tracks another artist added them to as a co-artist. A label sees totals only for the tracks each artist has chosen to share with it, and the artist can stop sharing at any time. Both see counts by track, week, event, the country where tracks were identified and the countries fans say they’re from. Any group with fewer than 5 identifications is shown as “fewer than 5”, so nobody can be picked out. They never see your name, email, account or device. Labels can download these totals as a spreadsheet; every download is logged.

Country lookup uses IP to Country Lite by DB-IP (db-ip.com), licensed under CC BY 4.0.

How long we keep it

• Fans’ audio: not kept (deleted straight after matching).
• Hunt fingerprints: up to 90 days, or until the track is found, you switch hunting off, or you delete your account.
• Account, IDs, follows and notifications: until you delete your account.
• Identifications: kept without any link to you once your account is deleted, for statistics. Deleting your account also removes where you said you’re from from your past identifications; the country where each one happened stays.
• Rights complaints and the records of artists’ acceptances: [RETENTION PERIOD], to deal with disputes.

Your rights

You can ask for a copy of your data, to correct or delete it, to restrict or object to how we use it, and to take it elsewhere. In the app, Settings › Delete account and data deletes your account, saved IDs, hunts and their fingerprints, notifications and where you said you’re from straight away. For anything else, email privacy@choonid.com. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Children

Choon ID is for people aged [13/16] and over. [LAWYER TO REVIEW: age threshold and Children’s Code assessment.]