Privacy Policy

1. Introduction & Who We Are

This Privacy Policy explains how personal information is collected, used and protected when you use My Blue Tunes, which consists of:

• the website mybluetunes.com (the "Website"), and
• the Android app Blues Radio - My Blue Tunes (package com.app.bluestunes) available on Google Play (the "App").

Together they are called the "Service". Where a section applies only to the Website or only to the App, this is stated.

Data controller: App Design Lab 2025, independent developer, Greece ("we", "us", "our"). Contact: info@mybluetunes.com.

2. Information We Collect

2.1 Information you give us

• Account (App, optional): You can use the App without an account. If you create one, we collect only your name, email address and password, plus a profile photo if you choose to add one. If you sign in with Google, we receive your name, email address and Google account identifier through Firebase Authentication.
• Station suggestions (App): the station name, description and image you submit, linked to your account.
• Ratings, favourites and reports (App): station ratings, your favourite stations and any problem reports you send, linked to your account.
• Contact (Website and email): your name, email address and message when you use the contact form or write to us.

2.2 Information collected automatically

• Device and app information: device model, operating system version, app version, language and an approximate location (country or city level) derived from your IP address.
• Identifiers: the Android advertising ID (if you have not reset or deleted it), the Firebase app-instance ID and the push-notification ID assigned by OneSignal.
• Usage data: screens viewed, stations played and how you interact with the App or Website, collected through Google Analytics for Firebase (App) and Google Analytics (Website).
• Advertising data: ad impressions and clicks, and the data Google AdMob collects as described in section 5.

2.3 Stored only on your device

Your settings (theme, Now Playing style, equalizer, sleep timer) and your recently played stations are stored locally on your device and are not sent to us.

2.4 What we do NOT collect

• We do not receive or store your payment card or bank details. Payments are handled by Google Play.
• We do not collect precise (GPS) location.
• We do not access your contacts, call history, photos (other than an image you choose to upload) or microphone.
• We do not sell your personal data.

3. How We Use Your Information & Legal Bases

• Provide the Service (play stations, keep your account, favourites and ratings, review your station suggestions). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Process and restore your "Remove ads" purchase. Legal basis: performance of a contract.
• Show advertising that keeps the Service available at no cost. Personalised ads in the EEA, the UK and Switzerland are shown only with your consent. Legal basis: consent (Art. 6(1)(a)) for personalised ads; legitimate interests (Art. 6(1)(f)) for non-personalised ads.
• Send push notifications (for example new stations). Legal basis: consent, given through the Android notification permission, which you can withdraw at any time in your device settings.
• Understand usage and fix problems through Google Analytics for Firebase (App) and Google Analytics (Website). Legal basis: consent (Art. 6(1)(a)). In the App, analytics stays switched off until you consent, and outside the EEA, the UK and Switzerland it runs where consent is not required.
• Answer your messages and handle privacy requests. Legal basis: legitimate interests and legal obligations.
• Protect the Service against abuse, fraud and security incidents. Legal basis: legitimate interests.

4. App Permissions

• Internet and network state: to stream radio and check your connection.
• Notifications: to show the player controls and, if you allow it, push notifications.
• Foreground service and wake lock: to keep playback running when the screen is off.
• Audio focus: playback pauses automatically during phone calls without any phone permission.
• Advertising ID: used by Google AdMob as described below.
• Google Play billing: to offer the optional "Remove ads" purchase.

When you choose a profile photo or a station image, the App uses the Android photo picker, which shares only the image you select.

5. Advertising & Consent

5.1 In the App

The App shows banner, native, full-screen and app-open ads served by Google AdMob (Google Ireland Ltd / Google LLC). Google may collect your advertising ID, IP address, device information and ad-interaction data to deliver, measure and, with your consent, personalise ads. See how Google uses data.

Consent (EEA, UK, Switzerland): on first launch the App shows a consent form provided by Google's User Messaging Platform, before any ad is requested and before analytics starts. You can accept, refuse, or choose specific purposes. If you refuse, you may still see non-personalised ads. You can change your choice at any time in Settings > Privacy choices.

Your controls: you can reset or delete your advertising ID in your Android settings (Settings > Privacy > Ads), and you can remove all ads with the one-time "Remove ads" purchase.

Ads inside radio streams: some stations broadcast their own audio advertising. Those ads are part of the station's broadcast and are not controlled by us.

5.2 On the Website

The Website uses Google AdSense. Google may use cookies to show ads based on your visits to this and other websites. You can opt out of personalised advertising at Google Ads Settings or www.aboutads.info. Visitors in the EEA, the UK and Switzerland are asked for consent through our cookie banner before personalised ads are shown.

6. In-App Purchases

The App offers an optional one-time purchase, "Remove ads". The payment is processed entirely by Google Play under Google's payments privacy notice. We receive only a confirmation that the purchase exists (product, order and purchase identifiers). This confirmation is checked on your device with Google Play and is not stored on our servers.

7. Third-Party Services

• Google Firebase (Authentication, Analytics) — sign-in and usage analytics in the App. Firebase privacy
• OneSignal — push notifications in the App. OneSignal privacy policy
• Google Play services — billing, in-app reviews and the advertising ID.
• Google AdMob — advertising in the App, see section 5.
• Google Analytics and Google AdSense — on the Website.
• Formspree — Website contact form. Formspree privacy policy
• Apple iTunes Search API — to show album artwork, the App sends the artist and song title currently playing to Apple's public search service. No account or personal information is included; like any internet request, it reveals your IP address to Apple.
• Radio stations — when you play a station, your device connects directly to its streaming server, which receives your IP address and device information. We do not control how stations handle that data.
• Hosting and content delivery — our servers and providers such as Cloudflare and Google Fonts, which process technical data (IP address, browser) to deliver content.

8. Website Cookies

The Website uses cookies and similar technologies:

• Essential: to make the player and site work.
• Preferences: to remember settings such as volume or favourite stations.
• Analytics: Google Analytics, to understand how the site is used. You can opt out with the Google Analytics Opt-out Browser Add-on.
• Advertising: Google AdSense, as described in section 5.2.

You can manage or delete cookies in your browser settings and change your choices through our cookie banner. Blocking some cookies may affect how the Website works.

9. Data Retention

• Account data, favourites and ratings: kept while your account exists, and deleted within 30 days after you delete your account.
• Station suggestions and reports: kept for as long as needed to review them and, for suggested stations that are added, while the station is listed. You can ask us to delete them at any time.
• Messages to us: kept for up to 24 months after your request is resolved.
• Analytics and advertising data: kept by Google and our partners according to their own retention settings.
• Data on your device: removed when you clear the App's data or uninstall it.

10. Deleting Your Account

You can delete your account and its data at any time:

• In the App: open Profile and tap Delete Account. Settings > Data Deletion Policy explains the process.
• By email: write to info@mybluetunes.com from the email address of your account.

Deleting your account removes your profile, profile photo, favourites and ratings. Your "Remove ads" purchase is linked to your Google account, not to your My Blue Tunes account, so it is not affected.

11. Data Security

We use appropriate technical and organisational measures to protect your data, including HTTPS encryption between the App or Website and our servers, access restricted to the developer, and regular software updates.

12. Your Rights (GDPR)

Under the General Data Protection Regulation you have the right to:

• Access a copy of your personal data
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict how we process your data
• Data portability — receive your data in a machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time, without affecting processing carried out before withdrawal

To exercise these rights, email info@mybluetunes.com. We will reply within one month.

You also have the right to lodge a complaint with a data protection authority. In Greece this is the Hellenic Data Protection Authority; you may also contact the authority in the country where you live.

13. Children's Privacy

The Service is not directed to children. Creating an account requires you to be at least 13 years old, or the minimum age of digital consent in your country if that is higher (for example 15 in Greece or 16 in Germany). We do not knowingly collect personal data from children below these ages.

If you believe a child has given us personal data, please contact info@mybluetunes.com and we will delete it.

14. International Data Transfers

Some of our service providers process data outside the European Economic Area, including in the United States. Where this happens, transfers rely on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework for certified companies) or on the European Commission's Standard Contractual Clauses.

15. Changes to This Privacy Policy

We may update this policy when the Service or the law changes. We will update the "Last Updated" date above and, for significant changes, show a notice on the Website or in the App.