Privacy Policy

Effective date: 23 June 2026

This Privacy Policy explains how Uniso Pty Ltd (ABN 76 697 814 341), trading as Uniso (“Uniso”, “we”, “us”), collects, uses, and protects your information when you use Uniso (our music catalogue and player app) and Uniso Share (the public viewer where shared music can be played).

By using Uniso, you agree to the practices described in this policy.

1. Information we collect

Account information

When you sign in to Studio with Google, we receive basic profile information from your Google account: your email address, display name, and profile photo. We use this to create and secure your account.

Content you create and upload

We store the music and related content you add to Studio, including audio files and their metadata (such as title, artist, duration, format, and artwork), along with the projects, tracklists, and share links you create.

Sharing information

When you create a share, we store its settings (such as whether it is public, password protected, or set to expire) and basic activity such as view counts and the time a share was last viewed.

Information from people who view shares

Uniso Share lets anyone with a link listen to shared music without creating an account. Viewers are signed in anonymously and are not asked for an email address. If a viewer leaves a note on a track, we store the note text, any timecode, the display name they choose, and the anonymous identifier associated with it.

Payment information

Payments are processed by Stripe. We do not collect or store your full card details. We retain identifiers needed to manage your subscription, such as your Stripe customer and subscription IDs and your plan status.

Connected services

If you choose to connect Dropbox to sync audio, we store the access token and file references needed to provide that feature. You can disconnect Dropbox at any time.

Technical information

To keep you signed in and to operate the service, we store authentication and session information in your browser’s local storage. We also use Google reCAPTCHA to help protect against abuse.

2. How we use your information

• To provide, operate, and maintain Uniso and Uniso Share.
• To authenticate you and keep your account secure.
• To store, process, stream, and display the content you create and share.
• To process payments and manage subscriptions and storage.
• To send you transactional emails (for example, about your trial or subscription).
• To detect, prevent, and respond to fraud, abuse, and security issues.

3. How we share your information

We do not sell your personal information, and we do not use third-party advertising or analytics platforms. We share information only with service providers who help us run Uniso, including:

• Google Firebase — authentication, database, and hosting.
• Cloudflare R2 — private storage for audio files.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Dropbox — file syncing, if you choose to connect it.
• Google reCAPTCHA — abuse prevention.

We may also disclose information if required by law or to protect the rights, safety, and security of Uniso and its users.

4. Public sharing

When you create a share, anyone with the link can view and play the content, subject to any password or expiry you set. Notes left by viewers may be visible to you and, depending on your settings, to other viewers. Please only share content you have the right to share, and remember that you can revoke or delete a share at any time.

5. Cookies and tracking

We use your browser’s storage to keep you signed in and to operate the service, and we use Google reCAPTCHA for security. We do not use third-party tracking or advertising cookies, and we do not use analytics platforms that profile you. The only usage data we record is basic share view counts.

6. How we store and protect your information

Your audio files are kept in private storage and are served through short-lived, signed links rather than being publicly accessible. Access to your account and content requires authentication, and passwords you set on shares are stored in hashed form. While no online service can guarantee perfect security, we take reasonable steps to protect your information.

7. How long we keep your information

We keep your information for as long as your account is active. If your trial or licence lapses, your account becomes read-only and your content is retained unless you ask us to delete it. If you would like your account and content deleted, contact us at the address below and we will action your request.

8. Your choices

You can:

• Access and update the information in your account.
• Revoke or delete shares you have created.
• Disconnect Dropbox at any time.
• Request a copy of your data, or ask us to correct or delete it, by contacting us.

We handle personal information consistently with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

9. Children

Uniso is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.

10. Your rights in the European Economic Area, UK, and Switzerland

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent UK and Swiss laws apply to our handling of your personal data. For the purposes of those laws, the data controller is Uniso Pty Ltd (ABN 76 697 814 341), trading as Uniso. You can contact us about data protection at support@uniso.app.

Legal bases for processing

We process your personal data on the following legal bases:

• Performance of a contract — to create and secure your account, store and stream the content you create, operate shares, and process payments and subscriptions.
• Legitimate interests — to keep the service secure, prevent and respond to fraud and abuse, maintain basic share view counts, and communicate with you about the service. We balance these interests against your rights.
• Consent — for optional features you choose to enable, such as connecting Dropbox. You can withdraw consent at any time without affecting processing carried out before withdrawal.
• Legal obligation — to comply with applicable laws, such as tax and accounting requirements, and to respond to lawful requests.

Your rights

Subject to the conditions in applicable law, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we process your data;
• object to processing based on our legitimate interests;
• receive your data in a portable format and have it transmitted to another controller;
• withdraw consent where processing is based on consent.

We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. To exercise any of these rights, contact us at the address above. You also have the right to lodge a complaint with your local supervisory authority — in the EEA, your national data protection authority; in the UK, the Information Commissioner’s Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

International data transfers

We are based in Australia, and some of our service providers (including those listed in section 3) process data in the United States and other countries. Where we transfer personal data out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses together with the UK International Data Transfer Addendum and the Swiss addendum where applicable, or a provider’s own approved transfer mechanism. You may request a copy of the relevant safeguards by contacting us.

EU and UK representative

To confirm. If Uniso is required to appoint a representative in the EU or UK under Article 27 of the GDPR, insert their name and contact details here: [EU/UK REPRESENTATIVE]. Remove this section if a representative is not required.

11. Your California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), gives you specific rights regarding your personal information. This section uses the terms defined in the CCPA.

Personal information we collect

In the preceding 12 months, we have collected the following categories of personal information, as described in more detail in sections 1 and 2:

• Identifiers — such as your name, email address, account and customer identifiers, and the anonymous identifiers assigned to viewers of shares.
• Commercial information — such as your subscription plan, storage purchases, and transaction history.
• Internet or other electronic network activity — such as authentication and session data and basic share view counts.
• Audio, electronic, or visual information — the audio files, artwork, and related content you upload.
• Financial information (limited) — identifiers needed to manage your subscription through Stripe. We do not collect or store your full card number.

We collect this information directly from you and, if you choose, from services you connect such as Google sign-in and Dropbox. We use and disclose it for the business purposes described in sections 2 and 3, sharing it only with the service providers listed in section 3.

Sale and sharing of personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in the CCPA. We have not done so in the preceding 12 months, including with respect to the personal information of consumers under 16. Because we do not sell or share personal information, we do not offer a “Do Not Sell or Share My Personal Information” link.

Sensitive personal information

We do not use or disclose sensitive personal information for purposes that would give you a right to limit its use under the CCPA.

Your California rights

• Right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the parties with whom we share it.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information (not applicable, as we do not sell or share).
• Right to limit the use of sensitive personal information (not applicable, as described above).
• Right to non-discrimination for exercising any of your rights.

To exercise these rights, contact us at support@uniso.app. We will verify your request, usually by confirming control of the email address associated with your account. You may use an authorized agent to submit a request on your behalf, provided they give us proof of authorization. Under California’s “Shine the Light” law (Civil Code § 1798.83), we confirm that we do not disclose personal information to third parties for their own direct marketing purposes.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the effective date above. Significant changes may be communicated to you directly.

13. Contact us

If you have any questions about this policy or your information, contact us at support@uniso.app.