Privacy Policy

Last updated: June 2026

Jam Jam is built to respect you. The app works on your device and does not require an account. This policy explains the limited data involved when you choose to use the optional online features.

Your songs are yours

Your songbook, chords, lyrics and melodies are saved on your phone and stay usable offline. When you are signed in, they are also backed up to your private account space — including their playlists — so you can restore them on your other devices (web, Android and iOS) if you switch phones or reinstall the app, like a personal cloud drive. You choose what you import or create there: Jam Jam does not publicly distribute, curate, access or reuse your songs.

What we store (only with an account)

Email — used only to sign you back in and prevent fake accounts. We never email you marketing without your explicit opt-in.
Profile — your chosen username and, optionally, an avatar (moderated for safety). Others can see your username, avatar and any songs you make public — never your email.
Activity — a “last active” date for optional newsletter preferences, and a device identifier to enforce one active session per environment (web and mobile can be signed in at once).

The app may show ads to signed-out and non-premium users via Google AdMob. Premium subscribers and beta testers see no ads. This website uses no third-party trackers or analytics. To show it in your language, the site detects your approximate country from your IP address via a self-hosted offline database — no third-party service is contacted and your IP is never stored. IP geolocation by DB-IP (CC-BY 4.0).

Purchases

Optional Premium subscriptions and the lifetime purchase are processed by our payment providers: Google Play Billing (in-app on Android) and Stripe (for direct purchases on jam-jam.org). Your card details are handled by these processors and never stored by Jam Jam.

Where data is stored

Account data is hosted on Supabase (EU region) with row-level security so you can only access your own data. Avatar moderation uses Google Vision SafeSearch on the uploaded image only.

Detection error reports (opt-in audio)

Audio analysis runs entirely on your device — audio files are never uploaded for analysis. One voluntary exception: if you report a detection error and explicitly tick the consent box, the analysed audio and its detection results are uploaded to your private space on our EU-hosted infrastructure (Supabase, EU region) and kept for up to 90 days to improve our detection model, then deleted. That box is never pre-ticked; without your consent, no audio ever leaves your device.

Online correction (optional)

Chord detection and lyric transcription run entirely on your device. If online help is enabled (on by default — it is presented during onboarding and can be turned off there, or at any time in the settings), Jam Jam looks up official lyrics and chords on the web to fix uncertain passages. In that case only anonymous text metadata is sent — the song title, the file name and short lyric excerpts — to third-party services (MusicBrainz, a web search engine and Wikipedia). Your audio is never sent, and no user identity or account information is attached. You can turn this option off at any time; when it is off, no online lookup ever happens.

Your rights (GDPR)

You can access, export and delete your data at any time from the app (Profile → Export my data / Delete my account). You also have the right to rectification, restriction and to object. Deletion is permanent and removes your profile, avatar and account. Requests: [email protected].

Retention

We keep account data while your account exists. When you delete your account, the associated server-side data is removed.

Children

The Service is not directed to children under 13 (or the minimum age in your country). Do not create an account if you are under that age.

Changes & contact

We may update this policy; changes appear here with a new date. Questions or requests: [email protected].