Privacy Policy

We collect only what we need to run the Service:

• Account information — your email address and name or display name, created when you sign up, and your mobile phone number if you choose to give us one. Authentication is handled through Amazon Cognito.
• Streaming activity — the tracks you play, listening duration, songs you like, playlists you build, artists you follow, and similar in-app actions. This powers playback history, recommendations, charts, and the royalty accounting that pays artists.
• Subscription & payment information — if you subscribe, your payment is processed by Stripe. We receive subscription status and limited billing metadata; we do not store full card numbers.
• Communications — if you join our mailing list or contact support, we keep your email and the messages you send us.
• Technical & usage data — basic device, browser, and log information, plus privacy-conscious product analytics (see Analytics & cookies).

• Provide, maintain, and secure the Service and your account.
• Play music, remember your library, and personalize recommendations.
• Calculate streams and pay artists their share of subscription revenue.
• Process subscriptions and send account and transactional messages.
• Understand aggregate usage so we can improve the product.
• Detect, prevent, and address fraud, abuse, and technical issues.
• Comply with legal obligations.

We do not sell your personal data. We share it only with service providers who help us operate, and only as needed:

• Amazon Web Services — authentication (Cognito), storage, content delivery, and sending sign-in text messages (AWS End User Messaging).
• Stripe — subscription and payment processing.
• PostHog — product analytics (see below).
• Artists — creators see aggregate stream counts and audience metrics for their own music, not your personal contact details.
• Legal & safety — when required by law, or to protect the rights, safety, and property of IMS, our users, or the public.

Giving us a mobile phone number is optional. If you add one and check the box agreeing to receive texts, we use it only to send you one-time sign-in and verification codes. We do not send marketing or promotional texts.

• How often. Message frequency varies. You get a text only when you ask for a code.
• Cost. Message and data rates may apply, depending on your mobile plan.
• Opting out. Reply STOP to any message to stop receiving texts. Reply HELP for help, or contact us using the details below. If you opt out you can still sign in by email.
• No sharing. We do not sell, rent, or share your phone number or your consent to receive texts with third parties for their marketing. Mobile information is shared only with the service providers that deliver our messages (Amazon Web Services and the wireless carriers).
• Changes and removal. You can remove your phone number in your account settings at any time, and it is deleted with your account.

Carriers are not liable for delayed or undelivered messages. See also the text-message terms in our Terms.

We use PostHog for privacy-conscious product analytics — pageviews, plays, shares and signup-funnel events that help us understand how the Service is used. This data is sent to PostHog’s servers as a third-party processor. PostHog runs without cookies: it stores nothing on your device, and counts visitors with an anonymous hash computed on its servers. It does not run in our iOS or Android app. We do not use advertising trackers, and we do not run Google Analytics, a Meta pixel, or similar ad-tech. We use cookies and local storage only for essential functions like keeping you signed in and remembering playback preferences.

We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account we remove your personal data, except where we must retain limited records to meet legal, tax, or financial obligations (for example, artist-payout and transaction records).

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email support@indiemusicstreams.com.

You can request deletion of your account and associated personal data at any time. See Delete your account for how to request it and what happens to your data.

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the app or by email.

Questions about this policy or your data? Email support@indiemusicstreams.com or visit our Support page.