Harmonni Privacy Policy

Harmonni ("Harmonni," "we," "us," or "our") operates the Harmonni music streaming application at harmonni.space (the "Service"), including account creation, music and video streaming, playlists, uploads, and social features such as following artists and other users. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have, including when you sign in with Google.

By using Harmonni, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

a. Account information

When you create a Harmonni account directly, we collect your first name, last name, email address, and a password, which we store only as a salted, one-way bcrypt hash — we never store or have access to your plaintext password.

b. Information from Google Sign-In

If you choose to sign in or sign up using "Sign in with Google," Google shares the following data with Harmonni, as attested by your Google Account:

• Your name (given name and family name)
• Your email address, and whether Google has verified it
• Your Google Account profile picture
• A unique Google account identifier, used to recognize your account on future sign-ins

We request only Google's basic sign-in scopes (your name, email address, and profile picture). We do not request access to your Gmail, Google Drive, Google Contacts, Calendar, or any other Google product or data.

c. Content you upload

If you upload content to Harmonni — such as audio tracks, music videos, cover art, album artwork, or a profile picture — we store that content and any metadata you provide about it (title, artist, genre, lyrics, credits, etc.).

d. Usage and activity data

We collect information about how you use the Service: songs and videos you play, likes, follows, playlists you create, watch time on videos, search queries, and listening history. We use this to operate core features like recently played, top tracks, and activity from artists and users you follow.

e. Technical and device data

We automatically collect limited technical data needed to operate the Service securely, including your IP address (used to apply rate limits and prevent abuse of our sign-in and upload endpoints) and basic request metadata such as browser/device type. We do not use this data for advertising or tracking you across other apps or websites.

f. Cookies and local storage

We use a small number of first-party cookies (token and userRole) and browser local storage to keep you signed in and to remember your session. We do not use third-party advertising or analytics cookies.

We use the information described above solely to provide, maintain, and improve Harmonni's functionality. Specifically, we use it to:

• Create, authenticate, and secure your account (including via Google Sign-In)
• Operate core features: streaming, playlists, likes, follows, uploads, comments, and reports
• Personalize your experience, such as recently played, recommendations, and activity from people you follow
• Detect, prevent, and investigate fraud, abuse, and violations of our terms
• Respond to support requests and communicate important account or service notices
• Maintain the security, integrity, and reliability of the Service (e.g., rate limiting)

We do not use Google user data for serving advertisements, and we do not use Google user data to build profiles for advertising or marketing purposes unrelated to Harmonni's core functionality.

We do not sell your personal information, and we do not sell or rent Google user data to any third party. We share information only in the following limited circumstances, and only as needed to provide and improve the Service:

• Infrastructure service providers who process data on our behalf, under contract, solely to operate Harmonni: our database is hosted by Neon (Postgres database hosting), and uploaded media files (audio, video, images) are stored via Cloudflare R2 (object storage). These providers do not use your data for their own independent purposes.
• Google, solely to verify your identity when you use Sign in with Google.
• Other Harmonni users, limited to the information you choose to make public through normal use of the Service — your display name, avatar, public playlists, uploaded content, and follower/following relationships.
• Legal and safety reasons, if required to comply with a legal obligation, or to protect the rights, safety, and security of Harmonni, our users, or the public.
• Business transfers, if Harmonni is involved in a merger, acquisition, or sale of assets, subject to this policy continuing to apply to your information.

We apply technical and organizational safeguards appropriate to the sensitivity of the data we hold, including:

• Passwords are never stored in plaintext; they are hashed with bcrypt
• All traffic between your device and Harmonni is encrypted in transit (HTTPS/TLS)
• Authentication uses signed, expiring tokens (JWT), and admin-only actions are gated by server-side role checks
• Access to production data is restricted to what is operationally necessary

No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

We retain your account information and content for as long as your account is active, so that we can provide the Service to you. If you stop using Harmonni, your data is retained in case you return, unless you request deletion.

You can request deletion of your account and associated personal data at any time by contacting us at privacy@harmonni.space. We will delete or anonymize your personal information within a reasonable time, except where we are required to retain certain data to comply with legal obligations, resolve disputes, or enforce our agreements.

• You can review and update your name, email, avatar, and password from your Profile page at any time.
• You can sign out of Harmonni on any device from your Profile page.
• You can request a copy of, or the deletion of, your personal data by contacting us (see below).
• Depending on where you live, you may have additional rights under applicable law (such as the GDPR or CCPA), including the right to access, correct, or delete your personal information, and to object to or restrict certain processing. Contact us to exercise these rights.

Harmonni is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes — particularly to how we access or use Google user data — we will update the "Last updated" date above and, where appropriate, notify you in-app or by email before the changes take effect.

If you have questions about this Privacy Policy or how we handle your data, contact us at privacy@harmonni.space.