Privacy Policy - Coffee Music Machine Radio

Introduction

This Privacy Policy applies to Coffee Music Machine Radio, the iOS application with bundle ID com.coffeemusicmachine.radio, and to the Coffee Music Machine technical infrastructure used to provide audio streaming and related app functionality. In this policy, Coffee Music Machine, we, and us refer to the operator of the Coffee Music Machine Radio app and related CMM service, using the Spectrum Records contact channel listed in Section 20. This policy explains what information may be processed, why it may be processed, how subscriptions are handled, what information can remain on your device, and what privacy choices are available to you.

The app can be used without creating a Coffee Music Machine account. The Free experience provides shuffled radio playback from the Coffee Music Machine catalog. Premium is an Apple auto-renewable subscription that includes a 7-day free trial followed by a monthly subscription and can enable features such as selection By Space, selection By Genre, Full Album playback, Favorites, Play Next Queue, offline downloads, and persistent Premium station selection.

This policy is intended to describe the current service accurately. It does not assume that every piece of technical data generated by a device, network, Apple, or infrastructure provider is collected directly by Coffee Music Machine.

Information We Collect

Information you provide directly

The app does not require you to create an account or provide a name, email address, postal address, phone number, or password in order to listen. If you contact Coffee Music Machine by email or through an official contact channel, we receive the information you choose to include in that communication, such as your email address and message content.

Technical and service data

When the app requests audio or other service resources, the hosting, CDN, storage, security, and network infrastructure used by Coffee Music Machine may automatically process technical information required to deliver those requests. Depending on the request and provider configuration, this can include an IP address, date and time, requested resource or URL, HTTP request and response information, user-agent or device/network information supplied with the request, response status, and security or diagnostic events.

Information stored locally on your device

Depending on the app version and the features you use, Favorites, Recent listening, Play Next Queue, downloaded audio, selected station, Premium station preferences, and other app preferences or settings may be stored locally on your device.

Information we do not ask for as part of normal app use

No Coffee Music Machine login is required. Coffee Music Machine does not receive or store your complete payment card number, card security code, or other complete card credentials used for an Apple In-App Purchase. Payment credentials are handled by Apple.

No Account Required

Coffee Music Machine Radio can be used without creating a Coffee Music Machine user account. The app does not require a Coffee Music Machine username or password for its normal Free or Premium listening experience. Premium access is associated with Apple In-App Purchase entitlement information made available through StoreKit rather than a separate Coffee Music Machine login.

Subscriptions and Payments

Premium is offered as an auto-renewable Apple In-App Purchase. The current Premium offer includes a 7-day free trial followed by a monthly subscription, subject to the terms and pricing displayed by Apple at the time of purchase.

Purchases, free trials, renewals, cancellations, billing, and payment credentials are processed through Apple and StoreKit. Apple manages your payment method and card information. Coffee Music Machine does not receive or store your complete card details.

The app may use StoreKit information needed to determine whether Premium features should be available, such as purchase or subscription entitlement status. This does not give Coffee Music Machine your full card credentials. Information managed directly by Apple is governed by Apple's terms and privacy practices. You can review Apple's Privacy Policy.

Local Device Data

To provide app features without requiring an account, certain information may remain on your device. Depending on the implementation and the features you use, this can include:

• Favorites;
• Recent listening information;
• the Play Next Queue;
• downloaded audio files made available for offline use;
• the selected station, including a persistent Premium station selection; and
• app preferences and settings.

Information that is stored only locally is not automatically made personal data held by Coffee Music Machine merely because it exists on your device. Local data can be affected by actions you take on the device, such as removing downloads, clearing app information where controls are available, or uninstalling the app.

Streaming and Technical Information

Audio streaming requires the app to connect to Coffee Music Machine servers and content-delivery infrastructure. Coffee Music Machine currently uses Cloudflare infrastructure for parts of content delivery, hosting/CDN, security, and storage used by the Coffee Music Machine service.

When the app retrieves audio or related resources, Cloudflare and Coffee Music Machine infrastructure may process standard request information such as IP address, request time, requested resource, HTTP headers, user-agent or device/network information supplied by the client, response information, and security or diagnostic events. These technical records may be used only as applicable for content delivery, security, troubleshooting, diagnostics, abuse prevention, and service reliability.

Technical logs are not the same as a Coffee Music Machine user profile. Because the app does not require a Coffee Music Machine account, ordinary streaming requests are not associated with a required Coffee Music Machine login.

How We Use Information

Where applicable, information described in this policy may be used to:

• provide and operate Coffee Music Machine Radio;
• deliver requested audio streams and service resources;
• enable and verify Premium functionality through Apple StoreKit;
• maintain security and prevent abuse;
• diagnose playback, network, server, or availability problems;
• maintain and improve service reliability and performance; and
• comply with applicable legal obligations.

Local-only app data is used on the device to provide the relevant app feature, such as remembering Favorites, Recent listening, Queue contents, downloaded audio, station selection, or preferences.

Third-Party Services

Apple / StoreKit

Apple provides the App Store distribution environment and StoreKit services used for Premium subscriptions and purchases. Apple processes payment credentials and transaction-related information under Apple's own policies and terms.

Cloudflare

Cloudflare provides infrastructure used by Coffee Music Machine for content delivery, hosting/CDN, security, and storage components related to the service. Cloudflare may process network and request information as necessary to provide those services. You can review Cloudflare's Privacy Policy.

These providers operate under their own privacy policies and legal obligations. Coffee Music Machine does not list analytics, advertising, or tracking providers in this policy unless they are actually part of the app or service being described.

Data Sharing

Coffee Music Machine does not sell users' personal data.

Technical information may be processed by service providers when necessary to operate the app, deliver audio, provide security, process Apple subscriptions, or maintain the service. Information may also be disclosed where Coffee Music Machine is legally required to do so, or where disclosure is reasonably necessary to establish, exercise, or defend legal rights, protect the service, or address fraud, abuse, or security issues.

Any processing or sharing of personal data must be carried out in accordance with applicable data-protection law.

Advertising and Tracking

Coffee Music Machine Radio does not display third-party advertising. Coffee Music Machine does not use the technical or service data described in this policy to serve targeted advertising.

The technical logs that may be generated by content-delivery, network, security, or server infrastructure are service-operational data and are not described here as advertising data. If a future app version introduces a form of tracking that requires additional notice or permission under Apple's AppTrackingTransparency framework or applicable law, Coffee Music Machine will update this policy and obtain any required permission before using that functionality.

Data Retention

Local app data may remain on your device until you remove the relevant information, delete downloaded audio, clear app data through available controls, or uninstall the app. Device or operating-system backup behavior is controlled by your device and Apple settings, not by Coffee Music Machine.

Technical server, CDN, security, and diagnostic logs may have different retention periods depending on the type of log, operational need, service-provider configuration, and legal requirements. Coffee Music Machine's principle is to retain such information only for as long as reasonably necessary for content delivery, security, troubleshooting, diagnostics, service reliability, abuse prevention, or legal compliance. Where a provider controls its own retention, the provider's applicable settings and privacy policy apply.

Subscription and payment information maintained by Apple is retained according to Apple's policies and legal obligations.

GDPR / EEA Privacy Rights

If the GDPR or other applicable EEA data-protection law applies to processing of your personal data, you may have the right, subject to legal conditions and exceptions, to:

• request access to personal data concerning you;
• request rectification of inaccurate or incomplete personal data;
• request erasure of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive data in a portable format where the right to data portability applies;
• withdraw consent at any time where processing is based on consent, without affecting processing lawfully carried out before withdrawal; and
• lodge a complaint with the relevant data-protection supervisory authority in your EEA country.

These rights are not absolute and may depend on the nature of the processing and applicable legal requirements.

Legal Bases for Processing

Where GDPR or similar law requires a legal basis, Coffee Music Machine relies on the basis appropriate to the specific processing:

• Performance of a contract or service delivery: to provide the streaming service and Premium functionality you request.
• Legitimate interests: to operate a reliable service, maintain security, prevent abuse, troubleshoot technical problems, and protect Coffee Music Machine systems and rights, balanced against your rights and interests.
• Legal obligations: where processing or retention is required by applicable law.
• Consent: where applicable law requires consent for a particular optional form of processing.

International Data Transfers

Coffee Music Machine uses technical service providers that may operate infrastructure or process service information in more than one jurisdiction. As a result, technical information may be processed outside the country in which you are located where this is necessary to provide the service.

Where applicable law requires safeguards for transfers of personal data from the EEA to another jurisdiction, appropriate legal mechanisms will be used as required, such as an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.

Data Security

Coffee Music Machine uses reasonable technical and organizational measures appropriate to the nature of the service and the information involved. These measures can include HTTPS/TLS transport, access controls, infrastructure security features, and operational monitoring where appropriate.

No online service or storage method can be guaranteed to be completely secure. Accordingly, this policy does not make an absolute guarantee against every possible security incident.

Children's Privacy

Coffee Music Machine Radio is not designed for the intentional collection of personal data from children. The app does not require a Coffee Music Machine account for normal use.

The App Store age rating of 4+ describes content suitability and does not mean the app is specifically directed to children or designated as a children's service. If a parent or guardian believes a child has provided personal information directly to Coffee Music Machine, they may contact us so that we can review and, where appropriate, delete that information.

Your Rights and Choices

You can control several aspects of your privacy directly:

• change app preferences and station selection through available app settings;
• remove locally stored information or downloaded audio using available app controls;
• uninstall the app to remove locally stored application data from the device, subject to iOS backup behavior;
• manage or cancel the Premium subscription through Apple Account subscription settings; and
• contact Coffee Music Machine for privacy requests concerning personal data, if any, held by Coffee Music Machine.

For additional deletion and privacy instructions, see Data Deletion and Privacy Choices.

Changes to This Privacy Policy

Coffee Music Machine may update this Privacy Policy when the app, service infrastructure, legal requirements, or privacy practices change. The current version will remain available at this stable URL, and the Last updated date at the top of the page will be revised when a material update is published.

Contact Us

For questions about this Privacy Policy, privacy rights, or a request concerning personal data that may be held by Coffee Music Machine, use the official Coffee Music Machine contact channel published on this website: