Privacy Policy
Last updated: October 27, 2026
BiodanzaMusic is a music library for Biodanza facilitators and students, on the website and in the Android and iOS apps. This policy explains what BiodanzaMusic stores about you, why, and what you can do about it.
What we store
- Your account: email address, name, password (stored only as a secure hash), and your preferences (language, regional format, time zone and theme).
- What you create: playlists, tags, notes, uploaded songs, favourites and play counts.
- Signed-in apps: one sign-in token per device, with the device name and platform.
- Email address changes: the new address you asked for, a hashed form of the confirmation link, and when the change was requested, expires and was confirmed. These records are kept with your account.
- "Forgot password?": a hashed form of the address entered and of the IP address of the request, never the address or the IP address itself. These records limit repeated requests and are kept for one hour.
- If you turn on "Use local files": for each of your devices its name, platform and public key, and which of your devices are paired with each other.
- Your local library: which tracks each of your devices has a file for, a digest (a fingerprint computed from the audio) of those files, the file you chose for a track, and the title, artist and length of the tracks you add yourself.
- Folder sync: the labels of your folders, on which of your devices each folder syncs, and the accounts you share a folder with.
Your music files, their names, their locations and their sizes never reach the server. Files in synced folders go from one device to the other, end-to-end encrypted. To connect two devices, the server passes short connection messages between them and keeps these only for a short time. When two devices cannot connect directly, the server passes the encrypted data on and keeps none of it. The devices you sync with see the IP address of your device, and so does a connection server (STUN, operated by Cloudflare) that helps two devices find each other. A person you share a folder with sees your name, and so does a colleague who has the same SC or IBF catalog folder: your devices sync it with theirs.
Activity logging
To run and secure the service, BiodanzaMusic logs account and usage events, such as sign-ins, changes and played songs. Each entry keeps your user id, the platform (website, Android or iOS), the browser or app user agent and the IP address of the request.
Data on your device
The apps and the website keep a copy of your library, playlists and downloaded songs on your device, so they work offline. When you sign out, this copy stays on the device for the next time you sign in there; other people who sign in on the same device get their own. "Log out and remove my data" on the Settings page removes it. Your music files are never deleted.
No tracking, no sharing
BiodanzaMusic does not sell your data and uses no third-party advertising, analytics or tracking, so your data is not shared for those purposes. Your data is stored on the server that hosts BiodanzaMusic, and emails (invitations, password resets and replies) are sent from post@biodanzamusic.com through its mail provider.
How long we keep your data
Your account data, what you create and the activity log entries are kept as long as your account exists. When you delete your account, its data is kept for 30 days and then erased permanently.
Deleting your account
You can delete your account yourself on the Settings page with "Delete account". You are signed out at once and can no longer sign in. Your data is kept for 30 days, so an administrator can restore the account if you ask for it. After that, the account and all its data, including your uploads, are erased permanently.
To have your account and all its data erased sooner, email post@biodanzamusic.com from the address of your account.
Your rights
- Access: download your data with "Export data" on the Settings page.
- Correction: change your name, email address, password and preferences on the Settings page.
- Erasure: delete your account on the Settings page; it and its data are erased permanently 30 days later, or email post@biodanzamusic.com to have it erased sooner.
- Complaints: you can complain to the data protection authority of your country.
Contact
Questions about this policy or your data: post@biodanzamusic.com