Chordbay — Privacy Policy

1. Introduction

This Privacy Policy explains how Chordbay ("we", "us") collects, uses, and protects your personal data when you use our mobile application and related services ("Service"). We operate in accordance with the EU General Data Protection Regulation (GDPR).

2. Data We Collect

We collect only the minimum amount of personal data necessary to operate the Service:

• Email address — required to create and manage your account.
• Password — stored securely in hashed form. We never store plain-text passwords.
• User-generated content (songs you upload) — stored so you can access and share them.

We do not collect analytics, tracking data, advertising identifiers, or any additional personal information.

3. Legal Basis for Processing

Under GDPR, we process your personal data based on:

• Contractual necessity: to create and maintain your account and allow you to use core features.
• Legitimate interest: to store your uploaded content and ensure the security and operation of the Service.

4. How We Use Your Data

Your data is used only for the following purposes:

• Account creation and authentication
• Secure login
• Storage and retrieval of your uploaded songs

We do not sell, rent, or use your personal data for advertising or analytics.

5. Data Storage & Location

All data is stored on servers located in Germany (European Union). This ensures that your data remains under GDPR protection at all times.

6. Data Sharing

We do not share your personal data with third parties except:

• Service providers necessary for hosting and secure data storage

No data is shared with advertisers, analytics providers, or external partners.

7. User-Generated Content

Any songs you upload to Chordbay are stored and associated with your account. You control what you upload and may delete your content at any time. Public sharing is optional and voluntary.

8. Data Retention

We keep your data only as long as your account remains active. When you delete your account, we delete your email, password hash, and all associated uploaded content.

9. Your GDPR Rights

As an EU user, you have the right to:

• Access your data
• Correct inaccurate data
• Delete your account and all stored data
• Export your data
• Object to processing

To exercise any of these rights, contact us at dev@chordbay.eu.

10. Security

We use industry-standard security measures to protect your data, including:

• Password hashing
• Encrypted connections (HTTPS)
• Secure server infrastructure hosted in the EU

11. Children

The Service is not intended for users under 13 years old. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are significant, we will notify users via an in-app message or updated date at the top of this page.

13. Contact

If you have questions or requests regarding your data, contact us at:

Email: dev@chordbay.eu