This Privacy Policy explains how Pjesmio (“we”, “us”, “our”) collects, uses and protects your personal data when you use the Pjesmio mobile application and the website at pjesmio.app (together, the “Service”). We comply with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), the California Consumer Privacy Act (CCPA/CPRA) where applicable, the Apple App Store Review Guidelines and the Google Play Developer Program Policies.
The controller responsible for processing your personal data within the meaning of the GDPR is:
Pjesmio
Operator: Mathias Salman
Country: Austria
Email: contact@pjesmio.app
If you have any questions about this Privacy Policy or how your data is processed, you can contact us at any time using the address above.
| Purpose | Data categories | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Provide the core service: create an account, log in, store and display your songs, run live presentation rooms. | Account data, user-generated content, authentication tokens. | Performance of a contract (Art. 6(1)(b)) |
| Display your name, profile picture and content to other users so that the social features (rooms, comments, likes) can work. | Display name, avatar, content you publish. | Performance of a contract (Art. 6(1)(b)) |
| Use of camera or photo library to upload an image. | Photo selected or captured by you. | Consent (Art. 6(1)(a)) — you grant this through the operating system permission dialog. |
| Send local notifications about activity in your rooms. | Notification preference flag. | Consent (Art. 6(1)(a)) — granted via the OS notification dialog; can be revoked at any time in device settings. |
| Keep the service secure (rate-limit abuse, detect fraudulent log-ins, defend against attacks). | IP address, timestamps, basic device info. | Legitimate interests (Art. 6(1)(f)) — running a safe and reliable service. |
| Respond to your support requests and exercise of your rights. | Email correspondence, account data. | Legitimate interests (Art. 6(1)(f)) and legal obligation (Art. 6(1)(c)). |
| Comply with legal obligations (e.g. respond to lawful requests from authorities). | Whatever the obligation requires. | Legal obligation (Art. 6(1)(c)). |
We do not use your data for advertising, profiling or automated individual decision-making with legal effect.
The mobile app requests the following operating-system permissions only when you actively try to use a feature that needs them. You can refuse or revoke each one at any time in the system settings of your device.
| Permission | When asked | Why |
|---|---|---|
| Camera | When you tap “Take Photo” to set a cover image for a song, room or profile. | To capture a photo that you choose to upload. We do not take photos in the background and we do not record video. |
| Photo Library | When you tap “Photo Library” to pick an existing image. | To read the single image you select. We do not browse, scan or index your library. |
| Add to Photo Library | If you choose to save an image to your library. | To write the file you asked us to save. |
| Microphone | Declared by the system because the camera capture interface can switch to video mode; the app itself does not record audio. | Required by iOS when offering camera capture. We do not transmit microphone audio anywhere. |
| Notifications | When you enable notifications in the app settings. | To inform you of activity in rooms you participate in. These notifications are generated locally by the app and are not sent through Apple Push (APNs) or Firebase Cloud Messaging. |
We do not sell your personal data. We share it only with the parties listed below and only to the extent necessary.
These providers are contractually bound to process data only as instructed by us and to apply appropriate technical and organisational security measures (Art. 28 GDPR).
Content you publish in the Service (songs, comments, profile name, profile picture, rooms you create) is by design visible to other registered users. Do not include personal information you do not wish to be public.
If you install the app from the Apple App Store or Google Play, the relevant platform receives basic install and crash information governed by its own privacy policy.
We may disclose data if required by applicable law, court order or a binding request from a public authority, or where necessary to protect our rights, your safety or the safety of others.
Some of our processors (notably Supabase Inc.) are based outside the European Economic Area. Where personal data is transferred to a country that has not been deemed by the European Commission to provide an adequate level of data protection, the transfer is covered by the European Commission's Standard Contractual Clauses and any supplementary technical and organisational measures the recipient has put in place. You can request a copy of the relevant safeguards by writing to contact@pjesmio.app.
| Data | Retention |
|---|---|
| Account data (email, name, avatar) | For as long as your account exists. Deleted within 30 days after you request account deletion (with limited residual copies in encrypted backups up to 90 days). |
| User-generated content (songs, comments, rooms) | Until you delete the content yourself or until your account is deleted. If you choose to leave songs publicly available after deletion, that choice will be confirmed at the time of deletion; otherwise content is removed with the account. |
| Uploaded images | Same as the content they belong to. |
| Server access logs | Up to 90 days, then deleted automatically. |
| Support emails | Up to 24 months after the matter is closed. |
| Data we must keep for legal reasons | For the statutory period (e.g. tax records). |
If the GDPR applies to your processing, you have the following rights:
To exercise any of these rights, contact contact@pjesmio.app. We will respond within 30 days. We do not charge a fee unless your request is manifestly unfounded or excessive.
You can delete your Pjesmio account and the personal data associated with it in either of the following ways:
Residual copies in encrypted backups are overwritten in the normal backup rotation within at most 90 days. Aggregated and fully anonymised data (which can no longer be linked to you) may be retained.
The Service is not directed at children. We do not knowingly collect personal data from children under the age of 16 (or under 13 where this Service is used from the United States and the Children's Online Privacy Protection Act applies). If you are a parent or legal guardian and become aware that your child has created an account, please contact us at contact@pjesmio.app and we will delete the account.
We protect your data with measures appropriate to the risk, including:
No method of transmission over the internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security. If we ever become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will inform you without undue delay in line with Art. 34 GDPR.
The website and app do not use third-party advertising cookies. The Service stores the following on your device, all of which are strictly necessary for the Service to work:
localStorage so you stay logged in.localStorage.IndexedDB and a Service Worker cache so that the app starts when you are offline.You can clear this data at any time from your browser or device settings. Doing so will sign you out and remove the offline cache.
Pjesmio does not display advertising, does not embed advertising SDKs, does not use cross-app tracking, and does not request the iOS App Tracking Transparency prompt. Pjesmio does not currently use a third-party analytics SDK. The only behavioural information we may look at is high-level, aggregated counters generated server-side (for example, “number of songs published this week”), which cannot identify you individually.
If you are a California resident, you have the right to:
To submit a request, write to contact@pjesmio.app.
We may update this Privacy Policy from time to time, for example to reflect changes in the app or in applicable law. We will post the updated version at this URL and update the “Last updated” date at the top. If the changes are material we will notify registered users by email or by a notice inside the app before the changes take effect.
Pjesmio — Mathias Salman, Austria
Email for privacy enquiries and rights requests: contact@pjesmio.app
Subject lines we recognise: “Delete account”, “Data access request”, “Privacy question”.
This document is provided in English. A translation into German or other languages can be requested at the address above.