Directly from you:

• Account details: name, email address, birthday, and password (or your Google/Apple account identifier if you sign in that way).
• Profile details: photo, city, and - for DJs - bio, genres, hourly rate, gig photos/videos, and audio tracks.
• Booking details: event date, venue, guest count, and messages exchanged with the other party to a booking.
• Payment details: handled by a third party payment provier on our behalf. We store the booking amount and a third party payment provier's references for the transaction, not your card number.

Automatically:

• A device push-notification token, so we can notify you about booking activity.
• Basic technical data (IP address) used only to rate-limit abusive requests, not stored long-term or tied to your profile.

• To create and secure your account, and let you sign in.
• To operate bookings: showing DJ profiles to fans, sharing booking and message details between the fan and DJ involved, and processing payments.
• To send booking-related notifications (push and email) and, if you opt in, product updates.
• To keep the service secure and prevent abuse.

• The other party to a booking (e.g. a DJ sees the fan's name and booking details they submitted, and vice versa).
• Service providers who process data on our behalf: Supabase (database, authentication, file storage), Firebase (push notifications), a third party payment provier (payments), Resend (transactional email), and Upstash (rate limiting).
• We do not sell your personal information, and we do not share it with advertisers.

• Edit your profile information at any time from your account settings.
• Disable push notifications in your device settings.
• Delete your account from your profile page. This removes your personal data and photos and permanently signs you out. Booking, message, and payment records tied to other users are kept in anonymized form, since we and they may have a legal or financial obligation to retain them.

We keep account data for as long as your account is active. After deletion, anonymized booking and payment records may be retained where required for accounting, tax, or fraud prevention purposes.

Groove is not directed at children and account holders must be at least 16 years old.

Questions about this policy or your data can be sent to privacy@grooveapp.me.