Privacy Policy

1. Who is responsible for your data

The controller of your personal information is an independent developer based in Tel Aviv, Israel. For any privacy question or request, contact us at privacy@jamjamia.com.

2. Information we collect

Account data. When you sign in with Google, we receive your name, email address and profile photo from Google.

Profile data. Information you choose to add, such as instruments, a photo and a short bio.

Content and band data. The bands, songs, chord sheets, lyrics, settings, favourites, invitations and memberships you create or interact with.

Usage and device data. Basic technical information needed to run and secure the Service, such as log data, device and browser type, approximate location inferred from IP, and interactions like playback and sync state.

Payment data. If you buy a paid plan, our third-party payment processor collects and processes your payment details. We receive limited information such as confirmation of payment and subscription status; we do not store your full card details.

3. How and why we use your information

We use your information to: sign you in and manage your account; provide and operate the Service, including syncing bands, songs, presence and playback state across your devices and bandmates; process subscriptions and payments; communicate with you about the Service; keep the Service secure and prevent abuse; comply with legal obligations; and maintain and improve reliability and features. We do not sell your personal information.

4. Legal bases (EEA / UK users)

Where the EU or UK GDPR applies, we rely on: performance of a contract (to provide the Service you asked for); legitimate interests (to secure, maintain and improve the Service, in a way that does not override your rights); consent (where we ask for it, which you can withdraw at any time); and legal obligation (where the law requires us to process data).

5. How we share information

With your bands. Content and profile details you add are shared with the band members you choose, as part of how the Service works.

With service providers (sub-processors). We use trusted providers to run the Service — for example Google for sign-in, hosting and storage providers, a payment processor, an email-delivery provider (to send you account and service emails), and image hosting/CDN providers. They may process your data only on our instructions and to provide their services to us.

Feedback you send us. If you submit feedback or contact support, the message and your contact details may be routed to the internal team-messaging and email tools we use to read and respond to it.

Third-party content. Album artwork and streaming links come from third parties (e.g. Apple, Spotify, YouTube, Unsplash) under their own terms.

Legal and safety. We may disclose information where required by law, to enforce our Terms, or to protect the rights, safety and property of our users or others.

Business transfers. If we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction.

6. International transfers

We and our providers may store and process your information in countries other than your own, including outside the EEA. Where we transfer personal data internationally, we use appropriate safeguards (such as the European Commission's Standard Contractual Clauses) where required by law.

7. Cookies & local storage

We use cookies and similar technologies (such as your browser's local/session storage and a service worker) to keep you signed in, remember preferences like font size, enable offline caching, and keep the Service working and secure. You can control cookies through your browser settings, though some features may not work without them.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it to comply with the law, resolve disputes or enforce our agreements. Content you shared with a band may remain available to that band.

9. Storage & security

Your data is stored on servers operated by us or our providers, and we use reasonable technical and organisational measures to protect it. However, no method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Your privacy rights (EEA / UK)

Subject to applicable law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent where we rely on it. You can exercise these rights by emailing us. You also have the right to lodge a complaint with your local data protection authority (in Israel, the Privacy Protection Authority). We will respond within the time required by law.

11. Your privacy rights (California)

If you are a California resident, you have the right to know what personal information we collect and how we use and share it, to request access to or deletion of it, and to non-discrimination for exercising your rights. We do not sell or share your personal information as those terms are defined under California law. To exercise these rights, contact us at the email below.

12. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data without appropriate consent, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you in the app.

14. Contact

Questions about your privacy, or want to exercise a right? Email us at privacy@jamjamia.com.