This Privacy Notice explains how Katolik Music ("we", "us", "our"), the operator of KMplay (the "Service"), collects and processes personal data. Katolik Music is the data controller for the personal data described below.
1. Personal Data We Collect
- Account data: name, email address, login credentials.
- Profile & content: display name, avatar, uploaded tracks and metadata.
- Usage & device data: playback history, interactions, IP address, browser and device identifiers, log data.
- Support data: messages and information you send when contacting support.
- Payment-related data: handled by our payment provider Paddle (see below).
2. Purposes & Legal Bases
- To create and manage your account and provide the Service (contract performance).
- To process subscriptions and payments (contract performance, legal obligation).
- To secure the Service and prevent fraud or abuse (legitimate interests).
- To improve the Service and develop new features (legitimate interests).
- To respond to support requests (contract performance / legitimate interests).
- To send service-related communications and, with your consent, marketing.
3. How We Share Personal Data
- Service providers / subprocessors: hosting, database, analytics, and customer-support tooling that help us operate the Service.
- Paddle (Merchant of Record): for sale of the Service, subscription management, payments, tax compliance, invoicing, and refunds.
- Professional advisers: legal, accounting, and similar advisers when needed.
- Authorities: where required by law or to protect rights and safety.
4. International Transfers
Your personal data may be transferred to, and processed in, countries outside your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
5. Data Retention
We keep personal data only for as long as necessary for the purposes described above, to comply with our legal obligations, or to resolve disputes. After that, data is deleted or anonymized.
6. Your Rights
Subject to applicable law, you may have the right to:
- access the personal data we hold about you;
- request correction or deletion;
- restrict or object to processing;
- data portability;
- withdraw consent at any time where processing is based on consent;
- complain to your local data protection authority.
We aim to respond to verified requests within one month.
7. Security
We use appropriate technical and organizational measures, including encryption in transit and access controls, to protect personal data.
8. Cookies
We use essential cookies and similar technologies to keep you signed in and operate the Service. Where used, analytics or marketing cookies are disclosed and managed in accordance with applicable law.
9. Contact
For privacy questions or to exercise your rights, contact Katolik Music via the support channels in the app. See also our Terms & Conditions and Refund Policy.