Privacy policy

The controller is [operator name], Switzerland. Write to hello@kantamigo.com about anything in this policy. Our postal address is on the about page.

Before launch you can ask to be told when Kantamigo launches. Your address counts only after you confirm it through the link in our confirmation email (double opt-in).

• What we store: your email address, the language of the page, the page you signed up on, the campaign tags of the link if it had any, the version of the consent text you agreed to, when you gave consent and when you confirmed. We do not store your IP address.
• Purpose: one confirmation email and one email on launch day, nothing else. We never share the list.
• Legal basis: your consent, which you can withdraw at any time.
• Unsubscribe: every email has a one-click unsubscribe link. After you unsubscribe we send you nothing more; we keep the entry marked as unsubscribed, so the address is not used again without a new confirmation, until the list is deleted.
• Retention: unconfirmed signups are deleted after 30 days. The whole list is deleted 6 months after the launch email, or at once if Kantamigo does not launch.
• The emails are sent through Resend. We count confirmations per language and per signup page, without the address.

When you visit Kantamigo, our servers and our hosting and network providers process technical data such as your IP address, your browser and the pages you request. We need it to deliver the site, keep it secure and limit abuse, which is our legitimate interest. IP addresses in our logs are deleted after 30 days.

The tuner on our website asks for your microphone only after you tap Start tuning. The sound is analysed in your browser while you tune: nothing is recorded, saved or sent to us or anyone else, and nothing about it goes into analytics. The microphone turns off when you tap Stop, leave the page or switch to another tab.

We use PostHog, hosted in the European Union, to understand in aggregate how Kantamigo is used.

• In your browser it runs without cookies and stores nothing on your device. Daily visitors are counted with a hash that changes every day, so you are not recognised from one day to the next.
• Your IP address is used only to look up your country and region and is then discarded. City and postcode are removed.
• When you are signed in, events are sent from our server and linked to your account ID, with the country taken from our network provider.
• We never record sessions or use heatmaps, ad pixels or fingerprinting. Song titles, lyrics, chords, search terms, nicknames and email addresses never go into analytics.
• Legal basis: our legitimate interest in improving Kantamigo, together with the exemption for first-party audience measurement: aggregate, not used across sites, not shared. The data is kept for 25 months.
• Opting out: you can turn analytics off in your account settings. If your browser sends the Global Privacy Control signal, we respect it and send nothing.

Your email address, a hash of your password or your Google account ID, your display name and profile picture, your language and settings, your plan, and where you came from when you signed up (campaign tags, referring site, first page). We use this data to provide the service you signed up for. Account emails such as sign-in codes, receipts, renewal reminders and session recaps are sent through Resend.

The songs, notes and settings you add. They are private: only you see them and, while you play a song in a live session, the participants of that session. We never share them, copy them to another user or use them to train AI models.

For each session we keep the participants’ nicknames, the songs played, votes, suggestions and reactions, to run the session and show its recap. This is our legitimate interest and the host’s. Guests need no account; a cookie recognises their device during the session (see the cookie policy).

Recaps contain titles, artists and nicknames, never lyrics or chords. Nicknames in session history are replaced with “Guest” after 90 days. Guests are never linked from one session to another.

Polar processes payments as merchant of record and is responsible for payment data such as card details and the billing address. We receive the order or subscription, the plan and its status. When a guest buys a Party Pass, we store the buyer’s email address with the purchase to handle receipts and refunds. We need this data to perform the contract and to meet our legal obligations.

When you import from a link or clean up pasted text, we send that page’s text or your pasted text to Anthropic’s API to convert it into a song. Anthropic processes it under zero-retention terms: it keeps nothing and trains nothing on it. We discard the page and the text right after the request and keep only a log entry with the domain, the status and the cost.

These providers process personal data on our behalf, under data processing agreements:

• Vercel: hosting of the website;
• DigitalOcean: servers and database;
• Cloudflare: domain names, network security and delivery;
• Resend: sending emails;
• PostHog (European Union): analytics;
• Polar: payments, as merchant of record;
• Anthropic: AI import, under zero-retention API terms;
• Google: sign-in with Google, only if you choose it.

Some of these providers are based in the United States or process data there. Transfers rely on the Swiss-US and EU-US Data Privacy Frameworks where the provider is certified, and on standard contractual clauses otherwise.

• Account and songbook: until you delete them or your account.
• Guest nicknames in session history: replaced with “Guest” after 90 days.
• IP addresses in server logs: 30 days.
• Analytics: 25 months.
• Launch notify list: as described above.
• Purchases: as long as refunds and our legal obligations require.
• Backups: data you delete is gone from our backups within three weeks.

You have the right to information about and access to your data, to have it corrected or erased, to receive it in a portable format, to object to processing based on our legitimate interest, and to withdraw consent at any time.

In the app you can export your songbook and delete your account yourself, in settings. For anything else, write to hello@kantamigo.com. We answer within 30 days.

You can complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, to the data protection authority of your country. We would be glad to hear from you first.

Accounts are for people aged 16 and over. Guests from the age of 13 can join a session with a nickname only.

We update this page when our processing changes and change the date at the top. We tell account holders about material changes by email.