Privacy Policy - Coffee Music Machine Radio

Introduction

This Privacy Policy applies to Coffee Music Machine Radio, the Apple App with bundle ID com.coffeemusicmachine.radio on iPhone, iPad and compatible Mac computers running Mac Catalyst, and to the Coffee Music Machine infrastructure used for streaming and related App features. The service is operated by Anghel-Luchian Crisan, an individual based in Romania. For privacy and App support inquiries, contact contact@spectrumdevworks.com.

The App can be used without a Coffee Music Machine account. Premium is a monthly auto-renewable Apple In-App Purchase where offered. Apple displays the current price, billing period and any introductory or free-trial offer for which the Apple Account is eligible before purchase. No fixed universal trial is promised. Features depend on platform, installed version, subscription status and catalog availability.

Information We Collect

Information you provide directly

The app does not require you to create an account or provide a name, email address, postal address, phone number, or password in order to listen. If you contact Coffee Music Machine by email or through an official contact channel, we receive the information you choose to include in that communication, such as your email address and message content.

Technical and service data

When the app requests audio or other service resources, the hosting, CDN, storage, security, and network infrastructure used by Coffee Music Machine may automatically process technical information required to deliver those requests. Depending on the request and provider configuration, this can include an IP address, date and time, requested resource or URL, HTTP request and response information, user-agent or device/network information supplied with the request, response status, and security or diagnostic events.

Advertising-related information (where enabled)

In an app version in which Google AdMob advertising is enabled, Google and participating advertising partners may process data needed to deliver, measure, secure, and, where permitted, personalize ads. Depending on app configuration, device settings, permissions, consent choices, and applicable law, this may include IP address, app and device information, advertising or device identifiers where available and permitted, interactions with ads, technical diagnostics, and fraud-prevention signals. These categories are not necessarily collected for every user or in every version. Advertising availability depends on the actual released App build and provider configuration.

Information stored locally on your device

Depending on the Apple App version and features used, information stored locally may include Recently Played history, Favorites, Play Next entries, My Playlists and their ordered track references, selected stations, playback and appearance preferences, downloaded audio and artwork, download-time order, and records of successfully completed unique Free song downloads within the current local calendar month. The App can also keep a temporary rolling audio buffer for playback continuity. This buffer is separate from downloads intentionally saved for offline use. These records are stored on the device unless a feature explicitly states otherwise; no CMM account is required.

Information we do not ask for as part of normal app use

No Coffee Music Machine login is required. Coffee Music Machine does not receive or store your complete payment card number, card security code, or other complete card credentials used for an Apple In-App Purchase. Payment credentials are handled by Apple.

No Account Required

Coffee Music Machine Radio can be used without creating a Coffee Music Machine user account. The app does not require a Coffee Music Machine username or password for its normal Free or Premium listening experience. Premium access is associated with Apple In-App Purchase entitlement information made available through StoreKit rather than a separate Coffee Music Machine login.

Subscriptions and Payments

Premium is offered as a monthly auto-renewable subscription purchased through Apple In-App Purchase / StoreKit. The price, currency, taxes and any free-trial or introductory offer depend on the App Store product and individual Apple Account eligibility and are shown by Apple before purchase. No universal trial duration is promised.

Purchases, renewals, cancellations, billing and payment credentials are processed by Apple. The App may access relevant transaction or entitlement status through StoreKit to enable Premium functionality. Coffee Music Machine does not receive full payment-card credentials. Information maintained by Apple is governed by Apple's privacy terms; see Apple's Privacy Policy.

Local Device Data

The Apple App stores information needed for its features locally on each device, without requiring a Coffee Music Machine account. Depending on platform and features used, this may include Favorites, Recently Played, Play Next entries, locally created My Playlists and their track order, selected stations, playback and appearance settings, offline and Wi-Fi Only preferences, downloaded audio and artwork, download timestamps and the Free monthly download allowance state. Temporary rolling-buffer audio may also be stored to maintain playback continuity.

Local playlist content and Free allowance records are not synchronized between devices by a CMM account or backend. For the Free download allowance, the App counts up to 20 unique eligible songs successfully downloaded per device-local calendar month and allows up to 20 eligible songs stored at one time. Failed transfers do not permanently consume a monthly slot; in-progress downloads may temporarily reserve one. Deleting a completed download frees a stored slot but does not restore the monthly allowance. In Free, offline access is restricted to the first 20 eligible songs by recorded download time; other retained downloads may be shown as locked. Premium entitlement provides expanded offline access without the Free 20-song quota, subject to device storage and content eligibility.

The rolling buffer is temporary playback cache rather than a permanent download. Buffer and intentionally saved downloads may be used differently when a device goes offline. Removing App data or uninstalling the App may erase local settings, playlists and media, subject to Apple operating-system backup behavior. Apple StoreKit subscriptions and purchase entitlements are managed separately by Apple.

Streaming and Technical Information

Audio streaming requires the app to connect to Coffee Music Machine servers and content-delivery infrastructure. Coffee Music Machine currently uses Cloudflare infrastructure for parts of content delivery, hosting/CDN, security, and storage used by the Coffee Music Machine service.

When the app retrieves audio or related resources, Cloudflare and Coffee Music Machine infrastructure may process standard request information such as IP address, request time, requested resource, HTTP headers, user-agent or device/network information supplied by the client, response information, and security or diagnostic events. These technical records may be used only as applicable for content delivery, security, troubleshooting, diagnostics, abuse prevention, and service reliability.

Technical logs are not the same as a Coffee Music Machine user profile. Because the app does not require a Coffee Music Machine account, ordinary streaming requests are not associated with a required Coffee Music Machine login.

How We Use Information

Where applicable, information described in this policy may be used to:

• provide and operate Coffee Music Machine Radio;
• deliver requested audio streams and service resources;
• enable and verify Premium functionality through Apple StoreKit;
• maintain security and prevent abuse;
• diagnose playback, network, server, or availability problems;
• maintain and improve service reliability and performance; and
• in app versions where advertising is enabled, deliver and measure ads, maintain advertising security, detect invalid or fraudulent traffic, and personalize ads only where permitted and consistent with applicable consent choices;
• comply with applicable legal obligations.

Local-only app data is used on the device to provide the relevant app feature, such as remembering Favorites, Recent listening, Queue contents, downloaded audio, station selection, or preferences.

Third-Party Services

Apple / StoreKit

Apple provides App Store distribution and StoreKit transaction and subscription entitlement services. Payment credentials are processed by Apple under Apple's applicable terms and privacy notices.

Cloudflare

Cloudflare provides infrastructure for hosting, CDN/content delivery, streaming resources and security. Request and technical network information may be processed to provide these services. See Cloudflare's Privacy Policy.

Google AdMob and User Messaging Platform (UMP)

In the Build 211 configuration on iPhone and iPad, the Free App supports Google AdMob banner advertising and eligible full-screen interstitial or app-open advertising. Interstitial presentation may be eligible after 60 minutes of audible Free music measured in the foreground, at a track boundary and subject to consent, configuration and inventory; app-open ads may be eligible after returning from the background. These conditions do not guarantee any ad will be served, and unavailable ads do not block audio playback. Mac Catalyst does not request AdMob ads. Premium does not present third-party ads served by the App. Free playback may also include Coffee Music Machine station jingles; Premium playback does not include mandatory station jingles.

When AdMob is active, Google and participating advertising partners may process IP address, App or device information, permitted device or advertising identifiers, ad-interaction events, technical diagnostics and fraud-prevention signals, as applicable. Purposes may include ad delivery, frequency and performance measurement, security, invalid-traffic prevention and personalization where legally permitted. Not every category applies to every user or platform.

Where applicable, Google User Messaging Platform (UMP) can request, record or manage advertising choices according to regional law and the configured App build. Available options may include consent, refusal where offered, or privacy settings through an in-App privacy-options control. Declining personalized ads does not necessarily remove contextual ads where permitted. Availability depends on platform, App version and region. See Google's Privacy Policy.

Data Sharing

Coffee Music Machine does not sell users' personal data.

Technical information may be processed by service providers when necessary to operate the app, deliver audio, provide security, process Apple subscriptions, or maintain the service. Information may also be disclosed where Coffee Music Machine is legally required to do so, or where disclosure is reasonably necessary to establish, exercise, or defend legal rights, protect the service, or address fraud, abuse, or security issues.

Where Google AdMob advertising is enabled in the app, Google and participating advertising partners may receive or otherwise process relevant information for ad delivery, measurement, fraud prevention, security and, where permitted, personalization. The actual processing depends on the app version, advertising configuration, user choices, device permissions and applicable law. Google and its partners may act under their own privacy notices and legal responsibilities. See the Google links in Section 8.

Any processing or sharing of personal data must be carried out in accordance with applicable data-protection law.

Advertising and Tracking

Ads in Free and Premium

In the Build 211 configuration on iPhone and iPad, the Free App supports Google AdMob banner advertising and eligible full-screen interstitial or app-open advertising. Interstitial presentation may be eligible after 60 minutes of audible Free music measured in the foreground, at a track boundary and subject to consent, configuration and inventory; app-open ads may be eligible after returning from the background. These conditions do not guarantee any ad will be served, and unavailable ads do not block audio playback. Mac Catalyst does not request AdMob ads. Premium does not present third-party ads served by the App. Free playback may also include Coffee Music Machine station jingles; Premium playback does not include mandatory station jingles.

Advertising information and purposes

When AdMob is active, Google and participating advertising partners may process IP address, App or device information, permitted device or advertising identifiers, ad-interaction events, technical diagnostics and fraud-prevention signals, as applicable. Purposes may include ad delivery, frequency and performance measurement, security, invalid-traffic prevention and personalization where legally permitted. Not every category applies to every user or platform.

Consent and advertising choices

Where applicable, Google User Messaging Platform (UMP) can request, record or manage advertising choices according to regional law and the configured App build. Available options may include consent, refusal where offered, or privacy settings through an in-App privacy-options control. Declining personalized ads does not necessarily remove contextual ads where permitted. Availability depends on platform, App version and region.

Apple tracking permissions

If a version of the App requests permission for tracking covered by Apple’s AppTrackingTransparency rules, permission will be requested where required. Applicable device-level advertising and tracking permissions can be managed in Apple device settings where supported. The presence of an advertising SDK does not establish that cross-app tracking occurs for every user.

Data Retention

Local app data may remain on your device until you remove the relevant information, delete downloaded audio, clear app data through available controls, or uninstall the app. Device or operating-system backup behavior is controlled by your device and Apple settings, not by Coffee Music Machine.

Technical server, CDN, security, and diagnostic logs may have different retention periods depending on the type of log, operational need, service-provider configuration, and legal requirements. Coffee Music Machine's principle is to retain such information only for as long as reasonably necessary for content delivery, security, troubleshooting, diagnostics, service reliability, abuse prevention, or legal compliance. Where a provider controls its own retention, the provider's applicable settings and privacy policy apply.

Subscription and payment information maintained by Apple is retained according to Apple's policies and legal obligations.

If Google advertising is enabled, Google and participating partners may retain advertising-related information under their own applicable policies and legal obligations. Specific retention practices depend on the partner and configuration. For more details, see the Google policies linked in Section 8; this policy does not assume a fixed retention period for third-party advertising data.

GDPR / EEA Privacy Rights

If the GDPR or other applicable EEA data-protection law applies to processing of your personal data, you may have the right, subject to legal conditions and exceptions, to:

• request access to personal data concerning you;
• request rectification of inaccurate or incomplete personal data;
• request erasure of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive data in a portable format where the right to data portability applies;
• withdraw consent at any time where processing is based on consent, without affecting processing lawfully carried out before withdrawal; and
• lodge a complaint with the relevant data-protection supervisory authority in your EEA country.

These rights are not absolute and may depend on the nature of the processing and applicable legal requirements.

Where advertising consent is requested through Google UMP, applicable rights may include refusing or withdrawing consent and managing choices through the app's privacy options entry point, where available. Rights under UK or Swiss data-protection laws may also apply as relevant to the user's location and processing. These rights do not imply that all advertising stops when consent for personalization is refused.

Legal Bases for Processing

Where GDPR or similar law requires a legal basis, Coffee Music Machine relies on the basis appropriate to the specific processing:

• Performance of a contract or service delivery: to provide the streaming service and Premium functionality you request.
• Legitimate interests: to operate a reliable service, maintain security, prevent abuse, troubleshoot technical problems, and protect Coffee Music Machine systems and rights, balanced against your rights and interests.
• Legal obligations: where processing or retention is required by applicable law.
• Consent: where applicable law requires consent for a particular optional form of processing.

If advertising and Google UMP are enabled, any applicable processing must have an appropriate legal basis under relevant law. Consent is obtained where required for advertising or related technologies; other limited processing for ad delivery, security, fraud prevention or compliance may rely on another lawful basis only where that is permitted and supported by the relevant provider's disclosures. The precise purposes, legal bases and recipients depend on the implemented configuration and consent choices. See the privacy notices in Section 8.

International Data Transfers

Coffee Music Machine uses technical service providers that may operate infrastructure or process service information in more than one jurisdiction. As a result, technical information may be processed outside the country in which you are located where this is necessary to provide the service.

Where applicable law requires safeguards for transfers of personal data from the EEA to another jurisdiction, appropriate legal mechanisms will be used as required, such as an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.

Where Google AdMob is enabled, Google and participating advertising partners may process information across jurisdictions according to their privacy notices and applicable transfer safeguards. Consult the Google policies linked in Section 8 for information on these providers' practices; this policy does not presume specific destination countries for every user.

Data Security

Coffee Music Machine uses reasonable technical and organizational measures appropriate to the nature of the service and the information involved. These measures can include HTTPS/TLS transport, access controls, infrastructure security features, and operational monitoring where appropriate.

No online service or storage method can be guaranteed to be completely secure. Accordingly, this policy does not make an absolute guarantee against every possible security incident.

Children's Privacy

Coffee Music Machine Radio is not designed for the intentional collection of personal data from children. The app does not require a Coffee Music Machine account for normal use.

The App Store age rating of 4+ describes content suitability and does not mean the app is specifically directed to children or designated as a children's service. If a parent or guardian believes a child has provided personal information directly to Coffee Music Machine, they may contact us so that we can review and, where appropriate, delete that information.

Your Rights and Choices

You can control several aspects of your privacy directly:

• change app preferences and station selection through available app settings;
• remove locally stored information or downloaded audio using available app controls;
• uninstall the app to remove locally stored application data from the device, subject to Apple operating-system backup behavior;
• manage or cancel the Premium subscription through Apple Account subscription settings; and
• review and, where available in your app version, update advertising consent choices using the in-app privacy options control; and manage applicable device-level advertising or tracking permissions in Apple device settings;
• contact Coffee Music Machine for privacy requests concerning personal data, if any, held by Coffee Music Machine.

For additional deletion and privacy instructions, see Data Deletion and Privacy Choices.

Changes to This Privacy Policy

Coffee Music Machine may revise this Privacy Policy when the App, provider integrations, legal requirements or data practices change. Material revisions will be communicated when required by applicable law. The current policy is published at this stable URL.

Last updated: November 11, 2026. This revision clarifies Apple platform coverage, dynamic StoreKit subscription offers, local playlist and download records, the Free offline limits, and advertising formats and UMP options in the Build 211 configuration.

Contact Us

For questions about this Privacy Policy, data-protection rights or requests concerning personal data that may be held by Coffee Music Machine, contact the service operator, Anghel-Luchian Crisan (individual, Romania), at contact@spectrumdevworks.com or through the Coffee Music Machine Contact page. Music licensing and business partnerships use the separate contact channel shown on that page.