Privacy Policy

Effective date: 22 May 2026

Ravanova Music ("we", "us", "our") operates the Ravanova Music mobile app and website (ravanovamusic.com and kayamusicisland.com). This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have over your data. By using Ravanova Music you agree to the practices described here.

1. Information We Collect

We collect the following categories of data when you use Ravanova Music:

  • Account information: first name, last name, email address, phone number, password (stored hashed), profile picture, role (creator or viewer).
  • Subscription and payment data: creator subscriptions you hold, subscription start/end dates, payment source (Apple, Google Play, or web), and store-issued transaction identifiers. We do not store full payment card numbers — those are handled by the App Store, Google Play, or our payment processor.
  • Creator content: videos, thumbnails, titles, descriptions, and metadata uploaded by creator-tier users.
  • Usage data: videos watched, likes, comments, ratings, in-app actions, timestamps, and device identifiers.
  • Device and technical data: device model, operating system version, app version, IP address, push notification token, language, and approximate location derived from IP address.
  • Support data: messages and attachments you send to our support team.

2. How We Use Your Data

We use the data above to:

  • Create and authenticate your account.
  • Deliver subscription-gated content and verify your entitlements.
  • Process payments via Apple, Google Play, or our web checkout, and handle refunds where applicable.
  • Send transactional notifications such as receipts, password resets, and subscription renewal reminders.
  • Send marketing communications only when you have explicitly opted in.
  • Personalise your home feed and creator recommendations.
  • Detect and prevent fraud, abuse, and content violations.
  • Comply with legal obligations, including responding to lawful requests from authorities.

3. Third-Party Services We Use

We rely on a small number of trusted third-party services to operate Ravanova Music. Each receives only the minimum data needed for its purpose, and each is bound by its own privacy and security obligations.

  • Apple Inc. — In-App Purchase processing, push notifications via APNs, and crash reporting on iOS. Apple receives your purchase tokens and device identifiers per their App Store policies.
  • Google LLC (Google Play, Firebase, Google Cloud) — In-App Billing on Android, Firebase Authentication for phone verification (OTP), Firebase Cloud Messaging for push notifications, and analytics. Phone numbers submitted for OTP verification pass through Firebase Phone Auth.
  • Bunny.net (Bunny CDN and Bunny Stream) — video storage, transcoding, and delivery. Watched videos are streamed from Bunny's CDN edge network.
  • WooCommerce and Stripe — payment processing for web-based subscriptions and concert ticket sales. Stripe handles card details; we never see them.
  • DigitalOcean and SpinupWP — application and database hosting. Our backend runs on DigitalOcean infrastructure with managed MongoDB.
  • WhatsApp Business — optional support channel. Only the messages and contact details you choose to share via WhatsApp.

4. How We Share Your Data

  • Service providers — as listed above, strictly for the purposes described.
  • Creators you subscribe to — your display name and basic subscriber count metrics. Your email, phone number, and payment details are never shared with creators.
  • Legal authorities — when required by law, court order, or to protect the safety of users or the public.
  • Business transfers — if Ravanova Music is involved in a merger, acquisition, or asset sale, user data may transfer under the new ownership. We will notify you before any such transfer takes effect.

We do not sell your personal data to advertisers or third parties.

5. Data Retention

We retain personal data only as long as needed:

  • Active accounts: for as long as your account remains open.
  • Closed accounts: most personal data is deleted within 30 days of account closure. Some records (such as transaction logs and tax records) are retained for up to 7 years to meet legal and accounting obligations.
  • Apple IAP audit log: Apple original transaction IDs and receipts are retained indefinitely as required for store reconciliation, fraud prevention, and Apple's own subscription lifecycle handling. These records contain no personal contact information.
  • Support tickets: retained for 2 years from last activity, then deleted.
  • Usage logs: retained for 12 months in aggregate form, then anonymised.
  • Backups: daily encrypted backups are retained for 30 days, then overwritten.

6. Your Rights

Depending on where you live, you have some or all of the following rights:

  • Access a copy of the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your account and associated personal data (see Section 7 below).
  • Export your data in a portable format.
  • Object to certain types of processing, such as marketing communications.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with a data protection authority in your jurisdiction.

California residents have additional rights under the CCPA, and residents of the European Economic Area and the United Kingdom have additional rights under the GDPR and UK GDPR. To exercise any of these rights, contact us using the details in Section 11.

7. Account Deletion

You can delete your Ravanova Music account at any time directly from within the app. Go to Profile → Delete Account and confirm the deletion. Deletion is permanent and irreversible.

What account deletion does:

  • Removes your profile, login credentials, uploaded videos (creator accounts), comments, likes, ratings, and viewing history.
  • Cancels any active web-billed subscription you hold.
  • Preserves the immutable Apple IAP audit log (see Section 5) for compliance and store reconciliation.

Important: Deleting your Ravanova Music account does not cancel auto-renewing subscriptions billed by Apple or Google. You must cancel those separately in the App Store or Play Store before deleting your account, otherwise you will continue to be charged with no service delivered. The app will warn you about this before you confirm deletion.

If you cannot access the app for any reason, you can also request deletion by emailing privacy@ravanovamusic.com from the email address registered to the account.

8. Children's Privacy

Ravanova Music is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you become aware that a child has provided us with personal information without parental consent, please contact us so we can delete the data and the account.

9. Security

We protect your data with industry-standard measures including TLS in transit, encryption at rest where supported by our storage providers, hashed and salted passwords, scoped access controls for our team, and continuous monitoring of our infrastructure. No system is perfectly secure, but we work hard to reduce risk and notify users promptly if a breach affects their data.

10. International Transfers

Ravanova Music is operated from Mauritius. The data we collect is stored on servers located in multiple regions, including the European Union, the United States, and Asia, depending on the service provider. By using the app you consent to your data being transferred to and processed in countries that may have different data protection laws than your own.

11. Contact Us

Questions, requests, or complaints about this Privacy Policy or our data practices:

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via in-app banner, push notification, or email, at least 14 days before they take effect. The "Effective date" at the top of this page always reflects the most recent revision.