Privacy Policy

ViO TORUS · Effective: 20 May 2026 · Operator: ViO TORUS

This Privacy Policy explains how ViO TORUS (“we”, “us”) collects, uses, and protects information when you use the ViO TORUS mobile application and related services (the “Service”). By using the Service, you agree to this Policy.

1. Who we are

Data controller: ViO TORUS
Contact: viotorus.team@gmail.com

2. Information we collect

2.1 Account information (when you sign in)

If you sign in with Google or Sign in with Apple, we receive:

• Email address (or Apple private relay email)
• Display name and profile photo URL, if provided by the provider
• A unique user identifier from our authentication provider (Supabase Auth)

We do not receive your Google or Apple password.

2.2 App activity & library data (signed-in users)

• Favorite playlists and favorite tracks
• Recently played tracks and listening session data (e.g. duration, timestamps)
• Profile statistics such as listening streaks and total listening time

This data is stored in our database (Supabase) and linked to your account.

2.3 Guest mode (without sign-in)

If you use the app as a guest, favorites and recent listening may be stored locally on your device only. This data is not synced to our servers until you create an account.

2.4 Technical data

• Device type, operating system, and app version (for support and stability)
• IP address and request logs may be processed by our hosting and CDN providers when you stream audio or load images

We do not sell your personal information.

3. How we use information

• Provide and operate the Service (playback, catalog, favorites, profile)
• Authenticate you and keep your session secure
• Sync your library across devices when you are signed in
• Improve reliability, fix bugs, and respond to support requests
• Comply with legal obligations

4. Legal bases (EEA/UK users)

Where applicable, we rely on: performance of a contract, legitimate interests (security, improvement), and consent where required (e.g. optional marketing in the future).

5. Service providers

We use trusted processors, including:

• Supabase — authentication, database, and backend
• Cloudflare R2 / CDN — delivery of audio and images
• Google / Apple — sign-in only, under their respective policies

They process data only on our instructions and for providing the Service.

6. Retention

• Account and library data: kept while your account is active
• After account deletion: deleted or anonymized within a reasonable period, except where law requires retention
• Server logs: typically retained for a limited period for security

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your data, and to object or restrict certain processing.

To request account deletion or data access, email viotorus.team@gmail.com from the address linked to your account, or follow the steps on our account deletion page. We may ask you to verify your identity.

8. Children

The Service is not directed to children under 13 (or 16 where local law requires). We do not knowingly collect data from children. Contact us if you believe a child has provided personal data.

9. Security

We use industry-standard measures (HTTPS, access controls, authenticated APIs). No method of transmission or storage is 100% secure.

10. International transfers

Your data may be processed in countries where our providers operate. We take steps to ensure appropriate safeguards where required by law.

11. Changes

We may update this Policy. We will post the new version on this page and update the effective date. Continued use after changes means you accept the updated Policy.

12. Contact

ViO TORUS
Email: viotorus.team@gmail.com
Terms of Use: Terms of Use