Privacy policy

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) · last updated: October 2026

Translation provided for convenience: in case of any discrepancy, the Italian version prevails.

Data controller

The data controller is GEITEC (“we”). For any request concerning personal data, you can contact us through the contact form.

What data we process

• Account data: email, display name and password (stored only as a hash, never in plain text).
• Optional profile: instruments, music genres, location, bio and avatar, if you choose to provide them.
• Contact form: name, email and the content of the message you send us.
• Session content: room chat messages and their attachments, retained for the period set by the room's creator (public room chats are deleted when the last participant leaves).
• Automatic chat translation: the reader can turn it on; chat messages (rooms, friend groups and private messages) written in another language then reach them translated into theirs by an artificial intelligence model: a model running on our own servers or, when we enable it, Anthropic’s Claude service (see “Recipients and transfers”), which receives only the text of the message and the languages, without the writer’s name or any other account data. Translations are kept together with the message and deleted with it.
• Interpreter channel (TALK): while you hold TALK your voice is recorded and sent to our servers, where a speech recognition model transcribes it; the text becomes a message in the room chat, kept and translated like the others. The recording and its translation read by a synthetic voice, also created on our servers, stay in memory for at most 10 minutes so that the room’s participants can listen to them, then they are deleted: they are never saved to disk or sent to external services.
• Technical data: IP address recorded at sign-in and when the app is downloaded, start and end times of the app's connections to the service, room participation history (date, time and duration), and the minimal logs needed for operation, security and abuse prevention (e.g. anti-spam limits).

Jam audio and video travel in real time between participants and are neither recorded nor stored on our servers, apart from the phrases said with TALK for the few minutes described above.

Purposes and legal bases

• Provision of the service (account creation, jams, friends, chat, automatic translation and interpreter channel): performance of a contract, Art. 6(1)(b) GDPR.
• Replying to requests sent through the contact form: consent, Art. 6(1)(a) GDPR.
• Security and abuse prevention: legitimate interest, Art. 6(1)(f) GDPR.

No data is used for marketing purposes, transferred or sold to third parties, or subjected to profiling or automated decision-making.

Retention

• Account and profile data: for as long as the account remains active; they are removed when the account is deleted.
• Room chats: according to the retention period set by the room's creator.
• Contact form messages: the time needed to handle the request.
• Sign-in, connection and download logs (date, time, IP address): up to 12 months, then automatically deleted.
• Room participation history: up to 12 months, then automatically deleted.
• Interpreter channel recordings and synthetic voices: at most 10 minutes, in memory only.
• Texts sent to the Claude service for translation: deleted by Anthropic within 30 days, except those its safety systems flag as violations of its usage policies.
• Other technical logs: for the short period needed for security and diagnostics.

Recipients and transfers

Data is processed on infrastructure managed directly by us within the European Union, and we do not use third-party services that receive your browsing data (the site’s fonts, for example, are served from our own servers).

The only exception is automatic chat translation when we entrust it to the Claude service of Anthropic (Anthropic Ireland Limited and Anthropic PBC, United States), which acts as our data processor (Art. 28 GDPR) under its data processing agreement. Anthropic receives only the text of the messages to translate and the languages, does not use it to train its models and deletes it within 30 days, except content its safety systems flag as violations of its usage policies, which is kept longer. Processing may take place in the United States: the transfer is governed by the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).

Your rights

Under Articles 15–22 GDPR you may at any time request access to, rectification, erasure, restriction or portability of your data, or object to its processing, by contacting us through the contact form. If you believe the processing infringes the law, you may lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Updates

This policy may be updated; the current version is always published on this page. For cookies and similar technologies, see the cookie policy.