Privacy Policy

1. Scope and our privacy approach

StereoKe does not require an email account, password, or social login. We do not sell personal data and do not use personal data for targeted advertising. We process only the information needed to provide app features, operate shared Jam sessions, perform media conversion, secure the service, and diagnose failures.

2. Information we handle

Information you provide

• Jam information: your chosen nickname, approval requests, participant role, shared queue items, playback commands, song metadata, and lyrics you choose to share in a Jam.
• Search information: YouTube search text or YouTube links you submit.
• Studio media: audio or video files you explicitly select for minus-one conversion, language preferences, generated instrumental audio, and generated or edited lyric timing.
• Privacy inquiries: information you choose to include when contacting us.

Device, security, and diagnostic information

• An anonymous installation identifier, rotating installation credentials, app platform, and Jam-scoped capability credentials. Secret values are stored securely on the device and hashed when stored by the service.
• Google Play Integrity or Apple App Attest results, including app identity, licensing, build, and device-integrity signals, when available. We use these signals to protect Search and Studio from automated abuse.
• IP address, request identifiers, timestamps, rate-limit events, server logs, crash reports, performance traces, app/build information, and technical error details needed for security and reliability.

Information stored locally

Saved songs, playlists, personal Top Tracks play history, local playback state, Jam restoration snapshots, downloaded minus-one files, and secure credentials are stored on your device. Top Tracks history and device-local file addresses are not uploaded to the StereoKe service. Selected Studio media leaves the device only when you explicitly start an upload.

Purchase information

Google Play processes app purchases and payment credentials under Google's policies. StereoKe may receive purchase, licensing, country, and transaction-status information needed to confirm access, but we do not receive your full card or bank details.

3. How we use information

• Provide local playback, library, queue, personal Top Tracks, Jam synchronization, host transfer, search, lyrics, and Studio conversion.
• Approve participants, issue revocable Jam credentials, restore local state, and prevent unauthorized Jam control.
• Verify paid/licensed installations, enforce quotas, detect abuse, investigate failures, and protect users and infrastructure.
• Process selected media, deliver generated output, respond to inquiries, and comply with legal obligations.

4. Service providers and disclosure

We disclose information only as needed to operate StereoKe, protect the service, comply with law, or complete an action you request. Our processors may include:

• Google Play, Play Integrity, YouTube, and YouTube Data API Services for distribution, licensing, integrity checks, video metadata, and search. Use of YouTube features is also subject to the YouTube Terms of Service and Google Privacy Policy.
• Apple App Attest for integrity checks on supported iOS devices.
• Railway and its infrastructure providers for API hosting, databases, queues, private object storage, and conversion workers.
• Cloudflare for DNS, TLS, delivery, and protection of stereoke.app.
• Sentry for redacted crash diagnostics, error reporting, and performance monitoring.

Jam nicknames and shared music/playback metadata are visible to approved participants in the same Jam. Device-local file addresses and payment credentials are not shared with Jam participants.

5. Retention and deletion

• Pending Jam requests expire after 10 minutes. A Jam lasts no more than eight hours. Short-lived socket tickets expire after 60 seconds, and command receipts are removed after 30 days.
• Studio input media is deleted after processing or failure cleanup. Generated output is deleted after confirmed download or after 24 hours. Conversion job history is removed after 30 days.
• Security, rate-limit, audit, and diagnostic records are retained only as reasonably necessary for abuse prevention, reliability, legal compliance, and resolving incidents, then deleted or aggregated.
• Local data remains until you delete items in the app, clear the app's storage, or uninstall the app. Secure installation and Jam credentials are revoked or replaced as their associated session ends or rotates.

StereoKe has no user accounts. You may still request deletion of server information linked to your anonymous installation or provide a request identifier by contacting us. We may ask for limited information needed to locate the relevant records and verify the request.

6. Security

We use HTTPS in transit, private storage for conversion media, hashed capability secrets, short-lived credentials, device integrity checks, access controls, rate limits, monitoring, and scheduled deletion. No system is completely secure, but we review safeguards and limit access to people and providers that need it.

7. Your choices and rights

• You choose whether to join or leave a Jam, upload Studio media, save songs, grant media access, or open YouTube.
• You can reset personal Top Tracks, delete local minus-one files and conversion jobs, clear app storage, revoke permissions in device settings, or uninstall StereoKe.
• You may ask to access, correct, or delete information associated with your anonymous installation, subject to applicable law and our need to prevent fraud or comply with legal obligations.

8. Children

StereoKe is not directed to children under 13 and is not designed to knowingly collect personal information from children. If you believe a child provided personal information, contact us so we can investigate and delete it where required.

9. International processing and changes

Our providers may process information in countries other than yours, subject to their safeguards and applicable law. We may update this policy when StereoKe's features, providers, or legal obligations change. We will publish the revised date here and provide additional notice when a material change requires it.

10. Contact

For privacy questions or data requests, contact StereoKe: