Flex Music collects only what it needs to run your account and the live stations, and we never sell it. This policy explains what we collect, how we use it, and your choices.
Who we are
This Privacy Policy applies to the Flex Music mobile app and related services (the “Service”), provided by Flex Music (“we,” “us,” or “our”).
Information you give us
When you create a profile, we collect:
- A username, which is the display name you choose
- Your email address, which must be a college (.edu) address
- A password. We store only a scrambled (hashed) version of it, never the password itself.
We use this information to create and maintain your profile, let you sign in, and contact you about your account or important changes to the Service.
Your profile is stored by a trusted third-party hosting provider under a contract limiting its use to providing services to us.
What we record when you use the app
Some of what you do in the app is tied to your account:
- Comments. When you comment on a station, we store your username, the text and the time. We also store which users liked a comment. Other listeners on that station can see your username, your comments and who liked them. Comments are deleted automatically after 24 hours.
- Station votes. When you give a station an upvote or downvote, we store that vote with your account. It is deleted automatically 24 hours after you last changed it. Your profile counts, such as stations voted, upvotes given and comments, come from this data.
- Next-song and skip votes. These are held in our server’s memory while a vote is open and are not saved to our database.
- Live listening status. While the app is open on a station, it tells our server which station you are on and whether you are playing, so we can count live listeners for skip voting. This is held only in our server’s memory and is forgotten about 45 seconds after the app stops reporting or disconnects.
- Sign-in sessions. We keep a sign-in token for your account until it expires or you sign out.
We do not keep a long-term history of the songs or stations you listen to.
Information we do not collect
We do not collect:
- Phone numbers or mailing addresses
- Location data
- Contacts, photos, or files on your device
- Advertising identifiers
- Your Apple ID, Apple password, or payment details
We do not show ads, we do not use advertising or tracking tools, and we do not track you across other apps or websites. The only usage measurement in the app is described under “App usage statistics” below.
App usage statistics
The iOS app includes Expo’s app-insights tool. Expo is the platform we use to build the app. Each time the app launches, it sends Expo a random installation ID, the app version, the platform, and the operating system version. This ID is generated for the app on your device. It is not linked to your profile, and we do not use it for advertising. Expo processes this information under Expo’s Privacy Policy.
Technical data needed to stream audio
To send audio and live updates to your device, our servers must receive your device’s IP address and basic connection details, such as the app version. This happens automatically whenever any app connects to the internet. We use this information to deliver the Service and keep it working. Our server logs may record these connection details, and technical details of the live messages your app sends.
Server logs containing IP addresses are automatically deleted after 30 days.
Apple Music sign-in
To play music, Flex Music asks you to connect your Apple Music account. Apple handles this sign-in and asks for your permission first. If you agree, Apple gives the app an access token that lets it play music through your Apple Music subscription and, if you allow it, view your library and playlists.
- We never see your Apple ID, password, or payment details.
- The access token is stored only on your device. We do not receive it, and it is not sent to our servers. The app uses it on your device to provide playback.
- The app contacts Apple Music directly to look up song information, so Apple receives your IP address and request details. Apple processes this and your Apple Music listening under Apple’s Privacy Policy.
- You can disconnect Flex Music at any time from your Profile in the app, or in your device’s Settings under Privacy & Security > Media & Apple Music.
Data stored on your device
The app stores the following on your device only: your sign-in tokens, your username and email address, your Apple Music connection, your selected campus, your last station, and your own votes. Signing out removes your sign-in tokens and cached profile. All of it is deleted when you uninstall the app.
Third-party services
- Hosting provider: stores your profile and runs our servers, as described above.
- Expo: receives the app usage statistics described above.
- Apple: provides the App Store, Apple Music, and sign-in for Apple Music. Apple may collect information when you download or update the app, under its own privacy policies. If you choose to share diagnostics with Apple, it may share anonymous crash reports with us. You control this in your device settings.
Sharing and sale of information
We do not sell or rent your personal information. Other listeners can see your username alongside your comments. Beyond that, we share your information only with service providers that host and operate the Service for us, when required by law, or as part of a merger or sale of our business.
Keeping and deleting your data
We keep your profile information while your profile is active. To update your name or username, or to delete your profile, email us at privacy@flexmusic.io. We delete your information within 30 days of your request, unless the law requires us to keep it. Comments, station votes and listening status are removed automatically on the schedule described above.
Depending on where you live, you may have the right to access, correct, delete, or get a copy of your personal information. To make a request, contact us at privacy@flexmusic.io.
Children’s privacy
The Service is for people 18 and older and is not intended for anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has created a profile, contact us and we will delete it.
Changes to this policy
If we change how the Service handles data, we will update this policy and its effective date before the change takes effect.
Contact us
Questions about this policy can be sent to privacy@flexmusic.io.