Privacy Policy

Effective date: April 4, 2026

Koconut Karaoke ("we", "us", "our") is operated by Frank Betz. This policy explains what data we collect, why, and how we protect it.

1. What We Collect

Account information — email address and password (hashed, never stored in plain text) when you sign up.
Playlists and songs — YouTube video URLs and titles you add to your playlists.
Avatar settings — your chosen animal type and color configuration.
Audio recordings — voice recordings you make using the "Sing Along" feature. Recordings are only created when you explicitly start singing and are stored on our servers.
Performance data — amplitude/timing data from your singing sessions, used for avatar lip-sync replay.
Language preference — your selected app language (English, Thai, or Korean).
Usage data — standard server logs (IP address, browser type, timestamps) for security and debugging.

2. How We Use Your Data

To provide and operate the karaoke app (playlists, playback, casting, sharing).
To store and replay your singing performances ("My Song").
To display your avatar and performances in shared catalogs (if you choose to share).
To send password reset emails when requested.
To maintain security and prevent abuse.

We do not sell your data. We do not serve ads. We do not use your data for AI training.

3. Audio Recordings

Voice recordings are created only when you use the "Sing Along" feature. You can delete your recording at any time from the "My Song" page. When you delete a recording, the audio data is permanently removed from our servers.

Recordings may be shared publicly via the Performance Catalog if you choose to share. You can remove a shared recording at any time.

4. Data Storage

Your data is stored on servers hosted by Railway (backend and database). We use industry-standard security practices including encrypted connections (HTTPS), hashed passwords, and secure authentication tokens.

5. Third-Party Services

YouTube — videos are embedded via the YouTube IFrame API. YouTube's own privacy policy applies to video playback. We do not access your YouTube account.
Resend — used to send password reset emails. Only your email address is shared with Resend for this purpose.
GitHub Pages — hosts this landing page (koconutkaraoke.com).

6. Cookies

We use a secure, HTTP-only cookie to maintain your login session (refresh token). We do not use tracking cookies or third-party analytics cookies.

7. Your Rights

Access — you can view all your data within the app (playlists, songs, avatar, recording).
Delete — you can delete your playlists, songs, and recordings at any time. To delete your entire account, contact us.
Export — contact us to request a copy of your data.

8. Children

Koconut Karaoke is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us.

9. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated effective date.

10. Contact

For privacy questions or data requests, email: frank@koconutkaraoke.com