Privacy Policy

1. Who we are and what this policy covers

JamVerse (the “App”) is provided by Daily Evolution LLC (“we”, “us”, “our”). This Privacy Policy explains what information we collect when you use the App and this website, why we collect it, who we share it with, and the choices and rights you have.

For users in the European Economic Area and the United Kingdom, Daily Evolution LLC is the data controller for the personal data described here.

This policy does not apply to third-party services you reach from the App, or to material your bandmates handle outside the App.

2. Information we collect

We collect only what the App needs to work. There are four categories.

Payment information. Subscriptions are sold by Apple through the App Store. Apple processes your payment and we never see or store your card details. We receive only the fact that a valid subscription exists for your account.

3. Microphone, recordings and imported audio

The App asks for microphone access so you can record takes. The microphone is active only while you are recording a take that you started. The App does not listen in the background and does not record when you have not asked it to.

A take is written to your device first, so recording works without a network connection, and is uploaded to our storage when you save it and connectivity allows. Uploaded audio is held in a private, access-controlled bucket and is served to your bandmates through short-lived signed links.

The App also installs a share extension so you can send audio into JamVerse from other apps such as Voice Memos. Audio arrives that way only when you explicitly share it.

We do not use your recordings, comments or other content to train machine learning or AI models, and we do not license your content to anyone.

4. How we use your information, and our legal bases

We use the information above to:

• create and secure your account and authenticate you;
• store, sync and play back your space’s songs, versions, comments, gigs and members;
• calculate the shared XP, level and streak state your space sees (this is computed on our servers from actions such as saving a version or adding a comment);
• send push notifications about activity in your space, if you have allowed them;
• determine and enforce your subscription entitlement and free-tier limits;
• understand which features are used so we can fix and improve the App, in aggregate rather than to profile you individually;
• respond to your support requests;
• detect, investigate and prevent abuse, fraud and security incidents;
• comply with legal obligations.

If you are in the EEA or UK, our legal bases under the GDPR are: performance of a contract (running the App and your account and subscription); legitimate interests (keeping the service secure and reliable, and understanding product usage in a privacy-protective way); consent (push notifications and microphone access, each of which you grant through an iOS permission prompt and can withdraw in iOS Settings); and legal obligation where the law requires us to retain or disclose information.

5. Analytics, advertising and tracking

We use PostHog for product analytics. It records discrete product events (for example capture_saved or comment_added) associated with your account identifier, so we can see which parts of the App are actually used.

To be explicit about what we do not do:

• Session replay is disabled. We do not record your screen, and analytics never capture the contents of your recordings, comments or song titles.
• We do not sell or “share” your personal information as those terms are defined by California law, and we have not done so in the preceding twelve months.
• We do not run third-party advertising in the App and we do not use your data for advertising.
• We do not track you across other companies’ apps or websites. The App does not request the Advertising Identifier (IDFA) and does not present an App Tracking Transparency prompt, because it has nothing to track you with.

This website is a static marketing site. It does not set advertising cookies or fingerprint visitors; our host may keep standard server request logs for security and operational purposes.

6. Who your information is shared with

Your bandmates

JamVerse is collaborative software. Anything you add to a space — takes, song titles, comments, gigs — is visible to the other members of that space, along with your display name and role. Choose who you invite accordingly. If you share a version out of the App, the recipient can hear it.

Service providers

We use a small number of processors who handle data on our behalf under contract, and who may not use it for their own purposes:

Other disclosures

We may disclose information if we are legally required to, to enforce our Terms of Use, or to protect the rights, safety and property of our users or of Daily Evolution LLC. If Daily Evolution LLC is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction; we will give notice before your information becomes subject to a materially different privacy policy.

7. How long we keep information

• Account information — for as long as your account exists.
• Content — until you or another authorised member of your space deletes it, or until the space itself is deleted.
• Analytics events — retained in aggregate for product analysis; we do not keep event-level data tied to a deleted account.
• Backups and logs — routine backups and security logs may retain data for a limited period after deletion before they are overwritten in the ordinary course.

We may retain limited information for longer where we are required to by law, or to resolve disputes and enforce our agreements.

8. Deleting your account and your data

You can permanently delete your account from inside the App: go to More → Delete account. No email to us is required.

Deleting your account removes your account record and the personal data associated with it. If you are the only member of a space, that space and its songs, versions and comments are deleted with it. If other members remain, content you contributed to the shared space may persist for them, since it forms part of their record of the band’s work; contact us if you need specific content removed.

Deleting your account does not cancel an active subscription. Cancel that separately in your Apple ID subscription settings.

9. How we protect your information

Data is encrypted in transit with TLS and encrypted at rest by our infrastructure providers. Access to your space’s content is enforced at the database level by row-level security policies keyed to space membership, and audio files are stored in a private bucket reachable only through short-lived signed links. Passwords are stored as salted hashes and are never readable by us.

No system is perfectly secure. Please use a strong, unique password, and tell us promptly at privacy@songrehearsal.com if you believe your account has been compromised.

10. Your privacy rights

Wherever you live, you can reach most of your data directly in the App, and you can delete your account yourself. You can also contact us at privacy@songrehearsal.com to exercise the rights below. We will not discriminate against you for making a privacy request, and we do not charge for one.

EEA and UK (GDPR)

You have the right to access your personal data; to have inaccurate data corrected; to have your data erased; to restrict or object to certain processing, including processing based on our legitimate interests; to receive your data in a portable format; and to withdraw consent at any time without affecting processing already carried out. You also have the right to lodge a complaint with your local supervisory authority, or with the Information Commissioner’s Office in the UK.

California (CCPA/CPRA)

You have the right to know what personal information we collect and how we use and disclose it; to request access to it and a copy in a portable form; to request correction or deletion; and to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information. We do not sell or share personal information and we do not use sensitive personal information for purposes requiring a limitation right, so there is nothing to opt out of, but the access, correction and deletion rights are fully available to you. You may use an authorised agent to make a request on your behalf; we may ask for proof of authority.

Verification

To protect your account, we verify requests by confirming control of the email address associated with it. If we cannot verify a request, we may be unable to act on it.

11. Children

JamVerse is not directed to children. You must be at least 13 years old to create an account (or 16, if you are in a jurisdiction that sets a higher minimum age for consent to online services). We do not knowingly collect personal information from children below that age. If you believe a child has provided us with personal information, contact us at privacy@songrehearsal.com and we will delete it.

12. International data transfers

We operate from the United States and our service providers process data in the United States and other countries. If you use the App from outside the United States, your information will be transferred to and processed in the United States, where data protection law may differ from that of your country. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable) in our agreements with our processors.

13. Changes to this policy

We may update this Privacy Policy as the App changes. When we do, we will revise the “Last updated” date at the top of this page, and for material changes we will give additional notice in the App or by email before the change takes effect. Continuing to use JamVerse after an update means you accept the revised policy.

14. Contact us

Questions, requests or complaints about privacy can go to privacy@songrehearsal.com, or by post to Daily Evolution LLC, California, United States.

We aim to respond to privacy requests within 30 days, and within any shorter period required by applicable law.