ScoraSong

Effective Date: January 20, 2026

This Privacy Policy describes how Scora ("Company," "we," "our," or "us") collects, uses, and protects your personal information when you use the Scora mobile application and associated services ("Services").

By using the Services, you consent to the practices described in this Privacy Policy.

1. Information We Collect

a. Information You Provide Directly

• Account Information: Email address, username, and password
• Profile Details: Display name, profile picture (optional)
• Payment Information: Billing address and payment method (processed securely via third-party providers such as Stripe or Apple Pay)
• Communications: Feedback, support requests, and survey responses

b. Information from Third-Party Services

When you connect your Spotify or other music streaming accounts to Scora, we collect:

• Listening History: Recently played tracks, play counts, and timestamps
• Library Data: Saved songs, albums, and playlists
• Top Content: Your most-played artists, tracks, and genres over various time periods
• Profile Information: Your streaming service username and profile picture

We access this data through official APIs using OAuth authentication. We do not store your third-party login credentials.

c. Information Collected Automatically

• Device & Usage Data: IP address, device type, operating system, app version, app interactions, and crash logs
• Analytics Data: Features used, session duration, and navigation patterns

2. How We Use Your Information

• To create and manage your user account
• To provide personalized music insights, statistics, and recommendations
• To display your listening history and trends
• To process subscription payments and send receipts
• To improve and optimize the app experience
• To detect and prevent fraud, abuse, or misuse
• To send important updates, service notifications, or promotional content (with your consent)
• To respond to your support requests and feedback

3. Sharing Your Information

We do not sell your personal information. However, we may share your data with:

• Third-Party Service Providers: Payment processors, cloud hosting providers (e.g., Supabase, Railway), and analytics platforms (e.g., Mixpanel, Firebase) that help us operate the Services
• Music Streaming Services: We send authentication tokens to services like Spotify to retrieve your data on your behalf
• Legal or Regulatory Authorities: When required by law, court order, or to protect our rights, safety, or the safety of others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the new entity

4. Data Retention

We retain personal information only as long as necessary to:

• Provide the Services and fulfill the purposes outlined in this policy
• Comply with legal or regulatory requirements
• Resolve disputes and enforce our agreements

You may request deletion of your account and associated data at any time. Music data synced from third-party services may be refreshed or deleted when you disconnect your account.

5. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to certain data uses or withdraw consent
• Request a copy of your data in a portable format
• Disconnect third-party music services at any time

To exercise these rights, contact us at privacy@scorasong.com. We may require verification of your identity before fulfilling requests.

6. Data Security

We implement industry-standard security measures to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure cloud hosting with access controls
• OAuth 2.0 for third-party authentication (we never see your streaming service password)
• Regular security reviews and updates

However, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

7. Third-Party Services

Scora integrates with third-party services such as Spotify. Your use of these services is governed by their respective privacy policies:

• Spotify: spotify.com/privacy

We are not responsible for the privacy practices of third-party services. We encourage you to review their policies.

8. Children's Privacy

Scora is not intended for use by individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect or solicit personal data from children. If we learn that we have collected data from a child without parental consent, we will delete it immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States. These countries may have different data protection laws. By using the Services, you consent to such transfers.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted within the app or on our website, and the "Effective Date" will be updated accordingly.

Your continued use of the Services after changes are posted constitutes acceptance of the updated policy. We may notify you of significant changes via email or in-app notification.

11. Contact Us

For questions or concerns about this Privacy Policy or your data, contact:

contact@scorasong.com