Privacy Policy

Last updated: June 6, 2026

This Privacy Policy explains how we collect, use, share, and protect personal data when you use Soniq8 - our website at soniq8.com and the Soniq8 Live mobile app (together, the "Service"). It also describes your rights and how to exercise them.

1. Who we are (Data Controller)

The Service is operated by Qazana Systems Ltd ("Soniq8", "we", "us"), registered in Kenya. We are the data controller responsible for your personal data.

For any privacy question or to exercise your rights, contact our privacy team at privacy@soniq8.com.

2. What Soniq8 does

Soniq8 identifies songs in DJ mixes, live sets, and compilations. On the web you paste a YouTube URL and we return a tracklist with timestamps. In the Soniq8 Live app, we identify music playing around you in real time through your device's microphone and build a setlist as you listen.

3. Personal data we collect

3.1 Account data

You can create an account with Google or with an email address and password. If you use Google, we receive your name, email address, and profile picture from Google; we never receive your Google password. If you register with email and password, we store your email and a securely hashed password - we never store your password in readable form.

3.2 Microphone and live audio (Soniq8 Live app)

When you start a session in the Soniq8 Live app, the app records short audio clips through your device's microphone so we can identify the music playing around you. These clips are transmitted to our recognition engine, used solely to identify songs, and discarded after processing. We do not retain the raw audio recordings, and we do not record, store, or transcribe speech or conversations. The app listens only while a session is active and only after you grant microphone permission, which you can revoke at any time in your device settings.

3.3 Analysis and setlist data

We store the YouTube URLs you submit, the resulting tracklists and live setlists, and related metadata (timestamps, confidence scores, song details). This is tied to your account so you can access your history.

3.4 Spotify data

If you connect Spotify, we request permission to create playlists on your behalf and store an access token and refresh token to maintain that connection. We do not access your listening history, saved library, or any other Spotify data beyond what is needed to create playlists. You can disconnect at any time from your Profile (web) or Settings (app), which immediately deletes your tokens and ends our access.

How we use Spotify, specifically: we use Spotify only to save a tracklist you have already identified as a playlist in your own Spotify account, and only when you ask us to. Song identification is performed entirely by independent, third-party music-recognition services - we do not use Spotify's audio, catalog, or any Spotify data to identify music or to train any models. We request the minimum permissions needed to create playlists (plus your email to identify your account); we do not read, modify, or delete your existing playlists or library; and we never share or sell your Spotify data. Connecting Spotify is optional, and the feature is free.

3.5 Payment data

Purchases are processed by our third-party payment provider, Paystack. Payment card details are entered with and handled by Paystack - we do not receive or store your full card number, CVV, or banking credentials. We store a record of your transactions and credit balance to operate your account.

3.6 Usage, analytics, and technical data

We collect information about how the Service is used - features used, actions taken, and error events - to operate, secure, and improve it. We also automatically receive technical data such as IP address, device and browser type, and timestamps through server logs and analytics. See "Cookies and analytics" below.

4. How we use your data and our legal bases

We use your personal data to:

  • provide the song-identification service and maintain your account and history - legal basis: performance of a contract;
  • create Spotify playlists when you ask us to - legal basis: your request / consent;
  • process payments and manage credits - legal basis: performance of a contract;
  • secure the Service, prevent abuse, debug, and improve features - legal basis: our legitimate interests;
  • measure usage through analytics - legal basis: our legitimate interests, or your consent where required;
  • comply with legal obligations - legal basis: legal obligation.

We do not sell your personal data, we do not use it for third-party advertising, and we do not make decisions producing legal effects about you by solely automated means.

5. Cookies and analytics

We use a strictly necessary session cookie to keep you signed in. We also use Google Analytics to understand how the Service is used; Google Analytics sets cookies and processes technical data such as your IP address and device information. We use this only for aggregate product analytics, not for advertising. You can opt out of Google Analytics using Google's opt-out browser add-on, and you can control cookies through your browser settings. Google's handling of this data is governed by Google's Privacy Policy.

6. How we share your data

We share personal data only as needed to run the Service, and only with parties who are bound to protect it:

  • Service providers / processors acting on our behalf, including: cloud hosting and infrastructure providers, music-recognition providers (to identify songs from audio), our payment provider (Paystack), and our analytics provider (Google Analytics).
  • Connected services you choose: Google (sign-in), Spotify (playlist creation), and YouTube (we download audio from public URLs you submit; we do not access your YouTube account).
  • Legal and safety: where required by law, legal process, or to protect the rights, safety, and security of our users or the Service.

We do not sell or rent your personal data to anyone.

7. International data transfers

We operate globally, and your personal data may be processed and stored in countries outside your own, including outside the European Economic Area and outside Kenya. Where we transfer personal data internationally, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses or an equivalent lawful transfer mechanism) to protect it. Contact privacy@soniq8.com for more information about these safeguards.

8. Data retention

We keep your account data and history for as long as your account is active. Live audio clips are discarded immediately after processing and are never stored. When you delete your account, we delete your account data, your private analysis history, your setlists, and connected-service tokens. Tracklists you chose to make public are derived facts about public videos and contain no personal data about you; we may keep these in our shared catalog with any link to your account removed (anonymized), so other people's lookups of the same video stay fast. We may retain limited records where required for legal, tax, accounting, or fraud-prevention purposes, and we keep backups for a limited period before they are overwritten.

9. Security

We protect your data with measures including encryption of data in transit (HTTPS), hashing of passwords, server-side storage of access tokens (never exposed to the browser), and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to address vulnerabilities promptly.

10. Your rights

Depending on where you live, you have some or all of the following rights. To exercise any of them, email privacy@soniq8.com or use the in-app and Profile tools described below. We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights.

10.1 EU / UK (GDPR and UK GDPR)

  • Access a copy of your personal data;
  • Rectify inaccurate or incomplete data;
  • Erase your data ("right to be forgotten");
  • Restrict or object to certain processing, including processing based on legitimate interests;
  • Data portability (receive your data in a portable format);
  • Withdraw consent at any time, without affecting prior processing;
  • Lodge a complaint with your local data protection supervisory authority.

10.2 California (CCPA / CPRA)

  • Know what personal information we collect, use, and disclose;
  • Access and delete your personal information;
  • Correct inaccurate personal information;
  • Opt out of the "sale" or "sharing" of personal information - note that we do not sell or share your personal information as those terms are defined under California law;
  • Non-discrimination for exercising your rights.

10.3 Kenya (Data Protection Act, 2019)

  • Be informed of the use of your personal data;
  • Access your personal data;
  • Object to processing of your personal data;
  • Correction or deletion of false or misleading data;
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

11. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal data from children under 13 (or under the minimum age of digital consent in your country, which may be higher, up to 16 in parts of the EU). If you believe a child has provided us personal data, contact privacy@soniq8.com and we will delete it.

12. Deleting your account and data

You can delete your account at any time - from the Profile page on the web, from Settings in the Soniq8 Live app, or by emailing us. This removes your identity, your private analysis history, and your connected-service tokens. Tracklists you made public (which are about public videos and carry no link to you) may be kept anonymously in our shared catalog. See our Account Deletion page for full details.

13. Changes to this policy

If we make material changes, we will update this page and the "last updated" date above, and where required we will notify you. Your continued use of the Service after changes take effect means you accept the updated policy.

14. Contact

Questions, requests, or complaints about this policy or your data: privacy@soniq8.com, or write to Qazana Systems Ltd, Kenya.