Privacy

We only collect what's needed to run your account, trial and Premium. Your music and your Apple Music sign‑in stay on your Mac.

Effective October 2, 2026

1. Controller

The controller of your data is Mikołaj Ratajkowski, running a sole proprietorship as MIKOŁAJ RATAJKOWSKI | RATAJKOWSKI.DEV, al. Jana Pawła II 27, 00-867 Warsaw, Poland, tax ID (NIP) 9581721785, REGON 521026789. Privacy contact: hello@ratajkowski.dev.

2. What we process

Data	Why	Legal basis (GDPR)
Account: email address, password (stored only as a hash), creation and sign‑in dates, chosen language	Creating and running your account, sign‑in, account emails	Contract — Art. 6(1)(b)
Trial limit: an encrypted hash of your Mac's identifier (the device number can't be recovered from it), number and time of downloads, a hash of the downloaded link, app version	Granting 3 free songs per account and per Mac, preventing abuse	Contract and legitimate interest — Art. 6(1)(b) and (f)
Premium: subscription status, plan, billing period dates, Stripe customer and subscription IDs	Turning on Premium and managing the subscription	Contract — Art. 6(1)(b)
Payments: card details and billing address	Taking payment, taxes, invoices	Processed by Stripe — they never reach us
Contact: your message and the address you write from	Replying to you	Legitimate interest — Art. 6(1)(f)
Website: technical connection data (IP address, browser, page visited)	Serving the site and protecting it from attacks	Legitimate interest — Art. 6(1)(f)

3. What we don't collect

We never store or upload your downloaded music files — they stay on your Mac.
The Apple Music session you sign in to inside the app stays on your Mac and is only used to talk to Apple. We never send it to our servers.
We don't keep your listening history or a list of downloaded songs on our servers — only the link hash needed to count your trial.
No ads, analytics or tracking cookies. The account page only stores your sign‑in session in your browser.

4. Who we share data with

Supabase — database and sign‑in; data stored in the EU (Frankfurt).
Stripe — payments and subscriptions. With Stripe Managed Payments, Stripe acts as the seller and is independently responsible for payment data; see Stripe's privacy policy.
Resend — sending account emails (email confirmation, password reset).
Cloudflare — website hosting and attack protection.
Apple — the app connects directly to Apple Music under your subscription and Apple's terms.

Some providers may process data outside the European Economic Area, based on the European Commission's adequacy decision (EU‑US Data Privacy Framework) or standard contractual clauses. We don't sell data.

5. How long

Account, trial and Premium data — while you have an account. After you delete it, we erase it within 30 days.
The Mac identifier hash and the number of free songs used may be kept after account deletion to prevent claiming the trial again on the same Mac.
Billing records — as long as tax law requires (usually 5 years).
Correspondence — up to 2 years after the matter is closed.

6. Your rights

You have the right to access, correct and delete your data, to restrict processing, to data portability and to object to processing based on legitimate interest. Email hello@ratajkowski.dev from your account address. You may also lodge a complaint with the Polish data protection authority (Prezes UODO, ul. Stawki 2, 00-193 Warsaw) or your local authority.

An email address and password are required to create an account. We don't make decisions about you based solely on automated processing that would have legal effects.

7. Security and changes

Connections are encrypted and database access is restricted by security rules to the account owner. The app keeps your account session in the macOS Keychain. We'll announce material changes to this policy on this page.