Privacy policy
This policy explains what the InstaHarp Android app ("InstaHarp", "we") collects, why, where it is stored, and the choices you have. InstaHarp is operated by its developer, who can be contacted at thompsonplr@gmail.com.
In short: your music stays on your phone. If you sign in, we keep your email, your playlists and what you play so your library follows you. We do not sell your data, show ads, or use advertising identifiers.
What we collect
| Data | When | Why |
|---|---|---|
| Email address, name and profile picture from Google, or the email you enter for a sign-in code | When you sign in | To create and manage your account |
| Account settings (app language, lyric script, country, time zone) | When you sign in | To keep your settings across phones |
| A random identifier for your installation, and your phone model and Android version | When you sign in | To keep daily play counts consistent and prevent abuse |
| Songs you play (song, time, how it was played) | While signed in | For "Continue listening" on all your phones and the daily free-play count |
| Playlists you create | While signed in | To sync them across your phones |
| A temporary guest identifier | Before you sign in | To let guests stream up to 3 songs; deleted after 30 days of inactivity |
| Crash reports | Only if you turn on "Send crash reports" | To fix crashes |
| Usage statistics (screens viewed, actions) | Only if you turn on "Share usage statistics" while signed in | To improve the app |
We do not collect your location, contacts, photos, microphone recordings, files or browsing history. Search happens on your phone and your searches are not sent to us. Voice search uses your phone's built-in speech service.
Downloads on your phone
Songs you download are stored encrypted in the app's private storage and are excluded from phone backups. They play only in InstaHarp on that phone and are removed when you remove the download, delete your account or uninstall the app.
Where your data is stored and who processes it
- Supabase (database and sign-in), hosted in Mumbai, India.
- Amazon Web Services (song files and artwork), Mumbai, India.
- Google: Google Sign-In, and Firebase Crashlytics only if you turn on crash reports.
If you live outside India, your data is transferred to and stored in India. These providers process data on our behalf under their data processing terms, including standard contractual clauses where required. We do not sell or share your personal data with anyone else.
How long we keep it
- Account details, settings and playlists: while your account exists.
- Play history: up to 400 days.
- Usage statistics: up to 180 days. Crash reports: up to 90 days.
- Guest identifiers: 30 days after last use.
- A record of your privacy choices and of an account deletion: 3 years, to show we honoured them.
Your choices and rights
- Crash reports and usage statistics are off unless you turn them on, and you can turn them off any time in Settings › Privacy.
- Access and download your data from Settings › Privacy › Download my data.
- Delete your account in Settings › Privacy › Delete my account, or on our account deletion page.
- Correct your details, or ask any privacy question, by emailing thompsonplr@gmail.com. We reply within 30 days.
Depending on where you live, you may have further rights under laws such as India's Digital Personal Data Protection Act 2023, the EU and UK GDPR, or US state privacy laws, including the right to complain to your data protection authority.
Children
InstaHarp is intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Security
Data is encrypted in transit. Access to our database is restricted by row-level security so each account can reach only its own data.
Changes
We will update this page when the app changes what it collects, for example when comments, uploads or purchases arrive, and show the app's privacy notice again for material changes.