1. What we collect
- Account: email, username, optional country and avatar.
- Usage: songs you play, like, download, and add to playlists, plus device + app version.
- Approximate location: derived from IP at the country level for charts and recommendations. We do not collect precise GPS.
- Payments: if you buy Premium via UPI, we record the transaction reference, amount and plan. We never see your bank or UPI PIN.
2. Device permissions we ask for
- Notifications: to show the playback controls on your lock screen and to send app updates you opted into. You can refuse or revoke this at any time; music still plays.
- Camera: requested only if you apply for a verified Artist account, to take a live selfie that proves you are a real person. It is never used for anything else, never records video, and denying it only blocks the artist application.
- Storage / offline files: used to save songs you explicitly download so they play without internet. We do not read your existing photos, files, or media.
We do not collect contacts, precise GPS location, SMS, call logs, microphone audio, or the list of other apps on your device.
3. How we use it
To run the service (playlists, downloads, recommendations), keep it secure, send important notifications, and improve features. Aggregate, non-personal stats may be shown publicly (e.g. global top charts).
4. Sharing
We share data only with: (a) infrastructure providers needed to run the App (database, push notifications, email), (b) authorities when legally required. We do not sell your data and we do not share it with data brokers or advertising networks.
5. Retention
Account data lives until you delete the account. Listening history is kept to power your recommendations and can be cleared from Settings.
6. Deleting your account and data
You can delete your account and all of its data at any time from Settings → Delete account inside the App. This permanently removes your profile, listening history, likes, playlists, downloads records and any verification data. It cannot be undone.
If you can no longer sign in, email universflow.in@gmail.com from your registered address and we will delete the account within 30 days. Basic payment records may be retained where the law requires it.
7. Your rights
You can access, export, or delete your data by emailing universflow.in@gmail.com. Under GDPR and India's DPDP Act you have rights of access, correction, deletion, and objection.
8. Children
The App is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, email universflow.in@gmail.com and we will remove it.
9. Security
We use industry-standard encryption in transit and at rest. No system is perfect — please use a strong password.
10. Changes to this policy
We may update this policy. Material changes will be announced in the App, and the date at the top of this page will change.
11. Contact
Privacy questions: universflow.in@gmail.com.
