This Privacy Policy describes how SUMO (“we”, “us” or “our”) collects, uses, discloses and protects personal data in connection with the SUMO mobile application and related services available at https://sumo-fm.yuracode.com (together, the “Service”). Please read it carefully. By using the Service, you acknowledge the practices described here.
The controller responsible for your personal data is SUMO, the provider of SUMO. You can reach our privacy contact at yunusemre.caliskan@icloud.com for any question or request relating to this Policy.
This Policy applies to personal data we process when you use the SUMO app, visit our public pages, or otherwise interact with the Service. It does not apply to third-party services that have their own privacy policies (for example, the Apple App Store or Google Play), which govern your relationship with those parties.
SUMO does not require your name, email address or telephone number. When you first
open the app, we create an anonymous account identified by a randomly generated
device code. On Android this code is derived from the device's Android ID so your
account can be recovered after reinstalling the app; on iOS it is a random value stored in
the system keychain. The device code functions as a private key to your account —
anyone in possession of it can access or delete the associated account. You may optionally
set a public display name and @handle.
We collect the following categories of data, in each case limited to what is necessary to operate the Service:
| Category | Examples | Purpose |
|---|---|---|
| Account data | Device code; optional display name and @handle (public); app language and audio-quality preferences | Create, operate and recover your account; display your public profile |
| Content you create | Text prompts, generated songs, lyrics, cover art, genre/styles, and the instrumental flag | Generate and store your music; songs are public by default so other users may listen |
| Activity data | Plays/listens with timestamps, likes, follows, playlists, and downloads | Enable playback and offline use; produce trends, radio stations and personalized recommendations |
| Notification data | Push token (via Firebase) and device platform; your activity and marketing notification preferences | Deliver notifications you have opted into |
| Transaction data | Subscription status (active, expired or trial), the product identifier, and purchase/billing events from the app stores and RevenueCat | Provide and manage your subscription |
| Technical data | IP address (processed transiently), app version, and crash/diagnostic information | Security, fraud and abuse prevention, rate-limiting, and service reliability |
We do not collect your contacts, photo library, precise geolocation, or microphone or camera input, and we do not store payment-card details — all payments are processed by Apple or Google.
We use personal data to: (a) provide, maintain and improve the Service; (b) create and recover your account; (c) generate, store and play your music and operate social and discovery features; (d) process subscriptions and prevent fraud or abuse; (e) send notifications you have enabled; (f) diagnose problems and ensure security; and (g) comply with legal obligations.
When you create a song, your prompt and, where applicable, the lyrics and style selections are transmitted to our AI generation provider, MusicAPI.ai, which produces the audio and returns it to us for storage and playback. You should not include personal, confidential or sensitive information in your prompts. AI output is generated automatically and is subject to the disclaimers in our Terms of Use.
Where the EU or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service and your account); legitimate interests (to secure the Service, prevent abuse, and improve and recommend content), balanced against your rights; consent (for push and marketing notifications, which you may withdraw at any time); and compliance with legal obligations.
Our service providers may process data in countries other than your own, including outside the European Economic Area. Where required, such transfers are protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
We retain personal data for as long as your account exists and as needed to provide the Service. When you delete your account, we delete the associated data as described in the next section. We may retain limited records where necessary to comply with legal, accounting, tax or fraud-prevention obligations (for example, records of processed store purchases), for the period required by applicable law.
You may permanently delete your account and associated data at any time, either in the app (Profile → Account → Delete account) or via our public page at https://sumo-fm.yuracode.com/account-deletion using your device code. Deletion removes your profile, songs, lyrics, cover art, likes, playlists, downloads, listening history and social connections from our servers and is irreversible, subject to the limited retention described above.
Depending on your location, you may have the right to access, correct, delete, port, or restrict or object to the processing of your personal data, and to withdraw consent. Because accounts are anonymous, we locate your data using your device code.
To exercise any right, contact us at yunusemre.caliskan@icloud.com. We will respond within the timeframe required by applicable law.
We protect data in transit using TLS/HTTPS, store account credentials securely on your device, restrict internal access, and apply reasonable technical and organizational measures. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
SUMO is not directed to children under 13 years of age (or the higher minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us and we will delete it.
The Service integrates third-party services (such as the app stores and our payment and generation providers) and may contain links to third-party content. Their privacy practices are governed by their own policies, and we are not responsible for them.
We may update this Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.
If you have questions or requests regarding this Policy or your personal data, contact:
SUMO
Email: yunusemre.caliskan@icloud.com