Privacy policy
1. Identity details
Rhyme Helper (“we”, “us” or “our”) operates the rhymehelper.store website and the Rhyme Helper desktop application. For any privacy-related questions, data requests or concerns, you can contact our Data Protection Officer (DPO) at support@rhymehelper.store.
2. Data we collect
We collect and process the following categories of personal data:
- Contact data: your email address when you register an account or make a purchase.
- License data: license keys generated and linked to your account upon purchase.
- Payment data: handled by Lemon Squeezy when you buy Pro or subscribe to Cloud Sync. We receive your email, what you bought and your subscription status, never your full card details.
- Song data (Cloud Sync only): if you subscribe to Cloud Sync, the songs in your cloud library (titles, lyrics, tempo and key) are stored on our servers so they can be synced to your other computers. With each change we also store when it was made and the name of the computer it was made on (for example “Studio-PC”), so the app can show where a song was last edited. Without Cloud Sync, your songs stay on your own computer and we never receive them.
- Usage data (only with your consent): how you use our website, such as the pages you visit, the site you came from, your browser and device type, and an approximate location, collected with Google Analytics. See section 7.
3. How we use data, and on what legal grounds
We process your personal data for specific purposes under the following legal bases defined by the GDPR:
- Contractual necessity: processing your email and license key to deliver the software, authenticate your Pro access and provide customer support, and storing and syncing your songs when you subscribe to Cloud Sync.
- Consent: using Google Analytics on our website to understand how visitors find and use it. You can withdraw your consent at any time.
- Legal obligation: retaining necessary transaction records to comply with tax and accounting laws.
4. Sharing and transfers
We do not sell your personal data. We share data only with trusted third-party processors necessary to provide our services:
- Lemon Squeezy: acts as our Merchant of Record. They process your payments and handle billing information. Data sent to Lemon Squeezy is subject to their privacy policy.
- Supabase: provides our backend database and authentication infrastructure. Account data, and your synced songs if you use Cloud Sync, are stored securely on their servers.
- Vercel: hosts our website.
- Google (Google Analytics): measures website visits, only if you allow it.
Some of these processors may transfer data outside the European Economic Area (EEA). When this happens, we make sure they rely on approved transfer mechanisms, such as Standard Contractual Clauses (SCCs) or Data Privacy Frameworks.
5. How long we keep data
We store your data only for as long as necessary to fulfil the purposes above:
- Account data (email, license): kept for the lifetime of your account, so you keep access to the software you bought. If you ask us to delete your account, this data is removed within 30 days.
- Synced songs (Cloud Sync): kept for as long as you have an account, so you can get them back on a new computer, also after your subscription ends. A song you delete goes to Recently deleted and is removed for good after 30 days, or right away if you choose Delete forever. When you delete your account, your synced songs are deleted within 30 days.
- Transaction records: kept for up to 7 years, as required by tax regulations.
- Analytics data: deleted after 14 months.
6. Your rights under the GDPR
You have the right to access, correct or erase your personal data. You may also object to processing or ask for data portability. To use any of these rights, contact us at support@rhymehelper.store. You can also delete your account yourself under Account settings.
7. Analytics and cookies
Our website uses Google Analytics 4 only after you click Allow in the cookie message. Google Analytics then places cookies (starting with _ga) to recognise returning visitors and measures which pages are visited. Google does not store full IP addresses in Google Analytics 4. We use this data only to improve our website and do not combine it with your account.
If you choose No thanks, Google Analytics is not loaded and no analytics cookies are set. You can change your choice at any time with Cookie settings at the bottom of every page; if you withdraw consent, we stop measuring and remove the analytics cookies. Analytics data is kept for 14 months.
We also use strictly necessary storage in your browser, for example to keep you logged in and to remember your cookie choice. This does not need consent.