Privacy Policy
1. App and operator
This Privacy Policy explains how DLing Music Box processes information in the DLing Music Box app and related support pages. The app is operated by Beijing Dingling Cultural Communication Co., Ltd.
2. Information we process
Depending on how you use the app, we may process your email address, Supabase user ID, Apple or Google authentication identifiers, synced favorites, membership entitlement state, Apple StoreKit purchase and entitlement status, Google Play Billing subscription information, and necessary structured transaction records. For Google Play subscriptions, this may include a purchase token submitted for server verification, product ID, order or subscription state, expiry time, acknowledgement state, entitlement status, token hashes, and transaction records needed to provide the subscription. The app may also keep Perform note-event recordings, local preferences, local storage, cached assets, language preferences, selected music box or scene settings on your device, and basic server or security logs needed to provide, protect, and troubleshoot the service.
3. Purposes
We use this information to provide sign-in, synchronize favorites, preserve app preferences, confirm Pro membership, restore purchases, respond to support requests, secure the service, troubleshoot errors, prevent fraud or abuse, and satisfy accounting, legal, or operational needs related to purchases.
4. Third-party services
Version 1.0 uses Supabase for authentication, database, and Edge Function infrastructure; Apple services for Sign in with Apple and App Store / StoreKit purchases; Google services when Google sign-in is used; and Google Play Billing for Android subscriptions. The server verifies Google Play subscriptions through the Google Play Developer API and may receive subscription lifecycle notifications through Real-time Developer Notifications (RTDN) and Google Cloud Pub/Sub. Version 1.0 does not include third-party advertising, usage analytics, crash reporting, or advertising-identifier tracking frameworks.
5. Data storage and retention
Account and synced app data are stored for as long as needed to provide the app, maintain your account, support purchases, or comply with legitimate operational and legal needs. Local recordings and local cache may remain on your device until you delete them, clear app data, or remove the app. Basic server and security logs are retained for limited operational periods.
6. Account deletion and purchase event anonymization
You can request account deletion in the app from Profile / Request Account Deletion. When deletion completes, account-owned profile data, synced favorites, membership entitlement records associated with the account, and account deletion request records are deleted where applicable. Purchase event user association and raw event payload may be removed during deletion, while necessary structured transaction records may be retained in anonymized form for fraud prevention, accounting, legal, or operational purposes.
7. Apple subscriptions and Sign in with Apple
Deleting your app account does not cancel an Apple subscription. You must manage or cancel subscriptions through Apple subscriptions in your Apple ID or App Store settings. Account deletion also does not automatically revoke Sign in with Apple authorization; if you used Sign in with Apple, you may need to stop using your Apple ID for DLing Music Box in Apple account settings.
8. Google Play subscriptions
Deleting your app account does not cancel a Google Play subscription. You must manage or cancel Android subscriptions through Google Play. To verify, restore, and maintain Pro membership, the app may send Google Play purchase information to our server, and the server may verify subscription status with the Google Play Developer API. We store only token hashes or transaction records necessary for entitlement delivery, fraud prevention, accounting, legal compliance, and operational support, and we do not expose full purchase tokens back to the client.
9. Children and minors
DLing Music Box is not intended to knowingly collect personal information from children beyond what is necessary for normal app operation under an Apple account or other permitted sign-in method. If you believe a child has provided information that should be removed, contact us.
10. International processing
Some services used by DLing Music Box, including Supabase, Apple, and Google, may process or store information in regions outside your country or region. We use these services to provide authentication, synchronization, purchases, and support.
11. Your rights
You may contact us to request help with access, correction, deletion, or questions about your app account and related data, subject to applicable law and the technical limits of the service.
12. Contact
For privacy questions, contact support@dlingmusicbox.com.