Privacy policy

Last updated: [DATE]

Draft, to be reviewed before publishing. Replace every [PLACEHOLDER].

PureLofi is a music player. It is built to work without an account and to know as little about you as it can. This page says what it does collect, why, and how to have it deleted.

Who is responsible

[FULL NAME]
[STREET, POSTCODE CITY, COUNTRY]
Email: [EMAIL]

Without an account

You can use every free part of PureLofi without signing in. Then the app stores on your device only:

• the tracks and scenes it has downloaded, so they play offline;
• your favorites and your settings (play order, sort);
• music you add from your own device. It never leaves your device and is never uploaded.

To count how the app is used, it sends anonymous usage events to PostHog (see below), for example that the app was opened, which track or scene was played, or that the Pro page was viewed. These events carry no name, no email and no free text.

With an account (optional)

If you sign in, we store your email address, how you signed in (Apple, Google or email code) and, if Apple or Google provides it, your name. Apple may give us a private relay address instead of your real one. We use this only to keep your account and your favorites the same on all your devices. Your favorites are then stored with your account as well.

When you are signed in, usage events are linked to your account's internal ID, never to your email or name.

PureLofi Pro

Purchases are handled by Apple (App Store) or Google (Google Play). We never see your payment details. RevenueCat processes the purchase receipts on our behalf so the app knows whether Pro is active. If you are signed in, your purchase is linked to your account so Pro works on all your devices.

Services we use

• Supabase — database, file storage and sign-in. Region: [REGION, e.g. EU (Frankfurt)].
• PostHog — anonymous and account-linked usage statistics, hosted in the EU.
• RevenueCat — subscription status for PureLofi Pro.
• Resend — sends the sign-in code email.
• Apple and Google — sign-in (only if you choose them) and in-app purchases.

Each of these processes data only to provide its service to us, under a data processing agreement where required. Some of them are based in the USA; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

Legal basis

We process account and purchase data to provide the service you asked for (Art. 6(1)(b) GDPR). Usage statistics are based on our legitimate interest in understanding and improving the app (Art. 6(1)(f) GDPR) — [or: your consent, if a consent prompt is added].

How long we keep it

Account data and favorites are kept until you delete your account. Usage statistics are kept for [RETENTION, e.g. 12 months]. Purchase records are kept as long as the law requires.

Deleting your data

In the app, open the menu → Account → Delete account. This deletes your account and your favorites immediately. You can also email us and we will do it for you. A subscription is cancelled in your App Store or Google Play settings, not by deleting the account.

Your rights

You can ask us for access to, correction of, deletion of, or a copy of your data, and object to or restrict its processing. You can also complain to a data protection authority.

Children

PureLofi is not directed at children under 13 (16 in some countries), and we do not knowingly collect their data.

This website

purelofi.app sets no cookies and runs no analytics. Our host, Vercel, keeps short-lived server logs (IP address, time, page) to run and protect the site.

Changes

If this policy changes, the new version is published here with a new date.