← back

privacy policy

incandenza ("the service") is operated by deux collectif. this policy describes what data we collect, how we use it, and your rights regarding that data.

1. data we collect

when you use incandenza, we may collect:

• account information: email address, display name, and profile image via google sign-in.
• listening data: top artists, genres, listening patterns, and related metadata from connected services (youtube music, apple music, last.fm, tidal, spotify). this data is used solely to generate your sonic profile.
• oauth tokens: authentication tokens from connected music services, stored securely on our server to access your listening data on your behalf.
• payment information: processed entirely by stripe. we do not store credit card numbers. we store your stripe customer id and subscription status.
• session data: a signed session cookie to keep you logged in. session count and basic usage metrics.

2. how we use your data

• to generate personalized sonic profiles from your listening history.
• to produce personalized generative audio streams.
• to manage your account and subscription.
• we do not sell your data. we do not use your data for advertising.

3. third-party services

your data is shared with the following services solely to provide the functionality of incandenza:

• anthropic (claude): your artist names and genre data are sent to claude to generate sonic profiles. no personal identifiers are included.
• google (lyria): sonic profile prompts (text descriptions of audio characteristics) are sent to google's lyria api to generate audio. no personal identifiers are included.
• stripe: email and payment details for subscription billing.
• music services: youtube music, apple music, last.fm, tidal, and spotify are accessed using your authorized tokens to read your listening data.

4. google user data — limited use disclosure

incandenza's use and transfer of information received from google apis adheres to the google api services user data policy, including the limited use requirements.

• what we access: through the youtube data api v3, incandenza accesses your liked videos, subscriptions, and playlists (youtube.readonly scope) solely to identify your listening preferences.
• how we use it: youtube data is used exclusively to generate your sonic profile — a set of text-based audio generation parameters. the raw youtube data is stored on our server linked to your account and is not used for any other purpose.
• no transfers: google user data is not transferred, sold, or shared with third parties except as required to provide the core functionality of the service (artist names are sent to anthropic's claude api for sonic profile generation — no youtube-specific identifiers are included).
• no advertising: google user data is not used for serving ads, retargeting, or interest-based advertising.
• no human reading: raw google user data is not read by humans unless required for security investigation, legal compliance, or with your explicit consent.
• revocation: you may revoke incandenza's access to your google account at any time through your google account permissions.

5. data retention

• oauth tokens are stored as long as your account is active.
• sonic profiles are stored as long as your account is active.
• generated audio is not stored. it is streamed in real-time and is non-recoverable once transmitted.

6. data deletion

you may request deletion of your account and all associated data at any time by contacting us at privacy@incandenza.io. upon request, we will delete your account, oauth tokens, sonic profiles, and session records within 30 days.

7. cookies

incandenza uses a single session cookie (incandenza_session) to maintain your login state. this is a functional cookie required for the service to operate. we do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. children

incandenza is not intended for users under the age of 13. we do not knowingly collect data from children under 13. if you believe a child has provided us with personal data, contact us and we will delete it.

9. your rights

depending on your jurisdiction, you may have the right to:

• access the personal data we hold about you.
• request correction of inaccurate data.
• request deletion of your data.
• withdraw consent for data processing.
• lodge a complaint with a supervisory authority.

to exercise any of these rights, contact privacy@incandenza.io.

10. changes

we may update this policy from time to time. changes will be posted on this page with an updated effective date.

11. contact

for questions about this privacy policy, contact privacy@incandenza.io.