Privacy Policy

Information We Collect

We collect the following categories of data:

• Account Information: email address, display name, username, profile photo, bio.
• Authentication Data: password (hashed by Firebase Auth), OAuth tokens for integrations (e.g., Spotify) when you connect accounts.
• Usage & Content: ratings, reviews, playlists, likes, comments, social activity, and other user-generated content.
• Messaging: direct messages and group chats you send/receive within the app.
• Device & App Diagnostics: crash logs and performance data (via Firebase Crashlytics/Analytics), IP address, device model, operating system, app version.
• Notifications & Identifiers: Firebase Cloud Messaging token for push notifications and advertising identifiers used by Google Mobile Ads.
• Camera Access: solely to scan QR codes for playlist sharing (no photos or videos are stored).
• Cookies & Similar Technologies: used on the web app and landing site for analytics and session management.

How We Use Your Information

• Provide and operate the Services (auth, profiles, messaging, playlists, discovery).
• Personalize recommendations and content (e.g., discovery features).
• Enable social features (follows, likes, comments, activity feed).
• Deliver push notifications and in-app messages.
• Monitor performance, fix bugs, and improve quality.
• Show ads and measure their performance (if ads are enabled).
• Comply with legal obligations and enforce our Terms.

Third-Party Services

We use the following providers:

• Firebase (Auth, Firestore, Realtime Database, Storage, Analytics, Crashlytics, Cloud Messaging).
• Google Mobile Ads (AdMob) for advertisements where applicable.
• Spotify API for music data and account linking (only when you connect).
• Last.fm for music metadata and recommendations.
• Genius for lyrics (where available).

These providers may process data on our behalf under their own privacy policies.

Data Sharing

We do not sell your personal information. We may share data with service providers listed above, with other users when you choose to post content publicly (e.g., reviews, playlists), or when required by law.

Ads and Analytics

If ads are shown, advertising partners (e.g., Google) may use cookies or mobile identifiers to show personalized ads subject to your device settings and local laws. You can opt out of personalized ads in your device settings or via Google’s Ads Settings where available.

Your Rights

Depending on your location (e.g., EU GDPR, Türkiye KVKK), you may have rights to access, correct, delete, or restrict the processing of your data, and to withdraw consent where applicable.

To exercise your rights or request account deletion, contact us at support@tuniverseapp.com.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. We may also retain limited data to comply with legal obligations, resolve disputes, and enforce agreements.

Security

We use industry-standard security measures and Firebase security rules to protect your data in transit and at rest. However, no method of transmission or storage is 100% secure.

Children’s Privacy

Our Services are not intended for children under 13. If you believe a child under 13 has provided us with personal information, please contact us to request deletion.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the “Last updated” date above.

Contact

For privacy inquiries, contact us at legal@tuniverseapp.com or visit our Contact page.