Privacy Policy
What Rime knows about you, why, who else sees it, how long it stays, and what you can do about it. Rime collects only what it needs to run, never sells data, uses no advertising, and counts visits without cookies or following anyone.
Last updated
Who is responsible
Rime’s operator is responsible for your data
Rime is run by Ozan Özgöçer, an individual based in Türkiye, reachable at [email protected]. They are the controller of your personal data under Türkiye’s Personal Data Protection Law (KVKK, No. 6698) and, for people in the EU and the UK, the GDPR. Write to [email protected] about anything on this page.
The Turkish information notice (Aydınlatma Metni, at the top of this page) says the same under KVKK’s own headings.
What Rime collects
What Rime knows about you, and where it comes from
Most of it you give Rime yourself; the rest comes from using Rime.
Account
Your email, your name, your date of birth, your country (read from your connection at sign-up), and when you agreed to these policies. Your password is kept by the sign-in service, encrypted; Rime never sees it. With Google, Rime gets your name, email and picture from Google.
Profile
What you choose to show: a picture, a bio, links, a stage name.
Music
Your uploads, artwork, titles, credits, the Explicit label, versions, and the files’ technical details.
Listening
Your signals, words, marks, ballots and Hidden Gems; which tracks you were offered and how long you heard each (to check thirty seconds); plays of released tracks; your playlists, follows and Library.
Studio and the Release Room
Drafts, plans, notes, and Rime Review exchanges.
Talking
Comments, contact requests, reports, blocks, appeals, and your emails to Rime.
Safety
Identifiers of your device and network, kept as one-way hashes, to stop fake accounts and manipulation; moderation and trust records.
Technical
The address a request came from and when, your device and browser, error reports, push tokens for the app, and what your browser keeps for your settings and what’s playing.
How you found Rime
The link that brought you, if it said where it came from and you made your account in that visit, and your answer if you tell Rime how you found it. If an artist’s link brought you, Rime keeps which artist.
Payments, once they open
Paddle handles payment details. Rime gets only what you bought and its status.
Why, and on what legal basis
Each use of your data, and the legal basis for it
- To run your account and Rime for you: sign-in, listening, signals, uploads, the Weekly and the Final, Studio, the Release Room, your public pages, and the emails and notifications your activity needs. Basis: the agreement with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
- To check your age, and to keep the records the law asks for: a hosting provider’s connection records, tax records once payments open, answers to authorities. Basis: legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
- To keep Rime safe and fair: stopping fake accounts, manipulation, spam and leaks, reviewing uploads, reports and appeals, and establishing or defending legal claims. Basis: Rime’s legitimate interest in a safe and fair service (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f), and Art. 5(2)(e) for claims).
- To know whether Rime works: counts by week (how many signals, how many tracks were heard in time, who came back), never who; and how often each page is opened and from which site, counted without cookies by the hosting service (section 9). Basis: legitimate interest.
- To repeat public results on Rime’s channels, and to send the nightly invitation and other notices you can switch off. Basis: legitimate interest; you can object at any time with the switches in Studio settings and Settings.
- To draft release words with Claude, when you turn it on. Basis: the agreement with you, at your request.
- Rime asks for your consent only where nothing else applies, and you can withdraw it at any time. Rime sends no marketing.
- Rime makes no decision about you that is fully automated and has legal or similarly significant effects. Automated checks only help Rime’s team find what to look at; a person decides. Which tracks you hear each night is chosen automatically, mostly by which tracks need listeners and partly by the genres you’ve liked, never your own.
Who sees it
What is public, what stays private, and who else can see it
- Artists see what listeners said about their tracks, never who said it. The one exception is Found early: when a track places, the listeners who called it early are named with it, if their profiles are public.
- When you write to someone with a contact request and they say yes, they see your account’s email address, so they can write to you. Nobody else sees it. You are told this before you send.
- Rime’s team sees what it needs to review uploads, reports and appeals, and nothing else.
- Rime never sells personal data and shares none of it for advertising.
- Authorities get data only when the law requires it, and Rime checks each request.
Public
What your profile shows, your public playlists, public track and release pages, decided results, Found early names (public profiles only), and comments.
Private
Everything else: drafts, tracks in testing, who signaled what, contact requests, reports, appeals, settings and your account details.
The services that run Rime
The services Rime uses, what each handles, and where
Each works on Rime’s instructions under a data processing agreement and sees only what its job needs.
Sign-in, database and files
Google Firebase: sign-in in the US; the database and files in the EU.
The website
Hosting and delivery services that serve the site, protect it from attacks, and count page visits without cookies.
A service that sends Rime’s emails, in the EU.
Bots and errors
Google reCAPTCHA, against bots; and error reports, without your messages or music.
The app
Expo and Apple, for push notifications.
Release Room drafts
Anthropic’s Claude, text only, only when you turn it on.
Payments, once they open
Paddle, as merchant of record. Paddle decides on payment data as its own controller.
Data abroad
Your data outside Türkiye and the EU
Rime is run from Türkiye, and its providers handle data in the EU, the US and elsewhere (section 5).
For people in the EU and the UK, transfers to countries without an adequacy decision rely on the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework the provider takes part in. Transfers from Türkiye follow KVKK Article 9.
How long
How long Rime keeps each kind of data
- Your account and profile: while your account exists. When you delete it, 30 days to change your mind, then deleted.
- Your uploads: until you delete them or your account.
- Your signals and ballots: with your account. Then your name is removed and the count stays, so other people’s results hold.
- Connection records (the address a request came from, and when): one year, as Türkiye’s Law 5651 asks of a hosting provider.
- Safety, moderation and appeal records: two years after the case closes, longer only if a legal claim needs them.
- Your emails to Rime: two years.
- Error reports: up to 90 days. Email delivery records: up to 30 days.
- Backups: one a day, each kept 14 days.
- Payment and tax records, once payments open: as long as tax law requires (in Türkiye, five years).
Your rights
What you can ask, and how
Ask in Settings, or write to [email protected] from the address on your account. Rime answers within 30 days, free of charge, and may ask you to confirm it’s you.
You can complain to a data protection authority: in Türkiye, the Personal Data Protection Board (after writing to Rime first); in the EU, the authority where you live or work; in the UK, the ICO.
- See what Rime keeps about you, and get a copy (Settings, Data, exports it).
- Correct it, delete it, or have its use limited.
- Object to uses based on legitimate interest: the switches in Settings and Studio settings do most of it.
- Take your data to another service, in a common format.
- Withdraw a consent you gave, without affecting what was done before.
- Not be subject to a fully automated decision with significant effects.
- Under KVKK Article 11 also: learn whether and why your data is processed, who in Türkiye or abroad it was sent to, ask that those recipients be told of a correction or deletion, object to a result reached solely by automated analysis, and claim compensation for unlawful processing.
Age
Rime is for people 18 and over
Rime asks your date of birth once, never shows it, and uses it only to check your age. An account found to belong to someone under 18 is closed and its data deleted.
Security
How Rime protects your data, and what happens if something goes wrong
Your data is encrypted in transit and where it is stored, and only the people on Rime’s team who need it can see it.
No system is perfectly safe. If a breach puts your rights at risk, Rime tells you and the authorities as the law requires (in Türkiye and the EU, within 72 hours of learning of it).
Changes
When this policy changes
When this policy changes in a way that matters, Rime tells you by email and in Rime before it applies. The date at the top says when it last changed.