Your name, username, email address, date of birth, and gender selection. The date of birth is used to check the minimum age and for nothing else. The gender field offers male and female, and answering it is required to register.

We also record the moment you accepted these policies and which version you were shown, together with the IP address and browser that accepted them. That record exists so we can show what was agreed and when.

Purchases, wallet transactions and invoices. Listening progress and position, so you can resume on another device. Library actions you take — favourites, wishlist, playlists. Sign-in events, the devices and sessions on your account, and administrative actions, which are kept as an audit trail.

Used for the verification code, password resets, email-change confirmations, and invoices. It is not used for marketing without a separate opt-in. Transactional mail is sent through Amazon SES; addresses that hard bounce or complain are suppressed so we stop mailing them.

Stored only as an Argon2 hash. We cannot read your password, which is also why a reset issues a new one rather than telling you the old one.

Our infrastructure providers, to the extent required to run the service: Amazon Web Services (hosting, storage, email delivery) and the payment gateways you choose to pay through. We do not sell personal data and we do not share it for advertising.

If you sign in with Google or Facebook, we receive the profile fields you approve at that moment. You choose which of those we keep in sync.

Account and purchase records last as long as the account, plus any period we are required to retain financial records. Read-only administrative access logs are kept 14 days; records of changes are kept longer.

You can see what we hold about you from your account pages, change your email address with confirmation from both addresses, sign other sessions out, and ask us to close the account. Ask at [email protected] and we will tell you what closing it removes and what we are obliged to keep.

Srutolipi is not for under-13s and registration refuses a date of birth below that age. If you believe a child has an account, tell us and we will remove it.

A changed policy gets a new version date, shown at the top of this page and recorded against new acceptances. The Terms of Service describe when we will ask you to accept a change explicitly.