Privacy Policy
Streamwave Limited is responsible for the personal data collected through Streamza. You can reach us at support@streamza.ai.
1. What we collect
Your account. Your email address and name, and — if you give them — your phone number, photo, date of birth and country. If you sign in with Google we receive your name, email address and profile picture from Google, and nothing else.
How you use Streamza. What you play and for how long, what you search for, what you save, download or add to a playlist, and the plan you are on.
Your devices. A device identifier, the device name and type, and the IP address it connects from. We use these to enforce the number of devices your plan allows and to spot abuse.
Location. Only if you tap "use my location", and only to work out which country you are in. We keep the country. We do not keep your coordinates and we do not track your movements. You can skip this and pick your country from a list instead.
Payments. The plan, the amount, VAT, the currency, the reference from the payment provider, and for mobile money the phone number and network you paid with. We never receive your full card number, your mobile money PIN or your bank credentials — those go straight to the payment provider.
Streamza for Business. The venue name and label you give us, the access code and device token for each screen, and a log of what played, when, and on which stream.
Messages. Notifications we send you inside the app, and any support correspondence.
2. Why we use it
- To provide the service you asked for and run your account.
- To take payment, and to keep the tax and accounting records the law requires.
- To report plays to rights holders and collecting societies, so that artists are paid.
- To keep Streamza safe: enforcing device limits, and detecting fraud and abuse.
- To recommend music and to improve what we build.
- Location is used only with your consent, and only when you ask for it.
3. Who we share it with
We do not sell your personal data. We share it with:
- Supabase — hosting, database, file storage and sign-in.
- Vercel — hosting for our websites.
- Google — only if you choose to sign in with Google.
- Our payment partners and your mobile network — to take payment.
- Rights holders and collecting societies — reports of what was played. These are about the music, not about who you are, except where a business licence requires the venue to be named.
- Anyone we must share with by law, or in order to bring or defend a legal claim.
4. Where it is kept
Our systems are hosted with providers whose servers may sit outside Uganda. Where data leaves Uganda we rely on the contractual protections those providers give.
5. How long we keep it
- Account and listening data: while your account exists, and for a short period afterwards so that billing and any dispute can be settled.
- Billing records: for as long as tax and accounting law requires.
- Play logs used for licensing: for as long as our reporting obligations to rights holders require.
- Support correspondence: up to two years.
6. Your rights
Under Uganda's Data Protection and Privacy Act, 2019 you may ask us to show you the personal data we hold about you, correct it, delete it, stop a particular use of it, or give you a copy. You may withdraw consent you have given, such as for location, at any time. Write to support@streamza.ai and we will answer within a reasonable time. If you are not satisfied, you may complain to the Personal Data Protection Office.
7. Children
Streamza is not aimed at children under 13, and we do not knowingly collect their data. If you are under 18, use Streamza only with a parent or guardian's consent. If you believe a child's data is with us, write to support@streamza.ai and we will remove it.
8. Security
Sign-in tokens and payment tokens are held in your device's secure storage. Offline downloads are encrypted on the device and can be read only by the Streamza app. Access to our systems is limited to the people who need it. No system is perfectly secure; if a breach affects you we will tell you, and the regulator, as the law requires.
9. Cookies and similar
Our websites use only what is needed to keep you signed in and to remember settings such as volume and theme. We do not use advertising cookies or third-party trackers.
10. Changes
When we change this policy materially we publish the new version and ask you to accept it the next time you open the app or the console.