Privacy Policy

Last updated: March 22, 2026

Rhythmic ("we," "our," or "us") operates the Rhythmic AI DJ web application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Summary: We collect only what's needed to run the DJ experience. We don't sell your data. Spotify controls your music data. You can delete your account anytime.

1. Information We Collect

Account Information:

Email address and display name (when you sign up directly)
Google profile information (name, email, profile picture) if you sign in with Google
Spotify profile information (display name, email, account type) if you connect Spotify

Spotify Data (via Spotify API):

Your top tracks and recently played tracks (for personalized DJ recommendations)
Playback state (play, pause, current track) to control the DJ session
Audio features of tracks (BPM, energy, danceability) for intelligent mixing

We access Spotify data only through Spotify's official API with your explicit authorization. We do not store your Spotify listening history beyond the current session.

Usage Data:

DJ session history (tracks played, session duration, search queries)
Saved mixes you create
Preferences and settings

Technical Data:

We do not use cookies for tracking. We use localStorage for authentication tokens only.
Cloudflare may collect standard web server logs (IP address, request timestamps) as part of their infrastructure.

2. How We Use Your Information

To provide and operate the AI DJ service
To personalize music recommendations using AI
To authenticate your identity and maintain your session
To save your mixes and preferences
To improve the Service

We do not use your information for advertising or sell it to third parties.

3. Third-Party Services

We integrate with the following third-party services:

Spotify: When you connect Spotify, you authorize us to access your Spotify data as described in Spotify's Privacy Policy. You can revoke access at any time from your Spotify account settings.

Google: If you sign in with Google, we receive your basic profile information pursuant to Google's Privacy Policy. You can revoke access from your Google account permissions.

OpenRouter / AI: We send track metadata (song names, artist names, audio features) to AI services to generate DJ recommendations. No personal user data is sent to AI services.

Cloudflare: Our Service is hosted on Cloudflare Workers. See Cloudflare's Privacy Policy.

4. Data Storage and Security

Your data is stored in Cloudflare's global infrastructure (D1 database, KV store). We use industry-standard security measures including:

Encrypted connections (HTTPS/TLS) for all data in transit
Hashed passwords (never stored in plaintext)
JWT-based authentication tokens
Encrypted Spotify tokens stored server-side only

5. Data Retention

Account data is retained until you delete your account
DJ session data is retained for up to 90 days, unless saved as a mix
Saved mixes are retained until you delete them or close your account
Spotify access tokens are refreshed automatically and not retained beyond their expiration

6. Your Rights

You have the right to:

Access your personal data
Delete your account and all associated data
Revoke Spotify or Google access at any time
Export your saved mixes
Opt out of any data collection by not using the Service

7. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected, used, and shared
Right to request deletion of your personal information
Right to opt out of the sale of personal information — we do not sell personal information
Right to non-discrimination for exercising your CCPA rights

To exercise these rights, contact us at the email below.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

Rhythmic

Email: privacy@rhythmic.app