AI:U Radio Player: Privacy Policy
Effective Date: March 1, 2026
Welcome to the AI:U Radio Player ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. The Data Controller responsible for your personal data is ghost.ryder@aiu.fm, operating in collaboration with our development team based in Germany.
This application is hosted and its infrastructure is maintained in Germany. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our application.
1. Information We Collect
We collect information that you voluntarily provide to us when you register on the application, express an interest in obtaining information about us, or otherwise interact with the platform.
1.1. Information Collected via Authentication
When you log in to our application using Discord, we collect the following profile information:
- Account Details: Your Discord user ID, username, display name, and discriminator.
- Visual Identity: Your profile avatar and banner images.
- Community Status: Server-specific roles, including whether you are a VIP, Moderator, or Guild Member, to grant appropriate access and features.
1.2. Platform Activity and Usage Data
To provide a rich community radio experience, we store data related to your interactions with the platform, including:
- Listening Stats: Total listening time (in seconds) and active heartbeat data to provide a seamless playback experience.
- Interactions: Emoji reactions you leave on songs and your comments on songs ("SUPER Reactions").
- History: Precise timestamps of when comments or reactions were made within a song's duration.
- Social Integration: Any external links or profile information you choose to provide (e.g., social media handles, website).
- Gamification: User-generated reports, platform credits, achievements, and calculated "Tastemaker" scores.
1.3. Technical Information
To ensure the stability and security of the application, we may collect:
- Session Tokens: Secure, encrypted tokens to manage your authentication state.
- Device Metadata: Information about your browser type, device, and operating system for performance and compatibility optimization.
2. Legal Basis for Processing (GDPR)
If you are a resident of the European Economic Area (EEA) or the UK, our legal basis for collecting and using your personal information depends on the context:
- Performance of a Contract: We process your Discord profile and authentication data to provide the core radio platform and user account you requested.
- Consent: We rely on your explicit consent to enable optional features, such as functional trackers, internal analytics, and third-party media/chat integrations (Twitch, Klipy, and Widgetbot.io).
- Legitimate Interests: We process usage logs and report data to ensure platform security, prevent abuse, and enforce our community guidelines.
3. How We Use Your Information
We use the collected data for the following functional purposes:
- Account Management: To authenticate you via Discord, manage your user session, and maintain your platform profile.
- Live Interactivity: To display your reactions and comments in real-time to other listeners.
- Safety and Moderation: To enforce our terms of service, manage community safety, process reports, and maintain system integrity through audit logs.
- User Experience: To remember your specific preferences, privacy choices, and player customizations.
4. Cookies and Session Management
We use cookies and similar technologies to ensure the platform functions securely:
- Authentication: Secure, encrypted session management for logged-in users (Session-based).
- Privacy Choice: Persisting your specific privacy and consent preferences (12 Months).
- User Acknowledgment: Tracking acknowledgment of platform disclaimers (12 Months).
Optional trackers are disabled by default until you provide explicit consent through our preference management system.
5. Third-Party Integrations
To enhance your experience, we integrate with select third-party services. These services process data according to their own privacy policies. You have the right to toggle your consent for these services in your platform settings:
- Discord: Used globally for secure user authentication and profile synchronization.
- Widgetbot.io: Utilized as a third-party middleware to embed and power the live Discord community chat directly on our platform. This integration only loads if you provide explicit third-party consent.
- Twitch: We utilize Twitch embeds and status events, which load only if you provide explicit third-party consent.
- Klipy: Integrated to allow users to attach GIFs and stickers to their song comments. This integration is guarded by your consent settings.
- AzuraCast: Powers the live audio stream and provides foundational metadata.
6. Data Retention and Security
We implement appropriate technical and organizational security measures to protect your data:
- Infrastructure: Your data is stored securely on servers located in Germany.
- Invalidation and Deletion: All active sessions and cached data are invalidated if your Discord account ceases to exist or if you are permanently banned from the application.
- Retention: We retain your profile and interaction data for as long as your account is active. If you request account deletion, we will delete or anonymize your identifying data within 30 days.
7. International Data Transfers
Our primary servers and databases are located in Germany. However, because our Community Head is based in the United States, and we utilize global third-party services (such as Discord, Widgetbot.io, Twitch, and Klipy), your information may be accessed from, transferred to, stored, or processed in the United States or other regions outside the European Economic Area (EEA).
We ensure that any transfers of personal data outside of the EEA are safeguarded by recognized legal mechanisms, such as Standard Contractual Clauses or reliance on cloud providers certified under the EU-U.S. Data Privacy Framework, to ensure your data remains protected.
8. Your Data Privacy Rights
Depending on your location (such as under the GDPR or relevant US State Privacy Laws), you have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You can request that we delete your account and associated personal data.
- Right to Withdraw Consent: You can change your preferences for analytics and third-party integrations (like Widgetbot.io) at any time via the application settings.
- Right to Data Portability: You can request your data in a structured, machine-readable format.
- Right to Complain: You have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.
To exercise these rights, please contact us using the details in Section 10.
9. Children's Privacy
Our service is not intended for children. Because our platform requires a Discord account for authentication, users must be at least 13 years old (or 16 years old in certain European countries, per local laws). We do not knowingly collect personal information from children under these required ages. If we become aware that we have collected data from a minor without appropriate consent, we will take immediate steps to delete it.
10. Contact Us
If you have questions, comments, or wish to exercise your data rights, please contact us:
Note: The AI:U Radio Player infrastructure is hosted in Germany and operated in collaboration with community management in the United States.