Privacy Policy

Salvaje Universe ("we," "us," or "our") operates a music streaming and community platform that allows users to listen to music, watch and share video clips, purchase tickets and merchandise, interact with other listeners, and support the artist. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application and website (collectively, the "Service").

This Privacy Policy is incorporated into our Terms of Use. By using the Service, you consent to the data practices described in this policy.

We collect the following types of information:

• Account Information: Your name, email address, and profile photo when you register or sign in via Google OAuth or Apple Sign-In.
• Usage Data: Tracks played, likes, comments, playlists created, clips shared, listening history, search queries, and feature interactions.
• Social Data: Friend connections, direct messages, reactions, and interactions with other users' content.
• Payment Information: When you purchase subscriptions, tickets, or make donations, payment is processed securely through Base44 Payments. We receive transaction confirmations but do not store your full credit card number, CVV, or other sensitive payment details on our servers.
• Device Information: Device type, operating system version, unique device identifiers, IP address, browser type, and mobile network information for analytics, security, and fraud prevention.
• Location Data: Approximate location (derived from IP address) for content availability and analytics. We do not collect precise GPS location unless you explicitly enable it for specific features.
• Content You Create: Photos, videos, audio clips, live streams, comments, messages, and profile information you upload or post.
• Identity Verification: For 21+ events, attendee name, and optionally a photo of government-issued ID, which is stored securely and used solely for age verification purposes.

The app may request the following device permissions. All permissions are optional and can be managed in your device settings:

• Camera: Used for recording video clips, taking profile photos, and scanning QR codes for ticket check-in at live shows.
• Microphone: Used for recording audio clips and participating in live broadcasts.
• Photo Library: Used for selecting and uploading photos and videos to your profile or posts.
• Notifications: Used to send alerts about new music, live shows, comments, likes, and other account activity.
• Storage: Used for caching media for playback and saving downloaded content.
• Bluetooth: May be used for proximity-based features at live events.

• To provide, operate, and maintain the Service, including streaming music, displaying personalized content, and managing your account.
• To process payments for subscriptions, event tickets, donations, and merchandise.
• To enable social features such as commenting, messaging, friend connections, and content sharing.
• To send notifications about new content, live shows, account activity, and service updates.
• To provide customer support and respond to your inquiries.
• To improve our Service through analytics, usage insights, and machine learning.
• To detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms.
• To verify your identity and age for certain features, including 21+ events.
• To comply with legal obligations and respond to lawful requests from authorities.
• To deliver, personalize, and measure the effectiveness of advertising and promotional content.

For users in the European Economic Area, United Kingdom, and Switzerland, we process personal data on the following legal bases:

• Consent: For non-essential cookies, certain notifications, and optional features.
• Contract: To provide the Service you requested, including account management, streaming, and payment processing.
• Legal Obligation: To comply with applicable laws, regulations, and lawful government requests.
• Legitimate Interests: For fraud prevention, security, analytics, and improving the Service, balanced against your privacy rights.

We use the following third-party services that may collect information governed by their own privacy policies:

• Base44 / Wix Payments: Backend infrastructure, authentication, and payment processing.
• Google: Sign-in authentication, analytics, and advertising.
• Apple: Sign-in authentication and app distribution.
• Shopify: Merchandise store and order fulfillment.
• Instagram & Facebook (Meta): Social sharing and auto-publishing features.
• SoundCloud: Music content sourcing and metadata.
• Apple App Store & Google Play: App distribution and subscription management where applicable.

We do not sell your personal information. We share your data only in the following circumstances:

• With service providers who help us operate the Service (as listed in Section 6), under contractual obligations of confidentiality.
• When required by law, court order, or government regulation.
• To protect our rights, property, safety, or the safety of others.
• In connection with a merger, acquisition, or sale of our assets, subject to confidentiality obligations.
• With your consent or at your direction.

Aggregate, de-identified data that cannot reasonably be used to identify you may be used for analytics and shared with partners or the public.

We retain your account information for as long as your account is active. You may request deletion of your account at any time through the app's profile settings, which will remove your personal data from our active systems.

Certain data may be retained for longer periods where required by law, for legitimate business purposes (such as fraud prevention, security, and dispute resolution), or to establish, exercise, or defend legal claims. User Content posted publicly may remain visible on the Service until you delete it, and cached copies may persist in backup systems for a limited period.

Payment records and transaction data are retained as required by tax and financial regulations (typically 7 years).

We use industry-standard security measures to protect your data, including:

• Encryption in transit using TLS/SSL.
• Encryption at rest for stored data.
• Access controls and authentication for internal systems.
• Regular security reviews and monitoring.
• Payment processing through PCI-compliant providers — we never store full card numbers or CVVs.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Restriction: Request that we limit processing of your data in certain circumstances.
• Data Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw Consent: Withdraw consent for processing that was based on consent (e.g., non-essential cookies).
• Device Permissions: Manage camera, microphone, photo library, and notification permissions through your device settings.

To exercise these rights, contact us through the app's support features. We will respond within the timeframe required by applicable law (typically 30 days).

If you are in the EU, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority.

The Service is not directed to children under 13 (or the minimum age in your jurisdiction, such as 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can promptly delete it.

Parents or guardians who believe their child has created an account can request its deletion through the app's support features.

Your information may be transferred to and processed in countries other than your own, including the United States. We take measures to ensure that such transfers comply with applicable data protection laws, including through standard contractual clauses or other appropriate safeguards.

By using the Service, you acknowledge that your data may be processed in the United States or other countries that may have different data protection standards than your own.

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to opt out of the "sale" or "sharing" of their personal information. We do not sell your personal information as defined by California law. We may share certain information with advertising partners for targeted advertising, which may constitute "sharing" under CPRA — you can opt out through your device's advertising identifier settings or by contacting us.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy within the app or by other reasonable means. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, your personal data, or wish to exercise your privacy rights, please contact us through the app's support features or visit our Legal Center for additional contact information.