Privacy Policy

Introduction

This Privacy Policy describes how Harmonic ("we", "our", or "us") collects, uses, stores, shares, and protects personal data when you use the Harmonic website, mobile applications, and related services (collectively, the "Services").

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy and agree to our data practices as described herein. If you do not agree with this Privacy Policy, please do not use the Services.

Data we collect

We collect only the information necessary to provide, improve, and secure the Services. The categories of personal data we collect include:

• Account data: your email address, display name, and password credentials (or authentication tokens if you sign in through a third-party identity provider).
• Usage data: information about your interactions with the Services, such as audio sessions played, session duration, favorites, playlists, and app settings.
• Device data: your device type, operating system version, app version, language preference, and unique device identifiers used for diagnostics and fraud prevention.
• Payment data: if you purchase a subscription, we receive limited billing information from the applicable app store or payment processor. We do not store full payment card details.
• Communications data: emails, support tickets, or other messages you send to us, including your contact details and the content of your inquiries.

Legal basis for processing

We process personal data on the basis of performance of a contract (to provide the Services you requested), our legitimate interests (to improve security and product quality), your consent (for optional analytics and marketing communications), and compliance with legal obligations.

Where required by applicable law, we will obtain your consent before placing non-essential cookies or sending promotional communications. You may withdraw consent at any time by adjusting your preferences or contacting us.

How we use your data

We use personal data for the following purposes:

• To create and maintain your account, synchronize your library across devices, and remember your preferences and session history.
• To provide customer support, respond to your inquiries, and notify you of important service updates or security incidents.
• To analyze aggregated usage trends, diagnose crashes, monitor performance, and improve the audio library and user experience.
• To send newsletters, product updates, or promotional offers if you have opted in. You may unsubscribe from marketing emails at any time.
• To enforce our Terms of Service, prevent fraud, abuse, and illegal activity, and protect the rights and safety of our users and the public.

Cookies and similar technologies

Our website uses cookies and similar technologies to remember your cookie consent choices, authenticate sessions, and understand how visitors interact with the site.

Strictly necessary cookies are essential for the website to function and cannot be disabled. Optional analytics and marketing cookies are placed only with your consent, which you can manage through the consent banner or your browser settings.

Data sharing and subprocessors

We do not sell personal data. We share personal data only with trusted service providers (subprocessors) who perform functions on our behalf, such as hosting, analytics, payment processing, and customer support. These providers are contractually bound to use data only as instructed and to maintain appropriate security measures.

We may also disclose personal data if required by law, regulation, legal process, or governmental request, or to protect our rights, property, or safety, or that of our users or others.

International data transfers

Your personal data may be transferred to, stored in, or processed from countries outside of your country of residence. Whenever we transfer personal data across borders, we implement appropriate safeguards, such as standard contractual clauses or equivalent legal mechanisms, to ensure your data remains protected in accordance with this Privacy Policy.

Data retention

We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Account data is generally kept until you delete your account or until the account has been inactive for an extended period. After deletion, residual copies may remain in backups for a limited time before being permanently removed.

Your rights and choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate or incomplete personal data.
• The right to request deletion of your personal data, subject to legal retention obligations.
• The right to object to or restrict certain processing activities.
• The right to data portability, where technically feasible.
• The right to withdraw consent at any time, where processing is based on consent.

California and EU privacy rights

Residents of California may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, and opt out of the sale or sharing of personal information.

Individuals in the European Economic Area, the United Kingdom, and Switzerland may have rights under the General Data Protection Regulation (GDPR) and applicable national data protection laws. If you have concerns about our handling of your personal data, you also have the right to lodge a complaint with your local data protection authority.

Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

The Services are not intended for children under the age of 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us so we can delete it promptly.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Services. We will post the revised version with an updated effective date and, for material changes, provide notice through the Services or by email. Your continued use of the Services after the changes take effect constitutes acceptance of the revised Privacy Policy.

Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at privacy@harmonic.app.