Privacy Notice

This notice explains how Soup uses personal data. Soup is run from the UK and can be contacted at miles@soup.audio.

What we collect

We collect the information needed to run a small music community: account email; profile name, handle, biography, links and avatar; uploaded tracks, artwork, metadata, credits and collaborations; comments, follows, private Saves, invite use, reports, appeals and copyright submissions; listening and product-interaction activity; and basic device, app and request information used for notifications, security, analytics and abuse prevention. Optional first-party analytics are controlled in Settings. We do not derive precise location or collect contacts, health data, payment-card or bank-account details.

How we use it

We use this data to provide Soup, keep accounts working, moderate abuse, limit spam, understand how the community is growing when analytics are enabled, investigate bugs, improve reliability, send requested notifications, and contact you about important account or service updates. Soup may send a small number of onboarding emails to help new account holders use the service, with an unsubscribe link included. Occasional broader Soup updates are opt-in and can be turned off in Settings. We do not sell user data, use third-party advertising or track people across other companies' apps and websites.

What is public

Public activity on Soup is designed to be visible. Profiles, tracks, comments, follows, accepted collaborations and credits may be shown to other people using the service. Saves are private. Reports, appeals, copyright submissions, account controls and unpublished drafts are not public. Do not upload or post public material that you want to keep private.

Where it is stored

Soup uses service providers to operate the app: Supabase and Vercel for authentication, hosting, storage and delivery; Apple for Sign in with Apple, StoreKit and push notifications; Google when you choose Google sign-in; Stripe for optional support payments made on the website; and an email-delivery provider for account, onboarding and opted-in update messages. They process data only as needed to provide those services. StoreKit payments are handled by Apple and web payments are handled by Stripe. Soup does not receive or store payment-card or bank-account details. For web support, Soup stores the Stripe customer, checkout and subscription identifiers, payment status, amount and currency needed to confirm payments, provide subscription management and prevent duplicate processing.

On-device storage, cookies and permissions

Soup uses secure device storage, essential cookies and local preferences to keep you signed in, remember feed and appearance preferences, preserve playback and upload drafts, and keep the service working reliably. Search history and recent searches are kept only on the device. The iPhone app asks for Photos, Camera or notification access only when the related feature needs it, and the relevant system permission can be changed in iOS Settings. Soup does not use third-party advertising cookies. A campaign source may be stored locally for a limited time to understand which links lead to signups.

How long we keep it

Account and profile data is normally kept while your account exists. Public material remains visible until it is deleted, replaced or moderated. Account deletion has a 14-day recovery period before permanent deletion. Soup may retain a minimal anonymous comment placeholder where needed to preserve another person's reply, and limited moderation, fraud, security, copyright or legal evidence where there is a lawful reason. Security and rate-limit records are kept only as long as needed to protect the service and investigate abuse.

Your choices and rights

In Soup Settings you can control optional analytics and Soup update emails, review blocked accounts and moderation decisions, export your account data, or schedule account deletion. Notification permission is controlled in iOS Settings, and email messages include the applicable unsubscribe control. You can also ask to access or correct information, object to certain uses or restrict processing where the law allows by emailing miles@soup.audio. If you are unhappy with how your data is handled, you can complain to the UK Information Commissioner's Office. Bugs can be reported to bugs@soup.audio.