Privacy Policy

Current Scope

RapReprise is a music and cultural discovery app. Current app behavior focuses on discovery, account readiness, profile exploration, and safe store-prep scaffolding.

RapReprise may support account creation or sign-in depending on the release build. If account access is enabled, account information such as email address, display name, and user ID may be used for authentication, account access, support, and account-management features.

Account And Provider Posture

Apple login and Microsoft login are planned and scaffolded but are not live unless a later approved release explicitly enables them. Provider configuration, provider credentials, Apple Developer setup, Microsoft Entra/Azure setup, and Firebase Auth Apple/Microsoft provider setup are not live in the current approved posture.

Data practices must be updated if Apple or Microsoft provider login is enabled in a future release.

Optional usage analytics

RapReprise uses Google Analytics for optional usage analytics to understand product usage and improve RapReprise. Collection is OFF until you choose Allow analytics in a release that enables this option. You can decline without losing access. Change or withdraw your choice through Profile → Settings → Analytics preferences, or Analytics preferences in a public Feature footer.

With consent, selected interactions include onboarding, discovery and search usage, public artist, studio and Feature views, navigation between public content, and listening or source-link clicks. Search measurements contain a results-count category, not search text. Listening-link clicks indicate intent, not confirmed playback; loading an embedded player is not a listening event.

Events contain allowlisted public content identifiers and interaction categories, a random browser identifier, a session identifier, and a coarse referrer category. Account email, user UID, names, admin identifiers, private URLs, internal research or evidence, and sensitive fields are not intentionally sent. We do not use session replay or enable advertising personalization through this adapter. Google also receives the technical network information needed to process a browser request.

Permission and the random browser identifier expire after 30 days; a session changes after 30 minutes of inactivity. If storage is unavailable, the choice lasts only for the current page. Withdrawal stops future collection and clears this browser's analytics identifiers; it does not delete information already received by Google.

Google processes analytics under its privacy policy. The GA4 property currently retains event-level data for 2 months and user-level data for 14 months, with the user retention period reset on new activity. These controls do not govern most aggregated standard reports. The 30-day browser expiration is not a promise that Google deletes event data after 30 days. Production activation remains subject to owner review of this disclosure and the property's retention setting.

Data And SDK Review

RapReprise uses app and backend technologies such as web app assets, Expo/React Native mobile technology, and Firebase boundaries where enabled. Final privacy disclosures must reflect the actual SDKs, services, and runtime behavior in the release build.

Apple App Privacy and Google Play Data Safety answers remain draft until owner/legal review, SDK/vendor confirmation, final release-build behavior, and final URL posture are complete.

Payments, Bookings, And Monetization

RapReprise does not currently enable payments, subscriptions, native billing, Stripe checkout, booking payments, wallet/coins, artist support/backing, payouts, sponsored ranking, hosted media monetization, or AI-data monetization.

Production booking writes and booking payments are not live in the current approved posture.

Deletion, Export, And Retention

The current W2 source requires recent authentication for deletion and export. A verified deletion request immediately disables normal access and hides public personal content, provides a cancellable 30-day waiting period, then deletes supported active-system personal data and Firebase Auth on or after Day 30.

Portable JSON exports disclose included categories and exclusions and use short-lived access-controlled delivery. Minimized security/deletion evidence is separated and retained for 12 months. Encrypted, access-restricted disaster-recovery backups may retain deleted personal data for at most 90 days after final deletion and no later than Day 120 from the original request; they are not used for ordinary operations or individual recovery, and completed deletions must be reapplied after a restore.

Users who cannot sign in may use support@rapreprise.com. Mailbox and backup-operator verification, public-launch operational readiness, physical backup expiry, and formal legal review remain launch dependencies.