Privacy Policy
Effective: [launch date] · Last updated: March 2026
Who We Are
Diaspora Flows, Inc. is a music streaming platform. We operate diasporaflows.ai and the Diaspora Flows mobile application. For GDPR purposes, we are the Data Controller. Contact us at privacy@diasporaflows.ai.
What We Collect and Why
We collect only what we need to run the platform, pay artists, and — for free tier users — serve relevant ads. We do not collect data speculatively. Every data point we hold has a specific purpose: account authentication, payment processing, royalty calculation, music recommendation, or contextual ad serving. We do not collect browsing history, cross-site tracking data, or third-party behavioral profiles.
Paid Subscribers — The Zero-Sharing Commitment
If you are a paid subscriber, we will never share your personal data with any third party for any commercial purpose. The only exceptions are: (1) Stripe, who processes your payment under their own privacy policy; (2) our infrastructure providers, who process data solely on our behalf under strict data processing agreements and cannot use your data for any other purpose; and (3) valid legal orders under applicable law, where we share only the minimum required and notify you whenever legally permitted.
Free Tier — Contextual Advertising Only
If you use the free tier, we fund the service through contextual advertising. We use five signals to serve relevant ads: the genre currently playing, your country from your billing address, your device type, the time of day, and your free tier status. None of these signals are shared with advertisers in a way that identifies you as an individual. Advertisers buy context — they do not receive access to you as a person.
Cultural Identity Data
If you choose to provide cultural background information through the Cultural Roots feature, that data is used solely to personalise music recommendations. It is never used for advertising of any kind. It is always optional. You can delete it at any time from Settings.
How Long We Keep Your Data
Account data is retained while your account is active and deleted within 30 days of account deletion. Listening history is retained for royalty calculation accuracy (minimum 3 years for audit purposes, then deleted). Tax documents are retained for 7 years per IRS requirements. All other data is deleted within 30 days of account deletion.
International Data Transfers
We operate from the United States. If you are in the EU or UK, your data may be transferred to and processed in the US. We ensure this is done under Standard Contractual Clauses or equivalent mechanisms as required by applicable law.
Children
Diaspora Flows is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you are a parent and believe your child has provided data, contact privacy@diasporaflows.ai and we will delete it promptly.
Changes to This Policy
We will notify you of any material changes to this policy by email and through a prominent notice on the platform. We will not retroactively change how we use data you have already provided without your consent.
Contact and Complaints
For any privacy question or to exercise your rights: privacy@diasporaflows.ai. EU and UK users have the right to lodge a complaint with their local data protection authority — in the EU, your national DPA; in the UK, the ICO.