Privacy Policy · Uncut Gemz

Uncut Gemz ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what choices you have when you use the Uncut Gemz mobile app and websites (together, the "Platform"). By using the Platform, you agree to the practices described here.

1. Information We Collect

1.1 Account Information
When you create an account, we collect:
• Full name
• Date of birth (required at signup to confirm you are 18 or older; not shown publicly to other users)
• Email address
• Password (stored only as a one-way hash when you set email sign-in; we never store your password in plain text)
• Phone number (used for account verification and, when verified, optional SMS for purchase delivery)
• Public username / handle (shown on your writer profile as @username; this may be chosen by you or initially filled from a connected account such as Instagram or Telegram)
• City, state/region, country, and language preferences (optional to type — you can fill these via one-time location permission instead)
• Approximate location inferred from your IP address (city/region/country when available) for analytics and Trending Near You until you opt in or edit Profile
• If you opt in to location while using the app: a one-time device location reading used to set city/region/country and a coarse approximate position (rounded coordinates) for Trending Near You — not continuous GPS tracking; you can correct or clear this in Profile
• Bio (optional)
• Profile avatar (optional)
• Instagram and other connected-account handles (only when you sign in with or link those services — used to help establish identity on your writer profile)

1.2 Device, Browser, and Usage Analytics
To operate and improve the Platform, we collect:
• A stable install identifier stored on your device (mobile app)
• Device type, operating system name and version, and app version
• Browser and device type when you use our websites (for example the listing upload flow at www.uncutgemz.io)
• A hashed form of your IP address (we do not display raw IP addresses in product UI)
• App open / session heartbeats and product events (for example plays, saves, offers, signups, listing creation, and purchases)
• Push-notification token status used as a limited signal of device activity (including when a token is no longer valid)

This analytics data is used for private platform operations and owner reporting. It is not shown to other users on Discover, listings, or public profiles.

1.3 Listing and Transaction Information
When you list or purchase a song — whether from the mobile app or from our websites — we collect:
• Uploaded audio files and their metadata (BPM, key, genre, mood, vocal tags, duration, lyrics, stem files and stem labels)
• Vocal tags you select for a listing (Male, Female, Duet, and/or Group — public listing metadata so buyers can filter)
• Asking price, ownership splits, and co-writer details (names and invite emails for confirmation)
• Offer amounts and status history (pending, accepted, declined, countered) — offers do not include free-text notes or messages between buyers and writers
• Purchase history, download records, and per-writer payout transfer records
• Stripe Connect account identifiers and payout readiness status for writers who set up payouts (bank and card details are collected and stored by Stripe, not by Uncut Gemz)

Because a full rights buyout is a real-world ownership transfer rather than in-app digital content, buyer payment is completed on Uncut Gemz’s secure checkout website, outside the mobile app. The app itself does not collect, transmit, or store your payment card details — those are entered directly with our payment processor on that external checkout page.

1.4 Verification and Security Data
To protect the Platform and its users, we collect:
• Email and phone verification status
• Connected third-party accounts (Instagram, Telegram, Genius, Muso.ai) — only when you explicitly sign in with or connect them
• Device push-notification tokens (when you allow notifications)
• Device and browser type (for security and fraud prevention)
• Buyer session identifiers used to watermark preview audio

1.5 Activity Data
• Songs you’ve saved to your Vault
• Offers you’ve made or received
• Listings you’ve reported
• Support messages you’ve sent
• Notification preferences

2. How We Use Your Information

We use the information we collect to:
• Verify your identity and account eligibility (including age)
• Authenticate you (including email/password sign-in) and send account security messages such as password reset and password-changed notices
• Soft-fill or suggest location from IP until you opt in to device location or correct it in Profile
• With your permission, read device location once to set your place and power Trending Near You
• Power discovery filters (including public vocal tags on listings)
• Measure installs, usage, inactivity, disputes, listing reports, and related platform health for private owner analytics
• Accept listing uploads from the mobile app and from our websites, and publish your listings (live on Discover when submitted, or after co-writers confirm their splits — asking price does not delay go-live)
• Process purchases, calculate the platform commission and writer pool, and pay each credited writer their ownership share via Stripe Connect
• Deliver purchase download links via email (and SMS and/or push notification when available)
• Remind co-writers to confirm their ownership splits via email and push notification
• Protect previews through screen-capture detection and buyer watermarking
• Detect AI-generated content in uploaded audio
• Investigate reports, split disputes, and potential violations of our Terms
• Detect repeat abusive patterns (for example disputed ownership claims or reported listings) for enforcement
• Respond to support requests
• Communicate platform updates and policy changes

Trending Near You uses approximate geography (city/region and/or coarse coordinates), not continuous GPS tracking.

3. What We Don’t Do

• We do not sell your personal data to third parties
• We do not show your email address, phone number, or date of birth publicly to other users or buyers
• We do not show other users your device identifiers, install IDs, hashed IP addresses, or private usage analytics
• We do not provide a free-text messaging channel on offers (offer submissions are amount-only)
• We do not use continuous GPS tracking
• We do not link your social accounts (Instagram, Telegram, Genius, Muso.ai) without your explicit action
• We do not use your audio content for training AI models
• We do not show advertising from third parties

4. Who We Share Information With

4.1 Payment Processors
Buyer payments are completed on Uncut Gemz’s secure checkout website via our payment processing partner (Stripe), outside the mobile app itself. Writer payouts are handled through Stripe Connect: after a sale, Uncut Gemz retains its commission and transfers each credited writer’s share of the remaining pool to that writer’s connected Stripe account. We share only the information necessary to create Connect accounts, verify payout readiness, complete checkout, and send those transfers. We never receive or store your full card or bank account numbers. Stripe has its own privacy policy and security standards.

4.2 Messaging and Delivery Processors
We use service providers to send transactional email (currently Resend) — including purchase download links, co-writer invites and reminders, verification codes, password reset links, and password-changed notices — optional SMS (currently Twilio, when configured), and push notifications (via Expo’s push service and Apple/Google notification networks). We share only the contact or device information needed to deliver those messages.

4.3 Hosting and Infrastructure
We host application data, APIs, and websites with infrastructure providers (including Cloudflare and Expo/EAS Hosting). Request metadata such as IP-derived location may be processed as part of normal network delivery.

4.4 Third-Party Services You Connect
If you choose to sign in with or connect Instagram, Telegram, Genius, or Muso.ai, limited information is exchanged with those platforms per your authorization. You can disconnect any linked account at any time in Profile > Settings > Connected Accounts.

4.5 Legal and Safety Disclosures
We may disclose your information if required by law, court order, or regulatory authority, or if we believe in good faith that disclosure is necessary to investigate fraud, enforce our Terms, or protect the rights and safety of our users or the public.

4.6 Business Transfers
If Uncut Gemz is acquired, merges with another company, or transfers substantially all of its assets, user information may be transferred as part of that transaction. We will notify users of any such change via email or in-app notification.

5. Data Retention

• Account data is retained while your account is active
• Purchase and sale records are retained as long as required for tax, legal, audit, and dispute purposes, even after account closure
• Device and usage analytics records may be retained to measure installs, usage, and security signals; when you delete your account we mark associated devices as deleted and stop linking them to your account
• Audio files for sold listings may be retained for a limited period for dispute resolution purposes, then deleted
• Support communications are retained for a reasonable period consistent with legal requirements

6. Your Controls and Rights

6.1 Access and Edit
You can view and update most of your account information directly in Profile > Settings at any time, including city, state/region, country, and date of birth.

6.2 Connected Accounts and Payouts
You can disconnect any linked third-party account (Instagram, Telegram, Genius, Muso.ai) at any time in Profile > Settings > Connected Accounts. Stripe Connect payout setup is managed in the Uncut Gemz app under Profile > Payouts; identity and banking details for payouts are collected by Stripe during Connect onboarding.

6.3 Notification Preferences
You can manage optional notification categories in Profile > Settings > Notifications, and you can revoke system push permission in your device settings. Certain transactional communications (purchase download links, verification codes, password reset and password-changed notices, co-writer confirmations, payout notices) are sent regardless of optional marketing preferences.

6.4 Data Requests
You may request a copy of the personal data we hold about you, or request deletion of your account and associated data, by contacting us through Support or using in-app account deletion. We will respond within 30 days. Deletion requests may be subject to retention obligations described in Section 5.

7. Security

We use industry-standard security measures to protect your information, including encrypted transmission (HTTPS), access controls, and hashed password storage for email sign-in. No system is completely secure, and we cannot guarantee the absolute security of your data. Please use a strong, unique password and report any suspected unauthorized access immediately.

8. Children

The Platform is not directed at children under 18. We require a date of birth at signup and do not knowingly collect information from anyone under 18. If we become aware that we have inadvertently collected information from a minor, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy or your data? Contact us through Support in the Uncut Gemz app (Profile → Support) or via www.uncutgemz.io/contact.