Privacy Policy

This policy is a launch-ready draft for product planning and must be reviewed by a qualified attorney before public launch.

CypherClub helps rappers practice, record, join rooms, use beats, complete challenges, and share creative work. This Privacy Policy explains what information we collect, how we use it, and what choices users have.

We may collect account information such as email address, username, display name, avatar, membership tier, referral codes, onboarding answers, settings, and authentication metadata.

We may collect content and activity such as recordings, lyrics, transcripts, room activity, chat messages, beat usage, challenge history, saved sessions, published content, shared links, reports, support tickets, feedback, and moderation records.

We may collect technical data such as device type, browser, IP address, logs, crash data, route activity, approximate location from IP, cookie data, local storage data, and analytics events.

We may collect billing metadata through Stripe, such as customer ID, subscription ID, plan, billing interval, subscription status, current period end, and payment status. We do not store full card numbers.

We may collect Cypher Credits and rewards data such as wallet balance, credit grants, credit transactions, daily rewards, streak rewards, rewarded ad events, referral reward status, storage usage, AI usage metadata, soft-cap status, and admin corrections.

Audio recordings, transcripts, and lyrics can be personal creative work. We use them only to provide features such as playback, storage, sharing, analysis, moderation, support, safety review, and user-requested AI feedback.

Do not upload private third-party information, secrets, payment information, passwords, or content you do not have rights to use.

We use information to operate CypherClub, provide accounts, save recordings, play beats, run rooms, process memberships, provide support, investigate reports, prevent abuse, enforce rules, improve product quality, analyze usage, personalize experiences, send permitted emails, and comply with law.

CypherClub may use PostHog or similar analytics tools to understand product usage, funnels, retention, feature performance, and crashes. We do not intentionally send raw audio, full transcripts, passwords, payment card details, API keys, or private message content to analytics tools.

Session replay, if enabled, should be configured to mask sensitive inputs and avoid private recording details. Legal and privacy review is required before broad replay use.

Analytics events may include credit earning, credit spending, reward claims, ad reward outcomes, upgrade prompts, AI feature usage, storage limit events, and subscription state changes.

CypherClub may use Resend or similar email providers for transactional emails, account notices, billing updates, support replies, safety notices, recording reminders, product updates, and marketing emails where permitted.

Security, billing, account deletion, and legal service emails may be sent even if marketing is disabled. Marketing emails require consent where required and should include unsubscribe or preference options.

CypherClub may use service providers such as Supabase for authentication, database, and storage; Stripe for payments; Vercel for hosting and infrastructure; PostHog for analytics; Resend for email; LiveKit for real-time rooms; and OpenAI or other AI providers if AI features are enabled.

These providers process information to help us operate CypherClub.

If rewarded ads are enabled, CypherClub may use Google AdMob or similar advertising providers to serve ads, verify completion events, prevent fraud, and grant eligible in-app rewards.

Some information becomes visible when you choose to publish, join rooms, chat, share links, appear on leaderboards, create creator profiles, or participate in public features.

Private recordings and shared links should follow the visibility settings and permissions available in the product. Do not share links with people who should not access the content.

We may disclose information if needed to comply with law, respond to legal process, protect users, investigate safety issues, enforce policies, prevent fraud, address security incidents, or protect the rights and property of CypherClub and others.

We retain information for as long as needed to provide the service, comply with law, resolve disputes, enforce agreements, prevent abuse, process billing, provide support, and maintain records. Recording retention may depend on membership tier, user settings, storage limits, and legal holds.

When you use Cypher Club Records, we may process record titles, descriptions, tags, visibility settings, audio metadata, duration, file size, playback activity, props, love, favorites, shares, reports, downloads, and estimated bandwidth usage. We use this information to provide playback, profiles, discovery, moderation, analytics, storage management, abuse prevention, and membership features.

Public records are visible to other users. Unlisted records are visible to people with the link. Private records are intended for owner access and administrative/legal review where required.

Users may request account deletion through the app where available. Some information may be deleted, anonymized, retained for legal or safety reasons, or retained in backup systems for a limited period.

CypherClub accounts are not available to users under 13. We do not knowingly create accounts for users under 13. COPPA, teen privacy, and state privacy obligations require final legal review before public launch.

We use reasonable technical and organizational measures to protect information. No system is perfectly secure. Users should use strong passwords and protect their accounts.

CypherClub may process and store information in the United States and other locations where service providers operate. By using CypherClub, you understand that information may be transferred and processed outside your location.

You may be able to update profile settings, notification settings, privacy settings, email preferences, membership settings, saved content, and account deletion requests in the app.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing. Contact support to make a privacy request.

We may update this Privacy Policy as CypherClub changes. The current version and last updated date will be shown on this page.

For privacy questions, contact support through the Support page or the support email shown in the app.