Privacy Policy
This policy explains how aTitan, Inc. ("aTitan," "we," "us," or "our") handles information when you use connectR, including its mobile apps, websites, and related services.
Information we collect
- Account and profile data: email address, authentication records, policy-acceptance records, optional phone number, display name, username, profile details, profile location, and profile image. If you sign in with Apple or Google, we receive the account information that provider makes available with your permission.
- Connected music-service data: identifiers and authorization tokens for services you connect, plus library, playlist, playback, and listening information needed to provide the features you request.
- Content and social activity: posts, comments, likes, shares, playlists, follows, blocks, reports, listening parties, broadcasts, and other interactions you submit.
- Uploads and support data: profile images, post media, bug-report descriptions, and screenshots you choose to attach.
- Location and nearby-feature data: precise foreground location when you ask connectR to find nearby places, parties, or broadcasts, and information about nearby supported devices when you use device-discovery features.
- Device and diagnostics data: app version, device and operating-system information, IP address, service connection status, crash reports, performance traces, logs, and similar reliability data.
- Usage analytics: when usage analytics is on, the app records how connectR is used: screens viewed and time spent on them, sessions, features used (such as sign-up and sign-in method, connecting a music service, likes, shares, posts, comments, follows, searches, listening parties, Identify Song, device connections, and opening notifications), and listening activity, meaning which music service played and for how long. This is tied to a random identifier for your app installation, together with device model, operating-system and app version, language, and approximate location (country, region, and city) derived from your IP address. We do not include the text of your searches, and we do not collect advertising identifiers (Apple IDFA or Google Advertising ID).
- Age-assurance data: an age bracket, whether it came from Apple, Google Play, or self-declaration, the device platform, policy version, and declaration and expiration times. We do not receive or retain your precise birth date. If you use the fallback, your device calculates the bracket and immediately discards the date.
Permissions and device access
connectR requests access only when needed for a feature you choose to use. Depending on your device and features, this can include:
- Camera and photos: to scan a QR code or choose and upload an image.
- Bluetooth and local network: to discover, connect to, and communicate with supported nearby devices.
- Location: precise foreground location when you invoke a nearby-place, party, or broadcast feature that needs it. connectR does not request background location access.
- Microphone: only while you use Identify Song. When you tap it, connectR listens for a few seconds and hands the audio to Apple’s ShazamKit, which converts it into a nonreversible audio signature and sends that signature to Apple to match against the Shazam catalog. connectR does not store the recording, does not send audio to its own servers, and stops listening as soon as a match is found, the attempt times out, you cancel, or you leave the app.
You can manage these permissions in your device settings. Disabling one may prevent the related feature from working.
How we use information
- Provide, personalize, secure, and maintain connectR.
- Authenticate accounts and connect services you authorize.
- Enable playback, library, playlist, sharing, social, and device features.
- Respond to support requests and investigate bugs, abuse, fraud, and security incidents.
- Understand how connectR is used, measure which features and music services people use and how much they listen, and use that to improve the app.
- Screen text, hold uploaded media for safety review, process user reports, and improve reliability and user safety.
- Comply with law and enforce our Terms and Community Guidelines.
How information is shared
We share information only as needed to operate connectR, fulfill your requests, or meet legal and safety obligations:
- Music providers: Apple Music, Spotify, SoundCloud, and TIDAL, when you connect them or request an action involving them. Their own privacy policies govern their services.
- Apple (ShazamKit): when you use Identify Song, an audio signature derived from what the microphone hears is sent to Apple for song matching, and the resulting match may be used to search or open the song in the services above, YouTube, or Shazam. Apple’s privacy policy governs that processing.
- Google (Google Analytics for Firebase): receives the usage analytics described above, when usage analytics is on, and processes it to provide analytics reports to us. We do not use it for advertising. Google’s privacy policy governs its processing.
- Sign-in providers: Apple and Google, when you choose their account sign-in option.
- Location providers: Google Places receives a location-biased or nearby search from our backend when you ask connectR to find places.
- Service providers: Supabase for authentication, databases, and storage; Render for backend hosting; Upstash for caching; Expo for app delivery and updates; and Sentry and Honeycomb for crash, performance, and service diagnostics.
- Other users and the public: information and content you intentionally publish or share through social features.
- Legal and safety recipients: when reasonably necessary to comply with law, protect rights or safety, prevent abuse, or complete a corporate transaction.
We require service providers that process connectR user data to protect it consistently with this policy and applicable platform requirements. We do not sell personal information or use it for third-party behavioral advertising.
Data retention and security
Account and profile data is generally kept while your account is active. Connected-service tokens are kept until you disconnect the service or delete your account. If an identity or music provider is temporarily unavailable during deletion, connectR may retain only the encrypted revocation credential, without the connectR user ID, for automated retries. It is deleted after successful revocation and in all cases within seven days. Content and uploads are kept until you delete them, delete your account, or they are removed through moderation. Uploaded media may be temporarily withheld from other users while reviewed. Reports, moderation decisions, security records, diagnostics, and limited enforcement records may be kept longer when reasonably necessary to investigate abuse, protect the service, resolve disputes, or comply with law. Backup copies may remain temporarily until overwritten under normal schedules. Event-level usage analytics is kept in Google Analytics for no longer than 14 months; aggregated reports that do not identify you may be kept longer.
We use administrative and technical safeguards designed to protect information, but no system can guarantee absolute security.
Your choices and account deletion
- Update profile information and disconnect supported music services in the app.
- Manage device permissions in your operating-system settings.
- Turn usage analytics off or on at any time in Settings → Privacy → Share Usage Analytics. The setting applies to the device you change it on. It starts off, until you turn it on, when your device’s region or time zone is in the European Economic Area, the United Kingdom, or Switzerland; elsewhere it starts on. Turning it off stops future analytics collection from that device; data already collected is retained as described above.
- Stop future app-side diagnostic collection by removing the app, subject to diagnostic information already collected and retained as described above.
- Delete your account from Settings → Account → Delete Account.
- Request deletion without the app through our account-deletion page.
Deleting an account removes the account and associated user data from active systems and revokes captured Apple, Google, and SoundCloud authorization credentials. Providers without a supported programmatic revocation interface are disconnected by deleting connectR's stored credentials and stopping future access. Deletion does not cancel or delete a separate music-provider account or subscription. Limited information may be retained for legal, security, fraud-prevention, or dispute-resolution purposes, and backup copies may remain temporarily until overwritten under normal retention schedules.
Children
connectR accounts are available to users age 13 and older on iOS and age 18 and older on Android. We use platform-provided or self-declared age brackets before account access and reassess them annually. Existing accounts assessed as under 13 are blocked and active sessions are revoked. On iOS, ages 13–15 cannot access or interact with potentially sensitive community content, while ages 16–17 receive warning-and-reveal controls. Users under 18 cannot register, sign in, or access an account through the Android app. See Age Suitability for details and review options.
International use
Your information may be processed in the United States and other places where we or our service providers operate. Privacy protections may differ from those in your jurisdiction.
Changes to this policy
We may update this policy. We will revise the date above and provide additional notice when required by law.
Contact us
Questions, consent-withdrawal requests, or other privacy requests can be sent to support@atitan.tech.