Privacy Policy - Privacy Policy

#Privacy Policy - Privacy Policy
MARCH 11, 2026

1. Introduction

This Privacy Policy has been prepared to explain the extent to which users' personal data is collected, how it is used, with whom it can be shared and how it is protected within the scope of the FonMusic website, mobile applications and related digital services offered by FONMUSIC LIMITED.

By using FonMusic, you acknowledge that you have been informed about the data processing processes described in this Policy. More detailed information regarding the protection of personal data for users in Turkey will also be provided with the KVKK Information Text.

2. Data Controller Information

Title: FONMUSIC LIMITED
Company Number: 17006529
Address: 102 Rookery Court, 80 Ruckholt Road, Mainyard Studios Office C05 Suite G1187, London, E10 5FA, United Kingdom
Website: `fonmusicapp.com`
Support email: `support@fonmusicapp.com`

3. What Data We Collect

3.1 Account and Membership Data

email address

user account ID / user ID

login, logout, password reset and account verification records

subscription status, subscription plan, subscription end date and subscription source information

3.2 Payment and Subscription Data

purchased subscription plan information

records of whether the subscription is active, cancelled, expired or experiencing payment problems

transaction references, subscription renewal and cancellation information

limited transaction and subscription records from payment providers and subscription infrastructures

FonMusic aims not to store full payment data, such as payment card number, directly in its systems. Web payments can be processed through Paddle and associated subscription infrastructures, and mobile payments can be processed through the App Store or Google Play.

3.3 Usage and Support Data

listening to music, playing, stopping and similar usage events

application error records and basic system logs

transaction logs for certain features such as offline downloads

name, email address and message content shared within the scope of support requests

some preferences and library operations depending on the user account

3.4 Technical and Safety Data

IP address or approximate country information derived from IP

browser, operating system, platform and application version information

logs for session security, anti-abuse and access security

technical logs regarding traffic, requests and security checks

3.5 Data Stored Locally on the Device

If certain features are used, some music files and their technical metadata may be stored encrypted locally on the user device. This data can be associated with offline usage, access control and subscription verification.

4. How We Collect Data

Your personal data may be collected in the following ways:

when you create an account, log in or reset your password,

during your use of the website or mobile application,

during subscription purchase, renewal, cancellation or restoration,

if you contact us via the support form or support email,

through security, logging, cookies and similar technical tools,

through third-party service providers such as payment, subscription and app store integrations.

5. For What Purposes Do We Use Your Data?

We may process your personal data for the following purposes:

creating and managing your user account,

ensuring authentication and session security,

deliver music content and subscription features,

Carrying out premium access, subscription verification and license protection processes,

managing payment, renewal, cancellation, restoration and customer portal processes,

answering support requests,

ensuring service security and preventing abuse,

detecting errors, monitoring performance and improving service,

to fulfill legal obligations,

To ensure record and evidence management in case of dispute.

6. Infrastructures and Third Party Service Providers We Use

FonMusic may use the following types of third-party service providers in providing its services:

`Supabase`: user authentication, database, profile, application data and associated backend processes

`Cloudflare`: domain name, content distribution, security, edge operations, traffic routing, rate limiting and some form/request infrastructures

`Paddle`: web subscription payments, billing, cancellation and customer portal processes

`RevenueCat`: subscription management, subscription synchronization and verification processes

`Apple App Store` and `Google Play`: mobile subscription purchase, renewal, cancellation and return processes

These providers may access data only to the extent necessary for the purpose of providing the service, security, subscription management, payment processing or compliance with legal obligations.

7. Payment and Subscription Processes

In terms of web subscriptions, payment, renewal, cancellation, customer portal and similar billing processes can be carried out through Paddle and subscription infrastructures integrated with it.

For mobile subscriptions, payment and subscription processes can be carried out through the Apple App Store or Google Play.

In order to manage subscription status, FonMusic may receive limited data such as transaction result, plan type, cancellation status, renewal information, management link and similar data from payment and subscription providers.

8. Cookies and Similar Technologies

FonMusic website and related digital surfaces; may use cookies and similar technologies for session management, security, remembering preferences, performance, traffic management and improving user experience.

For cookies that require explicit consent, approval mechanisms may be applied within the framework of the applicable legislation. Details regarding the use of cookies are also explained in the Cookie Policy.

9. Transfer of Data Abroad

Due to its technical infrastructure and the service providers it uses, FonMusic may transfer your personal data to servers, service providers or technical infrastructures located outside Türkiye, or these data may be processed in relevant systems.

This transfer; It may be required due to operational needs such as cloud infrastructure, authentication, database, payment, subscription management, customer support processes, security and content distribution.

FonMusic aims to comply with applicable data protection legislation in international transfer processes. The transfer framework and legal basis to be applied for users in Turkey will also be explained in more detail in the KVKK Information Text.

10. Storage of Data

Your personal data is retained for the period required by the purposes of processing and the retention periods stipulated by the applicable legislation.

Some records regarding subscription, payment, security, technical log, support and dispute resolution may be kept for a longer period of time for legal obligations, service security or rights protection.

When the storage period expires, the data is deleted, destroyed or anonymized; However, deletion may be subject to certain processes due to technical backup, log integrity and legal obligations.

11. Security of Data

FonMusic implements reasonable technical and administrative measures to protect personal data. In this context, access control, session verification, infrastructure security, encryption, traffic protection, abuse prevention, logging, authorization and similar security measures can be used.

However, no method of data transmission or storage conducted over the Internet is completely risk-free. Therefore, absolute security cannot be guaranteed.

12. User Rights

Users may have various rights regarding their personal data under applicable legislation. These rights; It may include the right to learn whether data is being processed, to request correction, to request deletion in certain cases, to object to processing activities and other application rights granted by the legislation.

In this context, you can send your requests to `support@fonmusicapp.com`.

The rights and application procedures within the scope of KVKK for users in Turkey will also be detailed in the KVKK Information Text.

13. Children's Privacy

FonMusic does not aim to provide a service specifically designed for children. It is not intended to knowingly collect personal data from children, except where required by applicable legislation.

If a parent or legal representative believes that a child's data is being processed unlawfully, he or she can contact us at `support@fonmusicapp.com`.

14. Policy Changes

FonMusic may update this Privacy Policy from time to time. The current version shall be valid from the date of its publication or shall enter into force on a separately specified date.

In case of significant changes, the user may be notified by methods deemed appropriate.

15. Communication

For your questions or requests about this Privacy Policy, you can contact us using the following information:

FONMUSIC LIMITED
Website: `fonmusicapp.com`
Email: `support@fonmusicapp.com`

Account Deletion and Data Retention Policy (KVKK & UK GDPR)

When you delete your account, your personal data (profile, playlists, likes) will be permanently deleted from our systems.

However, in accordance with our legal obligations (Law No. 5651 and Tax Procedure Law), the following records are anonymized (in a way that cannot be associated with your identity) and stored for a certain period of time:

Access Logs: 2 Years (Legal obligation)

Payment Records: 5-10 Years (Financial legislation)

In this process, your 'user_id' information is deleted from the system, so the stored logs become anonymous and cannot be associated with you.