Privacy Policy
Last updated: October 26, 2026
Data controller
The data controller is Laura Migallón. For privacy questions or to exercise your rights, contact contact.donebylaura@gmail.com.
Data we process
Seven automatically creates a guest profile when you start using the app. You do not need to register with an email address or password. The random profile is needed to identify you, sync favorites and listening activity, and provide Seven's features. You do not need to provide your name, email address, or password.
- Guest profile: a random identifier and a technical credential used to maintain and protect your profile. The credential stays on your device; the server stores a hashed version.
- Favorites: the identifiers of songs you save, associated with your profile.
- Listening activity: the artist, song, profile, and time of a play. A play counts after 60 seconds of active playback. Playing a song again can count as another play when it reaches that threshold again.
- Premium subscription: transaction identifiers and subscription status and validity data needed to verify a purchase and provide Premium access.
- Data on your iPhone: the app stores the profile credential in secure device storage and may keep a copy of the catalog, favorite identifiers, weekly counts, language choice, Shuffle exclusions, and plays waiting to be sent. It also caches images and audio to speed up navigation and playback.
- Technical data: API request information such as the requested path, time, response status, execution region, and request identifiers. Vercel may process connection data, such as IP address and user agent, to operate and protect the service.
Seven does not request notification permission or send notifications outside the app. We do not use data for advertising or include third-party analytics tools.
The app sends the data needed to create a profile, sync favorites, record plays reported after 60 seconds, and verify Premium to the API hosted by Vercel. The API stores profile-related records in the Neon database. Artist portraits and cover art are delivered through Vercel; audio files are delivered by Seven from its media storage. Apple processes payments and communicates subscription status to Seven.
If you reinstall Seven or change iPhone and restore a Premium subscription, Apple provides the purchase data needed to verify it. When the verified purchase is linked to an earlier guest profile, Seven associates the new profile with the old one to recover favorites and other profile data. This association uses the transaction identifier, not your Apple name, email address, or password. Data from a profile you deleted in the app cannot be recovered this way.
Purposes and legal bases
- Creating and maintaining your profile, displaying the catalog, syncing favorites, and providing Seven's features: performance of the service contract.
- Counting plays and calculating the weekly catalog rotation, which is part of the service: performance of the service contract.
- Verifying Premium purchases and providing paid access: performance of the subscription contract.
- Protecting the API, preventing abuse, and keeping the service available: our legitimate interest in service security and operation.
The weekly selection uses each artist's total plays. We do not make automated decisions about users that produce legal or similarly significant effects.
Retention and deletion
- Your guest profile and favorites from active artists are kept while the profile exists. If an artist leaves while you use the free plan, that artist's songs are permanently removed from your favorites. Favorites from departed artists that you retained with Premium remain linked to your profile after the paid period ends, but are disabled: they cannot be played or included in Favorites playback. Access returns if you subscribe again. A status check may be delayed if Apple or Seven's service is unavailable. Subscription data is kept while the profile exists. You can delete the profile in Settings.
- Individual listening records are aggregated by artist and week and deleted after 14 days. Cleanup runs hourly, so deletion normally occurs between 14 days and 14 days plus one hour. An incident or delayed task may delay deletion.
- Weekly totals contain the artist, week, and number of plays, without a user or song identifier. They are kept for 90 days after the end of the relevant week and then deleted by a scheduled task.
- Local profile data, pending plays, and the audio cache are deleted when you delete your profile in the app. Language choice and the public catalog copy may remain on the device. Cached images may remain until iOS clears its cache or you uninstall the app.
- Vercel Pro execution logs are available for one day. Vercel may process other technical data under its own terms and privacy notices.
- Deleting your profile deletes favorites, any remaining individual listening history, and subscription data linked to that profile. Any remaining individual plays are added to weekly totals before deletion. These totals do not include a profile identifier that would allow them to be separated by user.
Deleting your Seven profile does not cancel a subscription billed by Apple. You must cancel it separately in your Apple account's subscription settings.
Providers and international transfers
- Vercel hosts the API and provides content storage and delivery. The API runs in the United States.
- Neon hosts the database in Frankfurt, Germany.
- Apple processes in-app purchases.
Although the Neon database is in Frankfurt, providers may access certain data from other countries to support or operate their services. Vercel and Neon provide for the European Commission's standard contractual clauses for international transfers where applicable. Some data may therefore be processed in the United States or other countries under the contractual safeguards provided by those agreements. We do not claim that all data remains in the European Union.
You may request a copy of the applicable international-transfer safeguards at contact.donebylaura@gmail.com. You can also consult the data-processing agreements of Vercel and Neon.
Your rights
You may request access to, correction or deletion of your data, restriction of processing and, where applicable, data portability. You may also object to processing based on legitimate interests.
You can delete your profile in Settings or contact contact.donebylaura@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency.
Changes to this policy
If the service or applicable law changes, we will update this policy and show the new review date.