EQHO Player Privacy Policy

EQHO Player is operated by Christopher Rogers trading as EQHO Player in the United Kingdom.

For data-protection purposes, Christopher Rogers trading as EQHO Player is the data controller responsible for the personal information described in this policy.

This Privacy Policy explains how information is collected, used, stored and protected when you use:

• The EQHO Player website
• The EQHO Player web app
• The EQHO Player applications for iPhone and iPad
• EQHO Cloud services

By using EQHO Player you agree to the practices described in this policy.

1. Account information

We may collect and store:

• Name
• Email address
• Supabase user ID
• Authentication and account-recovery information
• Login and security records

2. Payment and subscription information

Stripe processes all payments and card details on our behalf. From Stripe, EQHO Player may receive and store:

• Stripe customer ID
• Stripe subscription ID
• Subscription status
• Trial start and end dates
• Billing-period dates
• Payment status
• Cancellation status

EQHO Player does not directly collect or store complete card numbers, card security codes or bank credentials. Those details are handled solely by Stripe.

3. User content

When you choose to push content to EQHO Cloud, EQHO Player may process or store:

• Playlist names
• Uploaded audio files
• Track names and durations
• Playlist running orders
• Gaps between tracks
• Repeat settings
• Session and playback preferences
• Cloud backup and download status

Music and playlists are uploaded to EQHO Cloud only when you choose to push them. Content is not uploaded or synchronised automatically.

4. Technical information

Where it is actually collected or transmitted, we may process:

• Device type
• Browser
• Operating system
• App version
• IP address
• Authentication records
• Error and diagnostic information
• Security and performance information

We use aggregate, privacy-friendly usage analytics on our website only. These analytics do not use advertising cookies and do not track you across other companies' apps or websites. The EQHO Player mobile apps do not load this analytics.

Information is used to:

• Create and manage accounts
• Authenticate users
• Recover accounts
• Provide player and playlist functionality
• Store content you push to EQHO Cloud
• Make pushed content available on your supported devices
• Manage trials and subscriptions
• Confirm access rights
• Send necessary account, billing and security messages
• Respond to support requests
• Prevent misuse
• Diagnose faults
• Improve service reliability
• Meet legal, accounting and regulatory obligations

EQHO Player does not sell personal information.

Under UK data-protection law, we rely on the following legal bases:

• Contract: providing accounts, player services, cloud storage and subscriptions.
• Legitimate interests: security, fraud prevention, support and service reliability.
• Legal obligation: accounting, taxation and legally required records.
• Consent: only where consent is specifically required.

We use the following service providers to operate EQHO Player. They are required to protect your information and use it only for service-related purposes.

• Supabase — authentication and database services
• Cloudflare R2 — cloud storage for uploaded audio
• Stripe — trial, subscription and payment processing
• Resend — transactional and service email
• Vercel — website and application hosting, and privacy-friendly website analytics

Stripe Privacy Policy: https://stripe.com/privacy

Some of our service providers may process or store information outside the United Kingdom or European Economic Area.

Where information is transferred internationally, appropriate contractual or recognised transfer safeguards (such as standard contractual clauses and equivalent protections) are used where required, so your information remains protected.

• Account information is normally retained while your account remains active.
• Cloud playlists and uploaded audio are retained until you delete them or delete your account, subject to any legitimate backup-deletion period.
• Subscription and transaction records may be retained for accounting, fraud prevention, disputes and legal compliance.

We do not retain records indefinitely without a defined reason.

You can delete your account at any time from your account settings in the app. When you delete your account, EQHO Player will:

• Cancel any active Stripe subscription
• Remove your EQHO database records
• Remove your playlists and session information
• Delete your uploaded audio from Cloudflare R2
• Delete or disable your Supabase authentication account
• Revoke access

We preserve only those records we are legally required to retain (for example, records needed for accounting or tax). You can also request deletion by contacting us at the email address below.

Subject to UK data-protection law, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to applicable processing
• Request portable, eligible information
• Withdraw consent where consent is the legal basis

You can exercise these rights using the contact details below. If you are in the UK and believe we have not handled your personal information properly, you also have the right to complain to the Information Commissioner's Office (ICO) at https://ico.org.uk.

EQHO Player is intended for coaches, clubs, organisations and other authorised adult users.

Children should not create or manage their own accounts. Coaches and clubs should avoid placing unnecessary personal information about children in track names, playlist names or other uploaded content.

EQHO Player uses cookies, IndexedDB and equivalent local storage only where necessary for:

• Secure sign-in sessions
• Essential preferences
• Player operation
• Downloaded playlists
• Offline playback
• Security

We do not use advertising or marketing tracking technologies. Our website analytics are privacy-friendly and do not use advertising cookies, so no cookie-consent banner is required. If we ever introduce non-essential analytics, advertising or marketing technologies, we will block them until valid consent is obtained.

We use reasonable technical and organisational safeguards to protect your information, including:

• HTTPS for data in transit
• Secure authentication
• Account-based access controls
• Restricted database and storage access
• Server-side handling of secrets
• Stripe-hosted payment processing

No system can guarantee absolute security, but we take reasonable measures to protect your information.

This Privacy Policy may be updated periodically.

Any updates will be published on this page together with a revised "last updated" date.

For data-protection purposes, the data controller is Christopher Rogers trading as EQHO Player.