Privacy Policy

Last updated: 3 September 2026

1. Data controller

Vasili Cekaskin, Westtangente 71, 40880 Ratingen, Deutschland, is the data controller responsible for the processing of personal data described in this policy. Contact: vasili@cekask.in.

2. Data we collect

  • Account data — email address, username, avatar
  • Content you upload — songs, lyrics, cover art, comments, reactions
  • Usage data — plays, likes, peer relationships
  • Billing data — plan and subscription status (payments processed by Apple App Store, Google Play, and RevenueCat)
  • Device/technical data — IP address, device type, app version

3. How we use your data

To provide and operate the service, authenticate accounts, process subscriptions, send service-related notifications, and improve reliability and features. Uploaded audio is transcribed and analysed for automatic lyrics, tags, and mood (see section 5). We use only first-party usage analytics and do not embed third-party advertising or tracking networks.

4. Legal basis

Processing is based on performance of a contract (Art. 6(1)(b) GDPR — providing the service you signed up for), legitimate interest (Art. 6(1)(f) GDPR — security, abuse prevention, service improvement), and consent where required (Art. 6(1)(a) GDPR — e.g. optional communications).

5. Data sharing & processors

We share data only with service providers necessary to operate trackdemos, under data processing agreements. We do not sell personal data. Processors:

  • Supabase — authentication, database hosting, transactional email
  • Amazon Web Services (S3 & CloudFront) — audio and file storage/delivery
  • OpenAI — transcription and automatic tagging/mood of uploaded audio
  • RevenueCat, Apple App Store, Google Play — subscription billing

6. Data retention

We retain account and content data for as long as your account is active. When you delete your account, your account and content are deleted immediately; residual copies in encrypted backups are purged within 30 days. Billing and tax records are retained only where and for as long as required by law (up to 10 years under §§ 147 AO, 257 HGB).

7. Your rights

Under the GDPR you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You may also lodge a complaint with a supervisory authority. Contact vasili@cekask.in to exercise these rights.

8. Cookies & local storage

We use cookies and local storage strictly to keep you signed in and to remember your preferences (e.g. language and theme). We do not use third-party advertising or cross-site tracking cookies.

9. Contact

Questions about this policy: vasili@cekask.in