Kovion LTD is the controller of personal data described in this notice when it operates Kovify Player. This notice explains how we process personal information under applicable United Kingdom data protection law, including the UK GDPR and Data Protection Act 2018.
1. Information we collect
- Account data: email address, username, authentication identifiers, profile settings, and account status.
- Music-library data: uploaded audio files, storage paths, titles, artists, albums, genres, artwork, formats, and technical media information.
- Listening and preference data: playback events, listening duration, likes, playlists, queue state, EQ settings, and other player preferences.
- Technical and security data: IP address, device and browser information, request logs, timestamps, and diagnostic or security events.
- Communications: information you provide when requesting support, exercising a privacy right, or sending a legal or copyright notice.
2. How and why we use information
- to create and secure accounts, deliver playback, store your library, sync preferences, and provide requested features—necessary to perform our contract with you;
- to generate adaptive radio from your listening activity—necessary to provide the feature and, where applicable, based on our legitimate interest in making the Service useful and relevant;
- to prevent abuse, investigate faults, maintain availability, and improve performance—our legitimate interests in operating a safe and reliable service;
- to respond to support, privacy, and legal requests—performance of our contract, legitimate interests, and legal obligations; and
- to comply with law, enforce rights, and protect users or the public where required by a legal obligation or legitimate interest.
3. Adaptive radio and profiling
Kovify’s radio ranking considers listening time, completed and skipped plays, repeat plays, likes, recent listening, artists, and genres. This processing selects music from your library and does not make decisions producing legal or similarly significant effects. You can influence it by changing likes and clearing your listening history.
4. Cookies and local storage
We use storage that is necessary to maintain authentication sessions, secure the Service, remember audio preferences, and acknowledge the privacy notice. Kovify does not use third-party advertising cookies in the supplied Service. If optional analytics or advertising technology is introduced, this notice and the consent controls must be updated before that technology is enabled.
5. Who receives information
We may share information with processors that provide database, authentication, storage, network delivery, security, error monitoring, and support infrastructure. This may include Supabase and Cloudflare where configured for the Service. Processors may use information only under our instructions and contractual safeguards. We may also disclose information where required by law, to protect legal rights or safety, or as part of a corporate transaction subject to appropriate safeguards.
We do not sell personal information.
6. International transfers
Some service providers may process information outside the United Kingdom. Where required, we use an adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard.
7. Retention
We keep account and library data while your account is active and as needed to provide the Service. Listening history remains until you clear it, close your account, or it is removed under the applicable retention schedule. Operational logs are kept only for the period reasonably needed for security, troubleshooting, and legal compliance. Following deletion, residual encrypted backups may remain for a limited rotation period before being overwritten.
8. Security
We use access controls, encrypted transport, restricted credentials, row-level database controls, monitoring, and data minimisation measures appropriate to the nature of the Service. No internet service can guarantee absolute security, so use a unique password and protect access to your devices.
9. Your rights
Depending on the law that applies, you may have the right to:
- access personal data and obtain a copy;
- correct inaccurate or incomplete data;
- request erasure or restriction;
- receive certain data in a portable format;
- object to processing based on legitimate interests;
- withdraw consent where processing relies on consent; and
- complain to a data protection authority.
To exercise a right, email [email protected]. We may need to verify your identity. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
10. Children
The Service is not directed to children under 13. Where a young person cannot lawfully provide required consent or enter the applicable agreement, a parent or guardian must act for them. Contact us if you believe a child’s data has been provided contrary to this notice.
11. Changes and contact
We may update this notice when the Service, our providers, or the law changes. Material changes will be communicated through the Service where appropriate.
Data protection contact:
Kovion LTD
SET NEXT_PUBLIC_LEGAL_ADDRESS BEFORE LAUNCH
[email protected]