Draft for review. Fill in the bracketed details and have it checked by a privacy lawyer before launch. Remove this box when final.
Privacy Policy
Last updated: [date]
TrackJam is a music battle game. This policy explains what personal data we process when you use the TrackJam app and website, why, and what your rights are.
1. Who we are
TrackJam is operated by Onlinemaat, De Vroedschap 32, 2922 VC Krimpen aan den IJssel, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 84372761 ("we"). On Google Play, TrackJam is published under the developer name Redline Studios. We are the controller of your personal data. Contact: trackjamgame@gmail.com.
2. What we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account data: account id, artist name, the email address and account id from Sign in with Apple or Google | Create and run your account, let you sign in on other devices | Contract (Art. 6(1)(b)) |
| Birth year, and for ages 13-17 the confirmation that a parent or guardian agrees | Age gate and protecting younger players | Legal obligation and legitimate interest |
| Your content: prompts, lyrics, song settings, titles, cover prompts, generated songs and covers, photos you upload, optional voice or melody recordings | Generate and show your songs and covers, run battles and charts | Contract |
| Community content: comments, chat messages, likes, superlikes, votes, follows, friends, reports and blocks | Run the community features, keep them safe | Contract and legitimate interest (safety) |
| Game data: battles, results, XP, levels, missions, streaks, badges, cosmetics, credits and token balances | Run the game and your progression | Contract |
| Purchase data: which plan or pack you bought, renewal status (we never see your card details) | Give you what you paid for, handle refunds and fraud | Contract and legal obligation (tax) |
| Usage data: listens, shares, generation counts and timings, server logs including IP address | Security, preventing abuse, fixing bugs, understanding which features work | Legitimate interest |
| Push token (once notifications are available) | Send the notifications you allow | Consent (you can turn them off in your phone settings) |
We do not show ads, we do not sell your data and we do not track you across other companies' apps or websites.
3. What other players can see
Your artist name, profile photo, level, badges, published songs and covers, comments, chat messages and battle results are visible to other players. Songs you share get a public page at trackjam.net/s/… that anyone with the link can open. Battle entries stay anonymous until the results are shown.
4. AI providers and other processors
When you tap "Cook it" or "AI paint", we send only what is needed to create your content to an AI provider: your prompt, lyrics and song settings, and a recording if you add one. We never send your email, name or account details. Before the first time, the app asks for your permission.
| Processor | What for | Location |
|---|---|---|
| ElevenLabs Inc. | Generating songs from prompts, lyrics and recordings | United States [confirm EU data residency in the contract] |
| fal.ai (Features and Labels, Inc.) | Generating cover images from cover prompts | United States |
| OpenAI, L.L.C. | Checking prompts, titles, comments, chat and images for harmful content | United States |
| RevenueCat, Inc. | Handling subscriptions and in-app purchases | United States |
| Apple and Google | Sign-in, payments, and (later) push notifications | United States / EU |
| Hetzner Online GmbH | Hosting our servers, the songs and images, and backups | European Union |
Transfers outside the EU are covered by the EU-US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses. [ElevenLabs' standard terms give it a licence to use inputs and outputs to provide and improve its services. State here what the Enterprise contract allows, for example service provision only and no training.]
5. How long we keep data
- Account data and published content: until you delete your account.
- Takes and covers you never used in a record: deleted after 30 days.
- Share videos: deleted after 60 days.
- Server backups: kept for 14 days, then overwritten.
- Purchase records: as long as tax law requires (7 years in the Netherlands).
- Reports and moderation decisions: up to 12 months, or longer if needed for a dispute.
6. Your rights
You can access, correct, export, restrict or delete your data, and object to processing based on legitimate interest.
- Export: Me tab > Download my data gives you a JSON file with your data.
- Delete: Me tab > Delete account removes your account and everything linked to it. Without the app, use trackjam.net/delete-account.
- Anything else: email trackjamgame@gmail.com. We answer within one month.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in your country.
7. Children
TrackJam is not for children under 13. Players aged 13 to 17 need permission from a parent or guardian. If you believe a child under 13 uses TrackJam, email us and we will delete the account.
8. Security
All traffic is encrypted with HTTPS. Access to our servers is limited to the people who run TrackJam. No system is perfectly secure; if a breach affects you, we will tell you and the regulator as the law requires.
9. Changes
We will update this page when our processing changes and tell you in the app about important changes.