Privacy Policy

01 Introduction & Overview

Welcome to VishvaX Music (“VishvaX”, “we”, “us”, or “our”). VishvaX Music is a modern, high-fidelity music streaming application and web player designed to provide audio streaming, synchronized lyrics, top music charts, and personal playlist management.

This Privacy Policy explains how we collect, use, store, protect, and delete your information when you access or use:

• Our Android mobile application: com.vishvax.music (available via official package distribution and the Google Play Store).
• Our official web application and services: https://music.vishvax.in.

This policy has been structured to comply strictly with the Google Play Developer Program Policies (including the User Data Policy and Data Safety requirements), as well as global data protection regulations including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Indian Digital Personal Data Protection Act (DPDPA).

By downloading, installing, registering, or using VishvaX Music, you acknowledge that you have read and understood this Privacy Policy.

02 Information We Collect

We practice data minimization. We only collect information that is strictly necessary to operate, improve, and secure our music streaming service.

A. Information You Provide Directly

• Account & Profile Information: When you choose to sign in to VishvaX Music via Google Sign-In, we receive basic authentication details provided by Google OAuth: your full name, email address, profile picture URL, and a unique user identifier (UID).
• User Library & Preferences: Songs you mark as favorites/liked, custom playlists you create (titles and track lists), your chosen audio streaming quality tier (e.g., 320 kbps, 160 kbps, or 96 kbps), and equalizer sound presets.
• Support Communications: If you contact our support team via email, we receive your email address, subject line, and the contents of your message.

B. Information Collected Automatically

• Playback & Streaming Interactions: Songs streamed, playback timestamps, search queries typed into the search bar, playback queue state, and whether songs were completed or skipped. This information is used solely to generate your “Recently Played” history and improve recommendations.
• Device & Hardware Attributes: Android OS version, device manufacturer, device model, app build version (e.g., v2.1.0), preferred interface language, and screen display dimensions.
• Network & Connectivity Status: Network type (Wi-Fi, cellular, or offline) to automatically adapt streaming buffer and prevent playback interruption.
• Non-Persistent IP Address & Approximate Region: Your IP address is processed temporarily during HTTP/HTTPS requests to establish network connections and determine your country code (e.g., via country.is) for delivering regionally relevant charts and language trends. We do not store precise GPS coordinates.

03 Google Sign-In & Authentication

VishvaX Music utilizes Google Sign-In (powered by Google Credential Manager on Android and Firebase Authentication OAuth 2.0 on the Web) to provide seamless, passwordless login.

• No Password Handling: We never see, handle, or store your Google account password. Authentication is performed directly on Google's secure authentication servers.
• Scope of Access: We request only standard open authentication scopes (profile and email). We do not request access to your Google Drive, Gmail, Google Contacts, Google Calendar, or other Google services.
• Session Storage: Upon successful authentication, a cryptographically signed authentication token and your basic profile info (display name, email, avatar URL, UID) are stored locally on your device in secure storage (such as encrypted SharedPreferences on Android or localStorage on modern web browsers) to keep you logged in across app restarts.

04 Android Device Permissions (Google Play Disclosure)

In accordance with Google Play Store Developer Guidelines, the following table details every system permission declared in the VishvaX Music Android application (AndroidManifest.xml), including its technical necessity and usage:

Note: None of the permissions declared by VishvaX Music are categorized as dangerous runtime permissions requiring access to sensitive user data (such as Contacts, Camera, Microphone, or Fine Location).

05 Music Activity & Usage Data

When you stream tracks on VishvaX Music, we process listening activity to deliver essential user-requested features:

• Playlists & Favorites: Your custom playlists and liked tracks are stored in Google Cloud Firestore and linked to your User ID so they remain available when you switch between Android and Web devices.
• Recently Played History: We maintain a local and cloud-synced list of your recently played songs so you can quickly resume listening.
• Search History: Recent search terms are cached locally on your device for fast autocomplete and can be cleared at any time from application settings.
• Audio Preferences: Your preferred audio quality setting (e.g., 320 kbps high fidelity vs. 96 kbps data saver) is stored locally so you do not need to reconfigure it during every session.

06 Third-Party Services & SDKs

To provide high-quality streaming, authentication, and platform stability, VishvaX Music integrates with reputable third-party infrastructure providers. Each provider operates under strict confidentiality and privacy agreements:

07 How We Use Your Information

We use the data collected strictly for the following legitimate purposes:

• Service Delivery: To stream audio tracks, display album artwork, retrieve lyrics, and manage playback controls.
• Cross-Device Synchronization: To allow you to access your personal playlists and favorites on both your Android phone and web browser.
• Personalized Discovery: To present trending songs, regional charts, and recommended artists based on your chosen region and streaming history.
• Customer Support & Communication: To answer your troubleshooting inquiries, assist with account recovery, or respond to legal requests.
• Safety & Abuse Prevention: To detect, prevent, and mitigate security threats, denial-of-service attacks, and unauthorized access to our APIs.

08 Data Storage, Retention & Security

The security of your personal data is paramount. We implement strict technical and organizational safeguards:

• Encryption in Transit: All data transmitted between the VishvaX Music application, our web servers, and third-party APIs is encrypted using modern TLS 1.2 / TLS 1.3 (HTTPS) protocols.
• Database Security: User records stored in Google Cloud Firestore are protected by granular security rules (firestore.rules) ensuring users can only read and write their own playlists and profiles.
• Data Retention: We retain your profile data, playlists, and favorites for as long as your account remains active. If you delete your account or submit a deletion request, your data is permanently removed as described in Section 10.
• Local Cache Management: Cached album artwork, temporary song chunks, and lyrics stored on your local device can be purged at any time through the in-app settings or your Android application storage settings.

09 Data Sharing & Disclosure

We do not sell, rent, trade, or commercialize your personal information to third parties. We disclose data only in the following limited circumstances:

• Essential Infrastructure Service Providers: With trusted cloud infrastructure providers (such as Google Cloud / Firebase) solely for hosting, database management, and authentication as described in Section 6.
• Legal Obligations: If required to do so by applicable law, court order, subpoena, or lawful request by public authorities (such as national security or law enforcement).
• Protection of Rights: To protect the rights, property, and safety of VishvaX Music, our users, or the general public against fraudulent or malicious activity.

10 Account & Data Deletion Procedure (Google Play Compliance)

In strict compliance with Google Play Store User Data policies, users have the right to request the complete deletion of their account and all associated data at any time.

Method 1: Direct In-App Deletion (Instant)

Method 2: Web & Email Deletion Request

If you have uninstalled the application or cannot access your device, you can request account deletion by emailing our privacy team:

What Happens When Your Account Is Deleted:

• Immediate Revocation: Your authentication profile is revoked from Firebase Authentication, preventing any future logins.
• Permanent Data Wipe: All custom playlists, liked songs, favorite artists, and listening history stored under your UID in Google Cloud Firestore are permanently deleted within 30 days of the request.
• Local Cache: Any audio files or images cached locally on your device are removed when you clear app data or uninstall the application.
• Non-Personal Logs: Anonymized server logs may be retained temporarily for diagnostic purposes before automatic rotational deletion (up to 90 days).

11 User Privacy Rights (GDPR, CCPA/CPRA & Indian DPDP)

Depending on your geographic location, you may have specific statutory rights regarding your personal information:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can update or correct your profile information at any time via your Google Account settings or in-app preferences.
• Right to Erasure (“Right to be Forgotten”): You can request the complete deletion of your data as outlined in Section 10.
• Right to Data Portability: You may request an export of your saved playlists and personal library data in a structured, machine-readable format.
• Right to Withdraw Consent: You may revoke consent to data processing at any time by signing out or requesting account closure.
• Non-Discrimination: We will never discriminate against you (e.g., by denying service or degrading quality) for exercising any of your privacy rights.

To exercise any of these rights, contact us at privacy@vishvax.in. We respond to all verified requests within 30 days.

12 Children's Privacy

VishvaX Music is designed for general audiences and is not directed to children under the age of 13 (or under 16 in certain European jurisdictions).

We do not knowingly collect or solicit personal identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information through Google Sign-In without verified parental consent, we take immediate steps to delete that account and remove the associated data from our servers.

If you are a parent or guardian and believe that your child has provided personal information to VishvaX Music, please contact us immediately at privacy@vishvax.in.

13 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect modifications to our application, security practices, legal requirements, or Google Play Store policies.

When updates occur, we will revise the “Last Updated” date at the top of this document. For significant material changes, we will provide a prominent in-app notification or banner prior to the changes taking effect. We encourage you to review this policy periodically.

14 Contact & Legal Entity Information

If you have any questions, concerns, complaints, or requests regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer and Support Team: