Add privacy policy and terms of use

DBC201 commented 2 years ago

privacy statement on what kinds of data is collected by Dab Co. and how it is used.

Data collected

email for registering account and resetting password
username and password given by the user
spotify access token with top-read authorization which gives access to a user's top listened tracks and artists in spotify
consequently to the previous point, data of top 50 tracks and artists listened by the user provided by the spotify api
- name of track/artist
- uri of track/artist
- images of track/artist
languages spoken that the user has stated
a unique device identifier for the last logged in device to prevent multiple connections
firebase notification token for sending notifications
matches of the user and who user has blocked

Data that can be seen but not permanently(the scope of permanent needs to be defined better) saved on server

data that is public in every web connection: ip, useragent etc.
message data and metadata (ideally this should be metadata and encrypted content!!!!) message metadata contains:
- sender of the message
- receiver of the message
- local time of the sender

Data that can be seen by other users of the app after a match

username of the matched user
top 50 artists and tracks the other user listens given by spotify api and which they have in common
languages the matched user speaks

No data can be accessed from the app for any user if there has been no match with that user.

Note that your email and spotify account can't be seen by other users within the app regardless of if you have been matched or not. We do not share any data with other third parties(might also change in case we decide to add ads).

DBC201 commented 2 years ago

this should be a webpage for the server, mobile can request it