Privacy Policy for Time to Sing App

1. Introduction

This Privacy Policy explains how Kirill Zolygin und Karine Kardasheva GbR ("we," "us," or "our") collects, uses, and shares information about you when you use our Time to Sing mobile application, website, and related services (together, the "Service"). We respect your privacy and are committed to protecting your personal data.

2. Information We Collect

Personal Data

We collect the following personal information:

• Name
• Email address
• Authentication identifiers and sign-in provider information when you sign in with email, Google, or Apple
• Profile picture or avatar URL (optional)
• Profile settings such as language, voice type, singing skill, and practice goals
• Support and feedback messages you submit

Usage Data

We automatically collect certain information about how you use our App, including:

• App features you access
• Exercise progress, completed exercises, practice duration, favorites, playlists, and reminder settings
• Onboarding, paywall, trial, and subscription-related interaction events
• Device and app metadata such as platform, app version, native build version, device name, operating system, and notification permission state
• Push notification tokens and delivery metadata when you enable notifications
• Timezone and timezone offset used to schedule reminders and future timezone-aware push notifications
• Time and date of visits, activity, and relevant app events
• App performance, error, and diagnostic data

Subscription and Purchase Data

If you start a trial, subscribe, or make a purchase, we may process subscription-related information including:

• RevenueCat app user identifiers and entitlement status
• Product identifiers, purchase, trial, renewal, cancellation, expiration, refund, and billing issue events
• Store platform information from Apple App Store or Google Play
• Country, currency, and pricing metadata when provided by the app stores or RevenueCat

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and maintain our App
• To manage your account
• To provide free trials, premium access, subscriptions, and entitlement checks
• To send practice reminders, trial reminders, account messages, updates, and re-engagement push notifications when enabled
• To personalize language, practice, and onboarding experiences
• To provide customer support and process feedback
• To improve, debug, secure, and measure the Service
• To comply with legal, tax, accounting, app store, and fraud-prevention obligations

4. Data Storage and Security

Your account and product data is primarily stored and processed using Supabase, including Supabase Auth, PostgreSQL database, Edge Functions, and storage services. Subscription and purchase state is processed through RevenueCat and the applicable app stores. We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

5. Data Sharing

We do not sell your personal data. We may share or process personal data with third parties only where needed to operate the Service or where legally permitted, including:

• Supabase for authentication, database, storage, and backend functions
• RevenueCat for subscription, entitlement, and purchase lifecycle management
• Apple App Store, Google Play, Apple Sign In, and Google Sign-In for authentication, app distribution, payments, subscriptions, refunds, and account management
• Expo and push notification infrastructure for push token handling and notification delivery
• Service providers that help us host, secure, maintain, analyze, or support the Service
• When required by law or to protect our rights, privacy, safety, users, or property
• In connection with a business transfer such as merger, acquisition, restructuring, or sale of assets

6. Legal Basis for Processing

Where GDPR applies, we process personal data based on one or more of the following legal bases:

• Performance of a contract, for example to provide your account, exercises, progress, premium access, subscriptions, and support
• Your consent, for example for push notifications where consent is required
• Our legitimate interests, for example improving the Service, preventing abuse, debugging, analytics, and re-engagement where permitted
• Compliance with legal obligations, for example tax, accounting, consumer protection, and app store requirements

7. Your Rights Under GDPR

As a user from the European Economic Space (EEA), you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure of your data
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling

To exercise these rights, please contact us at ···

8. Data Retention and Account Deletion

We retain personal data only for as long as necessary to provide the Service, maintain your account, support subscriptions, comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. If you delete your account or request deletion, we delete or anonymize account-related data from active systems where reasonably possible, subject to technical processing time, backups, legal obligations, app store and payment records, fraud prevention, tax, accounting, and legitimate business record requirements.

9. Children's Privacy

Our App is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside, including where our service providers operate. These countries may have data protection laws that differ from the laws of your country. Where required, we rely on appropriate safeguards such as contractual protections, standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.