Privacy Policy

Last updated: 20 October 2026

This policy explains what personal data Jamline collects, why, who it is shared with, and the choices and rights you have. It applies to the Jamline apps for Android, iOS and the web, and to jamline.com (together, the “Service”).

Who is responsible

The controller of your personal data is Samuel Fuentes, who operates Jamline (“we”, “us”). You can reach us at info@jamline.com.

What we collect

Account information. Your username, first and last name, email address, password (stored only as a one-way hash), date of birth and country. You choose whether your date of birth is shown on your profile.

Profile. Profile and cover pictures, biography, genres, instruments, links and discography that you add.

Content you create. Posts, comments, songs, recordings, images, videos, playlists, projects and songwriting, as well as follows and stars.

Messages and calls. The text, images, audio and video you send in chats are stored on our servers so they can be delivered and shown on your devices. Messages are not end-to-end encrypted. Voice and video calls connect your devices directly, or through our relay server when a direct connection is not possible. We do not record or store what is said in a call; we keep a record of who called, in which chat, when, and for how long.

Device and technical data. A push notification token for each device you sign in on, your online status (which you can hide in the privacy settings), and server logs containing your IP address and the requests your device makes.

Usage statistics, if you allow them. The app asks once on each device whether we may count how it is used. If you allow it, Google Analytics for Firebase receives anonymous statistics: which screens and features are used (for example that a post was created or the metronome was started, with details such as the type of media or the tempo range), your country, app language and account category, and the type of device. It never receives what you write or post, your username or your account ID. Without your permission nothing is collected. You can change your answer at any time in Settings › Privacy.

Crash reports. On phones, when the app crashes or a request fails on our side, a crash report (Firebase Crashlytics) is sent with the device model, the operating system and app version, the screen you were on and technical details. It is linked to an internal account number so we can fix problems you run into. You can switch crash reports off in Settings › Privacy. The web version sends no crash reports; if you allow usage statistics, it counts errors in the same anonymous way.

Advertising. Our advertising provider may use your device’s advertising identifier and similar data to show and measure ads.

Purchases. If you buy Jamline Pro, we receive from our subscription provider RevenueCat which plan you bought, in which store (App Store, Google Play or Paddle on the web), whether it is a trial, when it renews or ends, and the price and currency of each payment. We never receive your card or bank details: Apple, Google or Paddle handle the payment.

Permissions. The app asks for access to your camera, microphone, photos and media, and notifications. It uses them only when you use a feature that needs them, such as recording, calling or attaching a file. You can withdraw these permissions in your device settings at any time.

How we use it

• To provide the Service: your account, profile, feed, messages, calls and notifications.
• To translate content. The text of posts, comments and biographies is sent to a translation provider when you publish it, so that other users can read it in their language.
• To send emails: verifying your address, resetting your password, and activity notifications, which you can turn off in the settings. We do not send newsletters.
• To keep Jamline safe: handling reports and blocks, preventing abuse, and enforcing our Terms of Service and Child Safety Standards.
• To understand how Jamline is used and to fix errors.
• To show advertising, which keeps Jamline free.

We do not sell your personal data.

Legal bases

Where the EU or UK General Data Protection Regulation or the Swiss Federal Act on Data Protection applies, we process your data because it is necessary to provide the Service you signed up for (contract); for our legitimate interests in keeping the Service secure and working, including crash reports, preventing abuse, and improving it; with your consent, where the law requires it, such as for usage statistics and personalised advertising; and to meet our legal obligations.

Who we share it with

Other users. Your profile, posts and comments are visible to other users. Messages are visible to the people in the chat.

Service providers who process data on our behalf: cloud hosting and database, file storage, translation, analytics and crash reporting, push notification delivery, email delivery and advertising. They may use your data only to provide their services to us, or, in the case of the advertising provider, as described in its own privacy policy.

Authorities. When the law requires it, to protect the safety of a person, or to report child sexual abuse material as described in our Child Safety Standards.

International transfers

Our service providers may process your data outside Switzerland and the European Economic Area, including in the United States. Where they do, we rely on safeguards recognised by law, such as standard contractual clauses. Our servers are in the United Kingdom and our database in Ireland; both countries are recognised by Switzerland and the EU as providing adequate protection.

How long we keep it

We keep your data while you have an account. You can delete your account in the app’s settings. When you do, we delete your account, profile, posts, comments, songs, playlists, chats and pictures. Server logs are kept for a limited time and then overwritten. Residual copies may remain in backups for a limited period. We keep data for longer only where the law requires it, for example records relating to a report to the authorities.

Advertising choices

In the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent before showing personalised ads. You can also limit ad tracking or reset your advertising identifier in your device settings. You can change or withdraw your consent at any time in the app under Settings → Privacy → Privacy & ad choices. Declining does not remove ads; they are then not personalised.

Your rights

Depending on where you live, you can ask us for access to your data, a copy of it in a portable format, its correction or deletion, or restriction of its processing, and you can object to processing based on our legitimate interests. Where processing is based on consent, you can withdraw it at any time. Write to info@jamline.com; we answer within 30 days. You also have the right to complain to a data protection authority, such as the Swiss Federal Data Protection and Information Commissioner or the authority in your country.

Children

Jamline is not intended for children under 16, and we do not knowingly collect their data. If you believe a child under 16 has an account, contact us and we will remove it.

Security

Data travels between the app and our servers over encrypted connections, passwords are stored only as hashes, and access to our systems is restricted. No system is perfectly secure; if a breach puts you at risk, we will tell you and the relevant authorities as the law requires.

Web version and cookies

The web version stores data in your browser, such as your sign-in session and settings, so that you stay signed in. It sets analytics cookies only if you allow usage statistics. It does not show ads.

Devices you sign in on

To keep your account secure and to prevent abuse, we keep a record of each device you sign in on: its type (for example iPhone, Android phone or browser), model, operating system version and app version, when it was first and last used and when you last signed in on it, and the IP address it last used together with the country that address belongs to. We look the country up on our own server; the address is not sent to anyone for this. On the web version, the app keeps a random device identifier in your browser while you are signed in, and removes it when you sign out of every account.

Only Jamline’s administrators see this record (moderators see the devices, but not the addresses). We use it, for example, to sign a lost or stolen device out of your account. Each device is deleted 180 days after it was last used, and all of them when you delete your account. We rely on our legitimate interest in keeping accounts and the Service secure.

Your timeline

Your timeline is ranked for you: newer posts, posts by people you follow, posts in your genres and posts with more stars, comments and plays come first. To show you fewer posts you have already seen, we remember the last 500 posts that were on your screen for at least two seconds. That list is stored with your account, is used for nothing else, and is deleted when you delete your account. Posts by people you blocked, or who blocked you, are not shown.

Link pages

If you switch on your link page, it is public at links.jamline.com/<your username>: anyone with the address can see your name, photo, links and songs and the profile details you choose to show, and search engines may list it unless you hide it from them in the app. You can switch it off at any time. To show you how your page does, we count views, link clicks and song plays per day. The page uses no cookies, and we do not store visitors’ IP addresses: to count each visitor once every 30 minutes, the server keeps a scrambled code of the address and browser in memory for 30 minutes only. Daily counts are deleted after 91 days (the free plan shows the last 7, Jamline Pro the last 90); totals are deleted with your account.

Jamline Pro

We use the purchase information above to give you Jamline Pro, to show you your plan and what you use of it, to apply each plan’s limits, and to know how many people subscribe. RevenueCat (United States) processes it on our behalf. To link a purchase to your account, RevenueCat receives your account ID, never your name or email address. When you buy on the web, Paddle.com (United Kingdom) is the seller: it collects your name, email address, country and payment details itself and is responsible for them as described in Paddle’s privacy notice; its checkout opens in a window from Paddle. In the apps, Apple and Google do the same under their own privacy policies. If you allow usage statistics, your plan (free or Pro) and steps such as opening the Pro page or starting a purchase are counted with them, without prices. We keep records of purchases for as long as accounting law requires (in Switzerland, ten years), also after you delete your account. Our legal basis is the contract with you and our legal obligations.

Changes to this policy

We may update this policy. If a change is significant, we will tell you in the app or by email before it takes effect.

Translations

This policy is available in several languages. If the versions differ, the English version prevails.