Privacy Policy

This policy explains what Friday DJ collects, why, and how to get it deleted. The short version: we collect what we need to run a weekly music app with your friends and nothing else. We don't sell data and we don't run ads.

1. Who we are

Friday DJ is operated from the United Kingdom. For privacy questions, contact us at hello@FridayDJ.com.

2. What we collect

When you create an account we collect:

• Your email address
• Your display name and (if available) profile avatar

While using the app we also store:

• The circles you join or create, and your role (admin or member)
• Playlists you submit and votes you cast
• Basic usage logs (requests, error messages) for debugging and rate-limiting

3. Why we collect it

We only collect data to make Friday DJ work: authenticating you, showing you your circle, submitting playlists, counting votes, and preventing abuse.

Under UK GDPR, our lawful basis for processing most of this is performance of a contract (the Terms you agreed to when signing in). For abuse-prevention logs we rely on legitimate interests.

4. Who we share it with

We don't sell your data. We never use it to train AI models. We share it only with the small set of services required to run the app:

• Supabase — hosts the database and manages authentication. Data is stored in the EU.
• Vercel — hosts the web app.
• YouTube — provides embedded video playback for songs.
• Cloudflare — handles email delivery for hello@FridayDJ.com.

5. Cookies and tracking

Friday DJ uses strictly necessary cookies to keep you signed in. We don't run third-party advertising cookies, pixel trackers, or cross-site profiling. If we add product analytics later (e.g. Plausible, PostHog), we'll update this page and flag it to users.

6. How long we keep it

We keep your profile and submissions while your account is active. Usage logs are retained for up to 90 days and then automatically deleted. When you ask us to delete your account, we remove your profile, submitted playlists, and votes within 30 days, except where we're legally required to retain something longer.

7. Your rights

Under UK and EU GDPR you can ask us to:

• Send you a copy of the data we hold about you
• Correct anything that's wrong
• Delete your account and associated data
• Stop or limit how we process it
• Object to any processing based on legitimate interests

Email hello@FridayDJ.com and we'll action your request within 30 days. If you're unhappy with our response, you can complain to the UK Information Commissioner's Office.

8. Children

Friday DJ is not intended for anyone under 13. If you think a child under 13 has given us data, email us and we'll delete it.

9. International transfers

Our primary data is stored in the EU. Some of our providers (like YouTube/Google) operate globally, so data may be transferred outside the UK and EU. Where that happens, we rely on the providers' Standard Contractual Clauses or equivalent safeguards.

10. Changes to this policy

We'll update this page when our practices change. The “Last updated” date at the top will always reflect the current version. If the change is material, we'll email registered users.