Kovan Apps Yazılım Ltd. Şti. ("Kovan Apps", "Company", "we", "us", or "our") operates the MeloMatch mobile application ("App", "Service"), available on Google Play (Android) and the Apple App Store (iOS). MeloMatch is a music-first social app: you build a profile from the artists and songs you love, discover people who share your taste, challenge them to music duels, and start conversations with a song. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the App on either platform.
By using MeloMatch, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use the App.
| Data Category | Specific Information | Purpose |
|---|---|---|
| Profile Information | First name, date of birth (to derive your age), gender, short bio, what you are looking for | Create your profile and show it to other users |
| Authentication Data | Phone number and the one-time SMS verification code | Account creation and sign-in via Firebase Authentication. We do not use passwords or social logins. |
| Photos | Profile pictures you take or choose from your library | Shown on your profile; stored in Firebase Storage; screened for prohibited content |
| Music Preferences | Favorite artists, favorite songs, and the genres derived from them. On iOS you may optionally import suggestions from your Apple Music library. | Compatibility scoring, discovery ranking, duel questions, song sharing |
| Discovery Preferences | Age range, maximum distance, gender(s) you would like to see | Filter who is shown to you |
| Duel and Song Activity | Answers, scores and timing in music duels; songs you send to others and your responses to songs you receive | Run duels, show results to both participants, unlock conversations |
| Communications | Chat messages, reports you file, feedback and support emails | Deliver chat, moderate content, provide support |
To build your profile, duels and the concert feed, our servers query public catalogs: the Apple Music / iTunes catalog, the Spotify catalog, MusicBrainz (genres) and Ticketmaster (concerts). These queries are made from our servers, contain no personal identifiers, and are cached for all users. Song previews played in the App are 30-second clips served by Apple and remain the property of their rights holders.
We use your information to create and manage your account, verify your phone number, display your profile to other users, calculate music compatibility, rank who you see and who sees you, run duels, deliver songs and chat messages, show concerts near you, and process subscriptions.
We analyze aggregate usage to improve the App, develop new features, monitor performance, and find and fix technical problems.
We screen every uploaded photo with the Google Cloud Vision API (SafeSearch) before it is shown, review reports filed by users, detect and prevent fraud and automated abuse, enforce our Terms, and comply with legal obligations.
We send push notifications about connection requests, duels, songs and messages you receive (you can turn these off in device settings), respond to support inquiries, and notify you of changes to our policies.
The following is visible to other MeloMatch users: your first name, age, gender, city and approximate distance, bio, photos, favorite artists and songs, genres, your compatibility score with them, duel results you played together, and songs you send. Your phone number, exact location, date of birth and discovery preferences are never shown to other users.
We share data only with providers that help us run the App, under contracts that restrict them to that purpose:
| Service Provider | Purpose | Data Shared | Platform |
|---|---|---|---|
| Firebase / Google Cloud | Authentication, database, file storage, server functions, push notifications, App Check, analytics, crash reporting | Phone number, profile, photos, music preferences, location, messages, usage and crash data | Android & iOS |
| Google Cloud Vision API | Automated screening of uploaded photos for prohibited content | Photo being uploaded (no identity data) | Android & iOS |
| Google reCAPTCHA Enterprise | Abuse prevention during phone verification | Device signals | iOS |
| RevenueCat | Subscription validation and management | Internal user ID, purchase receipts, subscription status, device info | Android & iOS |
| Apple | App Store billing, push notifications (APNs), Apple Music / MusicKit access, song previews | Purchase data (handled by Apple), push token, catalog lookups | iOS |
| Google Play Services | Play billing, push notifications, location services | Purchase data (handled by Google), push token | Android |
| Spotify | Music catalog lookups (artist and song search) | None — catalog queries only, no account connection | Android & iOS |
| Ticketmaster, MusicBrainz | Concert listings and genre data | None — queried from our servers without personal data | Android & iOS |
We may disclose your information if required by law or valid legal process, to enforce our Terms, to protect the safety of users or the public, or to detect and prevent fraud. Reports of child sexual abuse material are forwarded to the appropriate authorities as described in our Terms.
If Kovan Apps is involved in a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will notify you before your information becomes subject to a different privacy policy.
All traffic between the App and our servers is encrypted with TLS. Our database is not directly accessible from the App: every read and write goes through server-side functions that verify your identity and validate the request, and backend access is protected by device attestation (Firebase App Check). Data is stored encrypted at rest on Google Cloud. Only a small number of Kovan Apps staff can access production data, and only for support, moderation and debugging.
Important Notice: No method of internet transmission or storage is 100% secure. Keep your phone and SIM secure, since your phone number is your sign-in credential.
You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority (in Turkey, the Personal Data Protection Authority, KVKK).
You have the right to know what personal information we collect and how it is used, the right to delete it, the right to opt out of its sale or sharing (we do neither), and the right not to be discriminated against for exercising these rights.
To edit your profile, photos, music or discovery preferences, use the Profile tab. For any other request, email info@kovanapps.com with the subject "Privacy Rights Request – MeloMatch" from an address you can verify, and include the phone number on your account. We respond within 30 days (GDPR/KVKK) or 45 days (CCPA).
| Permission | Purpose | Platform | Required / Optional |
|---|---|---|---|
| Location | Show people and concerts near you; only your city is shown to others | Android (fine & coarse) · iOS (while using) | Required for discovery |
| Photos | Pick profile photos through the system photo picker | Android & iOS | Optional (at least one photo is needed for a profile) |
| Camera | Take a new profile photo | Android | Optional |
| Media & Apple Music | Suggest artists and songs from your library | iOS | Optional |
| Notifications | Alert you about connection requests, duels, songs and messages | Android & iOS | Optional |
| Internet & Network State | Connect to our servers | Android & iOS | Required |
We do not request the iOS App Tracking Transparency permission because we do not track you across other companies' apps or websites, and we do not access your contacts, microphone, or calendar.
Kovan Apps is based in Turkey. Your information is processed on Google Cloud servers in the United States and the European Union, and by the service providers listed in Section 4.2. Where data leaves the EU/EEA, the UK or Turkey, we rely on Standard Contractual Clauses approved by the European Commission and equivalent safeguards under KVKK.
The App itself does not use cookies. We use Google Analytics for Firebase and Firebase Crashlytics tied to a random app-instance identifier, RevenueCat for subscriptions, local device storage for your preferences, and authentication tokens to keep you signed in. We do not use advertising SDKs, and we do not share your data with advertising networks. On iOS, the App Store privacy "nutrition label" for MeloMatch reflects the practices in this Policy.
We may update this Privacy Policy from time to time. We will change the "Last Updated" date above and, for material changes, notify you in the App. Continued use of MeloMatch after a change means you accept the updated Policy.
If a data breach is likely to affect your rights, we will notify affected users without undue delay, report to the relevant supervisory authorities within 72 hours as required by GDPR and KVKK, and explain the steps you can take to protect yourself.
Kovan Apps Yazılım Ltd. Şti.
Üniversiteler Mah. 1597 Cad. No: 3/127 Bilkent, Çankaya, 06800 Ankara, Türkiye
Email: info@kovanapps.com
Subject: "Privacy Inquiry – MeloMatch"
Response Time: Within 48 hours for general inquiries