Privacy Policy

Last updated: July 2026

1. Information We Collect

When you use AcadMusic, we may collect the following information:

  • Account Information: When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth.
  • Usage Data: Listening history, liked tracks, playlists, and music preferences to provide personalized recommendations.
  • Device Information: Browser type, operating system, and screen size for responsive design purposes.

2. How We Use Your Information

  • To provide and maintain the Service (playlists, history, recommendations).
  • To personalize your experience (AI-powered Discover Weekly, music recap).
  • To display your public profile and now-playing status (if enabled).
  • To improve the Service and fix bugs.

3. Data Storage

Your data is stored securely on Supabase (PostgreSQL database hosted on AWS). Profile images and playlist covers are stored on Cloudflare R2 with a custom domain. We do not store any audio files.

4. Third-Party Services

We integrate with the following third-party services that may collect data under their own privacy policies:

  • Google OAuth: For authentication.
  • YouTube: For music playback (subject to YouTube's Terms of Service and Google Privacy Policy).
  • iTunes/Apple Music API: For song metadata and search.
  • Vercel Analytics: For anonymous usage analytics.

5. Cookies

We use essential cookies for authentication sessions (Supabase Auth). We do not use advertising or tracking cookies.

6. Data Sharing

We do not sell, trade, or share your personal data with third parties for marketing purposes. Data is only shared as necessary to operate the Service (e.g., Supabase for database, Cloudflare for CDN).

7. Your Rights

You have the right to:

  • Access your personal data stored in the Service.
  • Request deletion of your account and all associated data (available in Settings).
  • Export your data (playlists, listening history).
  • Opt out of public profile visibility.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data (profile, playlists, history, likes) is permanently deleted within 30 days.

9. Security

We implement industry-standard security measures including HTTPS encryption, Row Level Security (RLS) on all database tables, rate limiting on APIs, and secure file upload validation.

10. Contact

For privacy-related inquiries, contact us at dmca@music.rasyadazizan.site.