Privacy Policy
iDj ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the iDj mobile and web application.
1. Information We Collect
Account information
When you create an account or sign in, we collect your email address and a display name via Firebase Authentication. You may optionally upload a profile photo, which is stored in Firebase Storage.
Session data
When you participate in a DJ session we record your song requests, the session identifier, and timestamps. DJs and Club Managers also generate session access codes that we store in our database.
Music search
Song search queries are forwarded to the YouTube API to return results. We do not store individual search queries.
Usage data
We collect standard server logs (IP address, device type, operating system, pages visited, and timestamps) for security monitoring and to improve the service.
2. How We Use Your Information
- To provide, operate, and maintain the iDj service.
- To authenticate your identity and manage session access.
- To process and display song requests in real time.
- To communicate service updates or respond to support requests.
- To detect and prevent fraud, abuse, and security incidents.
3. Sharing of Information
We do not sell or rent your personal information. We may share data with:
- Firebase / Google — authentication, database (Firestore), and storage.
- Railway — backend hosting for our API.
- YouTube Data API — to search and stream music content.
- Law enforcement — only when required by applicable law.
4. Data Retention
We retain account data for as long as your account is active. Song request history is retained for up to 90 days after a session ends. You may delete your account and all associated data at any time — see our Account Deletion page for full instructions and a breakdown of what is removed.
5. Security
All data is transmitted over HTTPS. Firestore access rules restrict client reads to session-relevant data. We implement rate limiting and token-based authentication to prevent unauthorized access. No system is completely secure; we encourage you to use a strong, unique password.
6. Children's Privacy
iDj is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
7. Your Rights
Depending on your location you may have the right to access, correct, or delete your personal data, object to or restrict processing, and data portability. To exercise these rights, contact us at the address below.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
9. Account Deletion
You can delete your iDj account and all associated data at any time directly from the app or by contacting us. For step-by-step instructions and a full breakdown of what is deleted or retained, visit our Account Deletion page.
10. Contact Us
If you have questions or requests regarding this Privacy Policy, please reach us at our contact page.