PRIVACY POLICY
Short version: no accounts, no ads, no selling your data, no tracking SDKs. Most of what you do stays on your device. Only chat messages, song searches, reports, your answer to the age question, the license key you enter for Roadie Pro and (if you switch it on) the daily reminder reach our server, because they cannot work without it. We never store your IP address; device ids are stored only as one-way hashes.
1. WHO IS RESPONSIBLE
The data controller is the app owner, [OWNER NAME], Israel. Contact: ronialt@gmail.com.
2. AGE
The Club is for people 14 or older. It is not made for, or directed at, children under 14, and they may not use it. On first launch the app asks one neutral question: "How old are you?" with three equal answers: Under 14, 14-17 or 18+. If the answer is Under 14, the app stays closed on that device, and our server also refuses chat, reports and posts from it; the only thing kept is that answer, under a random hashed device id. Under 18: ask a parent or guardian before using the AI chat. If you think a child under 14 sent us personal information, email us and we will delete it.
3. KEPT ON YOUR DEVICE
Stored in your browser's local storage (localStorage), or the installed app's own storage. We cannot read it.
- Progress: rank, XP, patches, trivia score
- Stickers and the Vault
- History: your chats with Rebellion, recently played songs, Pit posts, blocked authors
- Settings: sound, motion, pass status
- Roadie Pro: your Gumroad license key and a signed pass token, so the club can re-check your pass once a day. DELETE ALL MY DATA removes both.
Delete all data: Soundcheck → DELETE ALL MY DATA wipes all of it at once, and asks our server to delete your age answer, daily counters and push subscription and to unlink the reports you sent. Uninstalling the app or clearing site data wipes the device copy too.
4. SENT TO OUR SERVER
| DATA | WHY | KEPT |
|---|---|---|
| Chat messages you type (with the last few turns of the thread and titles of songs you recently played) | To create Rebellion's reply via our AI provider | Not stored by us; passed to the AI provider and discarded. Not used to train AI (see section 5 for the providers). |
| Search queries (song and band searches) | To find the official video or a preview | Cached up to 7 days so the same search costs no quota |
| Reports you send (reason, reported text, a hash of your device id) | Moderation (report and block) | Until handled and any appeal is closed; the link to your device is removed no later than 90 days after the report is handled |
| A random device id (no personal meaning), stored only as a one-way hash, and a hash of your IP address that changes every day | Daily message limit and abuse protection | Daily counters, deleted within 2 days. The raw IP address is never stored by the app |
| Your age band from the first-launch question (Under 14, 14-17 or 18+), with the hashed device id | Enforcing the 14+ rule (no chat, reports or posts under 14) | Until you use DELETE ALL MY DATA |
| Your Gumroad license key (only when you enter it) | To check with Gumroad that your Roadie Pro purchase is active (we send the key and the product id to Gumroad's license API) | We never store the key itself: only a one-way keyed hash of it, the plan, its status (active, cancelled, refunded), the paid-until date, the time of the last check and the hashed ids of up to 5 devices that use it. Kept while the purchase is in use; DELETE ALL MY DATA unlinks your device, and a key with no device left is deleted. |
| Your free trial (only when you start one): the plan you picked and its start and end time, with the hashed device id; separately, a one-way keyed hash of your IP address (never the address itself), not linked to the device | One 4-day free trial per device and per internet connection | The trial record is kept up to 400 days (or until DELETE ALL MY DATA) so the same device cannot start a second trial; the IP hash is deleted after 30 days. Neither holds a name, email or card data |
| Push subscription (only if you turn "Daily riff" on) | To send the daily reminder | Until you turn it off; turning it off deletes it from our server |
| Standard server logs (IP address, time, request, browser type) | Security and keeping the service running | Short-lived, kept by the hosting provider (Cloudflare), not by the app |
5. AI PROVIDERS
Rebellion is an AI roadie, not a human. It can be wrong, so double-check facts. Don't share your full name, address, phone or passwords. Messages go to our AI provider to create replies and are not used to train AI. Report a bad reply with ⚑.
The public app (rebellionsclub.riffhunter0880.com and the apps in the Google Play, Apple and Microsoft stores) sends your chat message to one AI provider in a fallback chain: Cloudflare Workers AI first, then Groq. If both are busy, the app shows a pre-written reply and nothing is sent. A content filter checks requests before they reach the AI and replies after.
The owner's test build runs only on the owner's own computer (and, while the owner tests on a phone, on the owner's home Wi-Fi). It is not offered to the public. It uses Anthropic Claude or a local model that never leaves that computer, with the same filter, the same 40-message daily limit and the same hashed ids. Google Gemini is never used by the public app and is never picked automatically: on Gemini's free tier Google may use prompts to improve its products, including training its AI, so the test build uses Gemini only when the owner turns it on by hand on that computer, for the owner's own test messages.
6. MUSIC, VIDEO AND NEWS
- YouTube: songs play only through official YouTube embeds, and song search uses the YouTube API Services. When a video plays, YouTube and Google may set their own cookies. The YouTube Terms of Service and the Google Privacy Policy apply.
- Apple iTunes Search API: 30-second previews and a store link. Previews stream from Apple.
- Nothing is downloaded or stored by the Club. The video details we keep from the YouTube API Services (video ids, titles, durations, whether a video may be embedded) are refreshed or deleted within 30 days.
- News: headlines come from public RSS feeds. Opening one takes you to that site, which has its own policy.
7. WHAT WE NEVER DO
- No ads and no advertising networks.
- No selling or sharing your personal data for advertising.
- No tracking or analytics SDKs, no social-media pixels.
8. PURCHASES
In the Google Play and Apple apps, Roadie Pro is billed by that store. On the website and in the Windows app, Roadie Pro is sold by Gumroad, Inc. as merchant of record: you give your payment details, email and country to Gumroad, not to us, under Gumroad's privacy policy (gumroad.com/privacy). Gumroad tells us about each sale (as the seller we can see the buyer's email in our Gumroad account, to answer support and refund requests); the club itself only receives whether your license key is active, its plan and its end date. We never see card details. See the Terms for prices, trials and refunds.
9. YOUR RIGHTS
Depending on where you live, laws such as the EU/UK GDPR, Israel's Privacy Protection Law (including Amendment 13, in force since August 2025) and the California Consumer Privacy Act (CCPA) give you rights over your data, including to:
- Access: get a copy of what we hold about you.
- Delete: have it erased.
- Correct it, object to or restrict its use, and complain to your data protection authority (in Israel, the Privacy Protection Authority).
- Not be discriminated against for using these rights. We do not sell or share personal information, so there is nothing to opt out of.
How to ask: email ronialt@gmail.com with your device id (Soundcheck → APP) so we can find your server-side data. We answer within 30 days. On-device data you can delete yourself at any time with DELETE ALL MY DATA.
Legal bases (GDPR): running the service you asked for (chat, search, purchases), our legitimate interest in keeping the club safe (reports, logs, limits), and your consent for optional features (push reminders).
10. TRANSFERS AND SECURITY
Our providers (including Cloudflare, Groq and Gumroad, United States) may process data outside your country, including in the United States, under their own safeguards. Traffic is encrypted (HTTPS), and we keep as little as we can for as short as we can.
11. CHANGES
We post changes here with a new date and version. For important changes we also show a notice in the app.