1. What we collect

Account: email, username, optional country and avatar.
Usage: songs you play, like, download, and add to playlists, plus device + app version.
Approximate location: derived from IP at the country level for charts and recommendations. We do not collect precise GPS.
Payments: for Google Play purchases, we receive the product, purchase token, order reference and entitlement status needed to activate Premium. Google processes the payment details; we do not receive your full card or bank credentials.

2. Device permissions we ask for

Notifications: to show the playback controls on your lock screen and to send app updates you opted into. You can refuse or revoke this at any time; music still plays.
Storage / offline files: used to save songs you explicitly download so they play without internet. We do not read your existing photos, files, or media.

We do not collect contacts, precise GPS location, SMS, call logs, camera, microphone audio, or the list of other apps on your device.

3. Identity documents (Artist applications only)

If — and only if — you apply for a Verified Artist account, we ask for a government ID (for example Voter ID, PAN, Passport or Driver’s Licence) and a selfie so a human reviewer can confirm you are the artist you claim to be. Ordinary listeners are never asked for an ID.

Where it is stored: a private storage bucket readable only by you and our reviewers. It is never public and never indexed.
How long: the ID images and verification selfie are deleted automatically the moment your application is approved or rejected. A daily safety job hard-deletes any verification file older than 7 days regardless of application status.
What we keep afterwards: only the outcome (verified: yes/no) and the date — never the document itself or the ID number.
What we never do: we do not sell ID data, share it with data brokers or advertisers, use it for face recognition beyond the one-time review, or transfer it outside our processors.

You can withdraw a pending application at any time by emailing universflow.in@gmail.com; the documents are erased immediately.

4. How we use it

To run the service (playlists, downloads, recommendations), keep it secure, send important notifications, and improve features. Aggregate, non-personal stats may be shown publicly (e.g. global top charts).

5. Sharing

We share data only with: (a) infrastructure providers needed to run the App (hosting, database, push notifications and email), (b) Google Play for Android purchase processing and verification, and (c) authorities when legally required. We do not sell your data and we do not share it with data brokers or advertising networks.

The free service may display in-app ads selected by our own campaign system. Premium suppresses those ads while active. We do not use sensitive identity documents to select advertising.

6. Retention at a glance

Account (email, username, avatar, country): until you delete your account.
Listening history, likes, playlists: until you delete your account, or earlier if you clear history in Settings.
Downloaded songs: stored only on your device; removed when you delete the download or uninstall the App. Access may stop when the applicable Premium or content entitlement ends.
Verification ID and selfie: deleted on approval or rejection, and in all cases within 7 days.
Payment records: retained only as long as tax and accounting law requires.
Security and error logs: up to 90 days, then deleted.

7. Deleting your account and data

You can schedule deletion yourself, at any time, with no email required: open the App and go to Settings → Delete Account, then confirm. A seven-day recovery period begins immediately. Sign back in before the displayed deadline to cancel the request.

After the recovery period: we permanently delete eligible profile, authentication, listening, likes, playlists, follows, download records, artist profile, verification data, device and session records. Deletion cannot be undone after processing.

What may be kept, and why: payment and invoice records where tax law requires it, and anonymised aggregate counts that can no longer identify you (for example a song’s total play count). Backups are rotated out within 30 days.

The same email may be used to sign up again afterwards as a brand-new account. If you can no longer sign in, email universflow.in@gmail.com from your registered address with the subject “Delete my account”.

You can also delete only part of your data: clear listening history in Settings, remove individual downloads from the Offline screen, or ask us to remove a specific item by email.

8. Your rights

You can access, export, or delete your data by emailing universflow.in@gmail.com. Under GDPR and India's DPDP Act you have rights of access, correction, deletion, and objection.

9. Children

The App is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, email universflow.in@gmail.com and we will remove it.

10. Security

We use industry-standard encryption in transit and at rest. No system is perfect — please use a strong password.

11. Changes to this policy

We may update this policy. Material changes will be announced in the App, and the date at the top of this page will change.

12. Contact

Privacy questions: universflow.in@gmail.com.