Sonygram Privacy Policy

Effective as of 27 August 2025

Understanding This Policy
Your Power to Manage Your Personal Data
Information SONYGRAM Gathers About You
How and Why We Use Your Details
Where and With Whom Your Data Goes
How Long We Hold Your Information
Sending Your Data to Other Regions
Our Commitment to Protecting Your Data
How We Revise and Refresh This Policy

1. Understanding This Policy or Overview of This Policy

This Privacy Policy explains how we collect, use, and protect your personal information at SONYGRAM. In this document we’ll refer to it simply as the “Policy”.

It applies when you use:

All SONYGRAM streaming features as a user, including:

accessing SONYGRAM on my device
personalizing your experience through our features
the technical system that deliver our services
connecting your SONYGRAM account with other applications
both our free and premium service tires (each a “Service Option”)

Occasionally we may launch new features or services. Unless we say otherwise when they’re introduced, those will also be governed by the Policy.

This Policy is not:

the SONYGRAM Terms of Use- a separate legal agreement that explains the rules for using the SONYGRAM Service and your rights: or
privacy policies for other SONYGRAM product that maintain their own roles (for example, Anchor, Sound trap, Megaphone, or SONYGRAM Live

Other helpful resources and settings

Key details are here, but you can also check:
Privacy Center: A clear hub with summaries, guides, and short videos- including tailored advertising choices.
Account Privacy: Adjust how certain personal data is processed, including tailored advertising choices.
Notification Settings (Desktop & Mobile): Control features like Social and Explicit Content.

Under Social you can:

Start a Private Session
choose whether to share listening activity with followers
hide or show recently played artists on your public profile turn off messaging with other users (where available)
Under Explicit Content you can block or allow adult- content.

Cookies Policy: Information on how cookies are used and how to manage them. Cookies are small files stored on your device when you visit a website.

2. Your Power to Manage Your Personal Data

Many modern privacy regulations grant individuals specific powers over how their personal information is handled. These include the General Data Protection Regulation (GDPR).

Some of these rights apply only when SONYGRAM relies on a particular legal basis to process your data. Section 4, “How and Why We Use Your Details,” explains every legal basis we use and when we rely on each one.

The table below outlines:

the rights you have
when each right applies (including the required legal basis)
how you can exercise those rights

You may also explore our video guide on Your Privacy Controls.

It’s your right to.....		How?
Be informed	Know what personal data we collect and how we handle it. SONYGRAM keeps you informed.	We inform you: through this Policy through information shown while using SONYGRAM by replying to your inquiries
Access	Request access to your personal data stored by SONYGRAM.	To get a copy of your data: use “Download Your Data” on your Account Privacy page, or contact us You’ll receive the data required under GDPR Article 15.
Rectification	Ask us to correct or update inaccurate or incomplete data.	You can edit your User Data through Edit Profile or contact us for changes.
Erasure	Request deletion of specific personal data. Let’s suppose you can ask us to delete that we no longer needed for the purpose it was collected for that we process based on the legal basis if consent and you with draw your consent when you object(see section object below) and you object to direct marketing There are situations where SONYGRAM is unable to delete your data for example when it still necessary to purpose we collected it for SONYGRAM’ interest in using the data overrides your interest in having it deleted. For example, where we need the data to protect our services from fraud SONYGRAM has a legal obligation to keep the data or SONYGRAM needs the data to establish, exercise or defend legal claims. For example, if there’s an unsolved issue relating to your account	You may request deletion if: data is no longer needed processing is based on consent and you withdraw it to remove audio content from your profile select the relevant content and choose to remove it. For example you can remove playlists or remove a track from your playlist to request erasure of your other personal data from Sonygram, follow the steps on our support page. This data includes your User Data, Usage Data and other data listed in Section 3 “personal data we collect about you you can also contact us to request erasure
Restriction	Ask us to temporarily or permanently stop processing some or all of your data.	Request restriction by contacting us.
Object	Object to our processing of your personal data	You can object if: we process data based on legitimate interests we use your data for tailored advertising You may: adjust privacy controls within SONYGRAM contact us
Data Portability	Receive your data in digital form or ask us to transfer it to another provider. Not be subject to automated decision-making No decisions affecting you should be made solely by automated systems.	You may request portability when we process data based on: consent performance of a contract To request portability, follow the Access instructions. SONYGRAM does not use such automated decision-making or profiling that causes legal or significant effects.
Withdrawal of consent	Withdraw consent for data processed on the basis of consent	You may withdraw your consent by: adjusting SONYGRAM controls contacting us
Right to lodge a complaint	Contact a data protection authority if you have concerns.	You can contact: the Swedish Authority for Privacy Protection, or your local data protection authority

Tailored Advertising Controls Table

What is tailored advertising?

Tailored (interest-based) advertising means SONYGRAM uses information about your preferences to show ads that match your interests. Example: If partners know you enjoy automobiles, you may see more car-related ads.

Controlling Tailored Advertising

Control Area	How to Manage It?
SONYGRAM Tailored Ads	Manage your settings on your Account Privacy page under “Tailored Ads.”
Podcast-specific advertising	Some podcasts include ads inserted by the content provider. Use the link in the episode description to adjust ad preferences (managed by the hosting provider, which may not be SONYGRAM).
Even when opted out	You may still see general ads based on: your registration details your active listening activity (e.g., listening to a cooking show may trigger food appliance ads)

3. Information SONYGRAM Gather About you

These tables describe the categories of personal data that SONYGRAM collects from you.
You may also watch our video explaining how Personal Data works at SONYGRAM.

Collected when you create a SONYGRAM account or update your profile
User Data	Personal information required to set up and maintain your SONYGRAM account, enabling you to access and use the SONYGRAM Service. The exact information we gather depends on your Service Plan, how you create your account, your country, and whether you sign in using a third-party service. This may include: Profile name email address password phone number date of birth gender street address (see section below) country university/college (for SONYGRAM Student Plan) estimated or verified age from a third-party Age Check Some information is provided directly by you (e.g., during sign-up). Other details, such as country/region, may be collected from your device. For more information, see‘Your general (non-precise) location’under Usage Data.
Street Address Data	SONYGRAM may request your street address for reasons such as: verifying your eligibility for a Service Plan sending legally required notifications providing support billing and tax purposes delivering physical products or gifts upon your request Sometimes a third-party tool (e.g., Google Maps) may be used to validate your address.

Collected when you create a SONYGRAM account or update your profile

SONYGRAM may request your street address for reasons such as:

verifying your eligibility for a Service Plan

sending legally required notifications

providing support

billing and tax

purposes

delivering physical products or gifts upon your request

Sometimes a third-party tool (e.g., Google Maps) may be used to validate your address.

Collected through your use of the SONYGRAM Service
Usage Data	Personal data collected when you access or use the SONYGRAM Service. This includes several types of information, described in the subsections below Information about how you use SONYGRAM Examples include: your SONYGRAM Service Plan your actions within the SONYGRAM Service (with date/time), such as: search activity streaming history playlists you create your library activity browsing patterns account settings interactions with other SONYGRAM users your use of connected third-party services, devices, and applications inferred information about your age, interests, and preferences based on your usage content you submit during SONYGRAM promotions (e.g., contests) content you upload within the SONYGRAM Service (e.g., images, audio, text, descriptions, messages, titles, etc.) Your technical data Examples include: URL information cookie data and online identifiers device-related information, such as: cookie data device IDs type of network connection (wifi, 4G, LTE, Bluetooth) internet provider network strength browser type device language digital rights management data operating system SONYGRAM app version device/application discovery details, such as device name, identifiers, brand, and version connected devices such as: speakers on your wifi Bluetooth devices installed SONYGRAM partner apps Your general (non-precise) location Your approximate location (country, region, or state) based on your IP address, device language, or payment currency. This helps SONYGRAM to: meet regional content agreements show content and marketing relevant to your area Your device sensor data Motion-based or orientation-based sensor data if required for certain SONYGRAM features. This includes data about how you move or hold your device.

Collected through your use of the SONYGRAM Service

Examples include:

your SONYGRAM Service Plan
your actions within the SONYGRAM Service (with date/time), such as:

search activity
streaming history
playlists you create
your library activity
browsing patterns
account settings
interactions with other SONYGRAM users

your use of connected third-party services, devices, and applications
inferred information about your age, interests, and preferences based on your usage
content you submit during SONYGRAM promotions (e.g., contests)
content you upload within the SONYGRAM Service (e.g., images, audio, text, descriptions, messages, titles, etc.)

Your technical data

Examples include:

URL information
cookie data and online identifiers
device-related information, such as:

cookie data device IDs
type of network connection (wifi, 4G, LTE, Bluetooth)
internet provider
network strength
browser type
device language
digital rights management data
operating system
SONYGRAM app version

device/application discovery details, such as device name, identifiers, brand, and version
connected devices such as:

speakers on your wifi
Bluetooth devices
installed SONYGRAM partner apps

Your general (non-precise) location

Your approximate location (country, region, or state) based on your IP address, device language, or payment currency.

This helps SONYGRAM to:

meet regional content agreements
show content and marketing relevant to your area

Your device sensor data

Motion-based or orientation-based sensor data if required for certain SONYGRAM features. This includes data about how you move or hold your device.

Additional data you may choose to give us
Category	Description
Voice Data	If voice features are available in your region and you choose to use them, SONYGRAM collects voice recordings and transcripts of those recordings.
Message Data	If messaging features are available and you use them, SONYGRAM processes messages or other content you send directly to another user.
Age Check Data	If you use a third-party Age Check on SONYGRAM, the following may be collected: facial photo for estimating your age photos of your face and ID for verifying your age and identity All Age Check Data is deleted immediately after the verification.
Payment Purchase Data	If you make a purchase, subscribe to a paid plan, or start a trial, SONYGRAM processes payment details. These may include: name date of birth payment method type card type, expiry, and partial digits (never the full card number) ZIP/postal code mobile number purchase & payment history
Survey & Research Data	When you complete surveys or participate in research, SONYGRAM collects the information you provide.

Third-party sources we receive your data from
Category of third party	Description	Data categories received
Authentication partner	If you sign up or log into SONYGRAM using another service, that service shares your information with us to help create your account.	User Data
Connected applications, services, and device	When you connect your SONYGRAM account to a third-party app, device, or service, we may receive data from them. Examples include: social networks audio devices (speakers, headphones) smartwatches televisions mobile phones and tablets cars gaming consoles voice assistants We always ask for your permission before collecting data from certain sources.	User Data, Usage Data
Technical service partners	Technical partners provide data such as IP-based location mapping (country, region, city, state). This helps SONYGRAM offer its service, features, and content. We also work with security partners who help protect accounts.	User Data, Usage Data
Payment partners & merchants	If you pay through a third party (such as a telecom provider) or through invoicing, we may receive data related to billing. If we direct you to a merchant (e.g., an artist store or ticketing site), we may also receive purchase-related data to: process payments deliver your purchases calculate commissions analyse partnership performance understand your interests	Payment & Purchase Data
Advertising & marketing partners	Some marketing partners share inferences about your interests and preferences to help us deliver relevant ads.	Usage Data
Acquired companies	If SONYGRAM acquires a company, we may receive user data from that company to improve our services and offerings	User Data, Usage Data

Logged-out usage

If you download the SONYGRAM app and use it without signing in, we collect limited Usage Data to understand how you access the service and provide the correct experience for your region.If you later create a SONYGRAM account, this data may be combined with your account data.

4. How and Why We Use Your Details

The table below explains:

why SONYGRAM processes your personal data
the legal basis (justification) that allows us to process it
the categories of personal data used for each purpose (as described in Section 3)

You can also watch our video about Personal Data at Sonygram

In countries where Legitimate Interest is not recognized as a valid legal basis, SONYGRAM will rely on Contractual Necessity or Consent, depending on the requirement.

Purpose, Legal Basis & Personal Data Categories – SONYGRAM
Purpose of Processing your Personal Data	Legal Basis Allowing the Purpose	Categories of Personal Data Used
To provide the SONYGRAM Service according to our agreement with you, such as creating your account, personalizing your settings, and making the SONYGRAM app available on your device.	Performance of a Contract	User Data Street Address Data Usage Data Voice Data Message Data Payment & Purchase Data
To deliver additional parts of the SONYGRAM Service. For example allowing you to share SONYGRAM content links with external sites.	Legitimate Interest Our interests include ensuring the service remains functional, accessible, and appropriate for users.	User Data Street Address Data Usage Data Voice Data Message Data Payment & Purchase Data
To offer optional, voluntary features within the SONYGRAM Service. In such cases, we will clearly ask for your permission.	Consent	User Data Usage Data Survey & Research Data Payment & Purchase Data Age Check Data
To diagnose, troubleshoot, and resolve technical problems with the SONYGRAM Service.	Performance of a Contract	User Data Usage Data Voice Data Message Data
To review, evaluate, and develop new features, technologies, and improvements— including building and training machine-learning and algorithmic models that enhance safety and user experience.	Legitimate Interest Our interests include improving and developing new tools and experiences.	User Data Usage Data Voice Data Survey & Research Data
For marketing or advertising activities when the law requires SONYGRAM to obtain your consent (e.g., certain cookies or email marketing).	Consent	User Data Usage Data Survey & Research Data
For marketing, promotion, and advertising activities where the law does not require consent, such as showing promotional content based on your interests.	Legitimate Interest Our interests include using advertising to support free access to many SONYGRAM features.	User Data Usage Data Survey & Research Data
To comply with legal obligations that apply to SONYGRAM. When you upload, for example, your national ID or EU Law, SONYGRAM keeps your data for identity verification.	Compliance with Legal Obligations	User Data Street Address Data Usage Data Voice Data Message Data Payment & Purchase Data Survey & Research Data
To respond to requests from law enforcement agencies, courts, or other authorised third parties.	Compliance with Legal Obligations & Legitimate Interest Our interests include assisting authorities to prevent or investigate serious crime.	User Data Street Address Data Usage Data Voice Data Message Data Payment & Purchase Data Survey & Research Data
To meet contractual duties we have with third parties. Example: providing pseudonymized listening data to a SONYGRAM rights-holder under contract.	Legitimate Interest Our interests include maintaining relationships with artists and partners in the SONYGRAM Service.	User Data Usage Data Voice Data Payment & Purchase Data
To take appropriate action when reports of intellectual property violations or inappropriate content are received.	Legitimate Interest Our interests include protecting original content and rights.	User Data Usage Data Voice Data Message Data Payment & Purchase Data
To establish, exercise, or defend legal claims—such as providing information to lawyers in case of litigation.	Legitimate Interest Our interests include seeking legal advice and protecting SONYGRAM and its users.	User Data Street Address Data Usage Data Voice Data Message Data Payment & Purchase Data Survey & Research Data
To perform business planning, reporting, and forecasting. Example: reviewing aggregated user trends to plan new feature rollouts.	Legitimate Interest Our interest includes planning effectively and running the business successfully.	User Data Usage Data Payment & Purchase Data
To perform business planning, reporting, and forecasting.	Legitimate Interest	User Data Usage Data Payment & Purchase Data
To process your payments—for example, completing your purchase of a SONYGRAM subscription.	Performance of a Contract & Consent	User Data Payment & Purchase Data Street Address Data
To maintain the security of the SONYGRAM Service, including detecting and preventing fraud.	Legitimate Interest Our interests include protecting users and the service from fraud or illegal activity.	User Data Street Address Data Message Data Usage Data Payment & Purchase Data
To carry out research and surveys, such as collecting user feedback.	Legitimate Interest Our interests include understanding how users engage with SONYGRAM.	User Data Usage Data Voice Data Survey & Research Data
In situations where “Legitimate Interest” is not recognized as a lawful basis, we will rely on contractual necessity or consent.	Contractual Necessity or Consent	Depends on the feature or requirement.

In jurisdictions where legitimate interest is not recognized as a legal basis, we reply on contractual necessity or consent

5. Where and with Whom Your Data Goes

Publicly Available Information on SONYGRAM
Category	Details
Public Profile Information	Profile name Profile photo
Public Content	Public playlists Any content you upload (titles, descriptions, images)
Social Visibility	Who you follow Who follows you
External Sharing	You or another user may share your SONYGRAM profile, playlists, or posted content on third-party services (e.g., social media). These services may store a copy of the shared data.

Publicly Available Information on SONYGRAM
Categories of Recipients	Categories of Data You May Share	Reason for Sharing
Third-party apps, services & devices	User Data Usage Data	To connect your SONYGRAM account with external platforms (e.g., social apps, speakers, TVs, car systems, voice assistants). You can manage these connections under the “Apps” section in your account.
Support Community	User Data	To allow you to use the SONYGRAM Support Community. Your profile name and posted content will be visible to all Community users.
Other SONYGRAM Users	User Data Usage Data Voice Data Message Data	To allow sharing of your activity with followers (e.g., recently played artists, shared playlists, collaborative playlists).
Artists & Record Labels	User Data	To receive updates, promotions, and offers. You can withdraw consent at any time.

Information SONYGRAM May Share

A. Service-Related Sharing
Categories of Recipients	Categories of Data	Reason for Sharing
Service Providers	User Data Street Address Data Usage Data Voice Data Message Data Payment Data Survey & Research Data Age Check Data	To support SONYGRAM operations (customer service, infrastructure, system security, marketing assistance, etc.).
Payment Partners	User Data Payment & Purchase Data	To process transactions and prevent fraud.
Advertising Partners	User Data Usage Data	To deliver and measure relevant advertisements on SONYGRAM.
Marketing Partners	User Data Usage Data	To promote SONYGRAM via bundled offers, trials, and advertising across partner platforms. Partners may combine this data with their own to tailor marketing.
Hosting Platforms (Podcast Providers)	Usage Data	To deliver podcasts. Your IP address and related data are shared with podcast hosting services. Users should review the hosting platform’s privacy policy.
Academic Researchers	User Data Usage Data	For statistical or academic studies. Data is shared in pseudonymized form.
SONYGRAM Group Companies (including acquired companies)	User Data Street Address Data Usage Data Voice Data Message Data Payment Data Survey & Research Data	For internal operations, improving features, measuring ads, or understanding listening behavior.

B. Legal & Business-Related Sharing
Categories of Recipients	Categories of Data	Reason for Sharing
Law Enforcement / Authorities / Litigation Parties	User Data Street Address Data Usage Data Voice Data Message Data Payment Data Survey & Research Data	Shared when required by law, legal process, national security, criminal investigation, or to prevent harm.
Purchasers of SONYGRAM (Business Sale)	User Data Street Address Data	Shared if SONYGRAM is sold or merged so operations can continue.

6. How Long We Hold Your Information

SONYGRAM keeps your personal data only for as long as it is genuinely required. This includes providing you with the SONYGRAM Service and fulfilling SONYGRAM’s important operational and legal responsibilities, such as:

keeping the SONYGRAM platform running smoothly
making informed decisions to develop new features or services
complying with legal and regulatory requirements
resolving issues or disputes

Below are the main categories of how long we retain your data and the principles used to determine these periods:

I. Data kept until you remove it

You have the right to ask us to delete certain personal data. See the ‘Erasure’ in section 2 for details about when SONYGRAM can act on such requests.
You may also manually delete some data directly from the SONYGRAM Service—for example, changing or removing your profile photo. When users have the ability to update or remove their own information, SONYGRAM keeps that data only for as long as you choose, unless one of the exceptional reasons listed below applies.

II. Data that automatically expires after a set period

Certain types of data are only kept for a short and defined time. For example, personal information entered during search queries is usually removed after 90 days.

III. Data kept until your SONYGRAM account is deleted

Some data remains stored for the entire duration of your account. For example:

your SONYGRAM username
your main profile details
your listening and activity history (used to generate personalized playlists or recommendations like nostalgic mixes or seasonal lists)

Once your account is deleted, this category of data is either permanently removed or converted into a de-identified format.

IV. Data stored for longer periods for specific purposes

After you delete your account, certain data may still be retained for a limited time due to strict requirements such as:

legal or regulatory obligations
government directives asking us to preserve specific data
information needed for potential legal claims or investigations

In some cases, SONYGRAM may temporarily keep data removed from the platform to:

improve user safety
prevent harmful or abusive content
investigate potential violations of community rules

However, content that is illegal will be removed where the law requires it.

Age Check Data is deleted immediately after your age verification is completed.

7. Sending your Data to Other Regions

Due to the global reach of SONYGRAM, your personal data may be shared internationally with SONYGRAM group companies, subcontractors, and partners to provide the SONYGRAM Service. These parties may process data in countries where data protection laws are not as strong as those in the EU or your country of residence. As a result, you may not always have the same rights over your personal data.

When SONYGRAM transfers data internationally, we implement safeguards to:

Ensure the transfer complies with applicable law
Provide the same level of protection as your data receives in the EU

We rely on the following legal mechanisms to secure these transfers:

Standard Contractual Clauses (SCCs): These clauses require recipients to protect your data and provide EU-level rights. For instance, we use SCCs to transfer your data to hosting providers in the U.S. You can exercise your rights under SCCs by contacting us or the third party processing your data.
Adequacy Decisions: Personal data may be transferred to countries outside the European Economic Area that have data protection laws deemed adequate by the European Commission. Examples include transfers to the United Kingdom, Canada, Japan, South Korea, and Switzerland.

Additional measures may also be applied depending on the transfer, such as:

Technical safeguards like encryption and pseudonymisation
Policies to contest unlawful or excessive government requests for data

8. Our Commitment to Protecting Your Data

SONYGRAM is committed to securing your personal data. We implement appropriate technical and organizational measures to reduce the risk of unauthorized access and ensure proper handling of data.

Key safeguards include:

Pseudonymisation and encryption of sensitive data
Access controls and retention policies
Regular monitoring to prevent unauthorized use

To further protect your account, we recommend:

Using a strong, unique password for your SONYGRAM account
Not sharing your password with anyone
Restricting access to your devices and browsers
Logging out from shared devices after use

You can log out from all devices simultaneously using the “Sign out everywhere” option in your account settings.

Please note: anyone who accesses your account may view your personal data, preferences, and usage. Only share access with people you trust, as their use may affect recommendations and data included in downloads.

9. How We Revise and Refresh This Policy

SONYGRAM may update this Policy from time to time.

If material changes are made, we will provide clear notice, such as:

A prominent alert within the SONYGRAM Service
Email or device notifications

We encourage you to review this Policy periodically to stay informed about how your data is managed

10. Contact Information

For any questions or concerns about this Policy, you may contact our Data Protection Officer via:

Email: info@sonygram.com
Contact Us

SONYGRAM serves as the data controller for all personal data processed under this Policy.

Sonygram Privacy Policy

Effective as of 27 August 2025

1. Understanding This Policy or Overview of This Policy

It applies when you use:

This Policy is not:

Other helpful resources and settings

Under Social you can:

2. Your Power to Manage Your Personal Data

The table below outlines:

You may also explore our video guide on Your Privacy Controls.

Tailored Advertising Controls Table

What is tailored advertising?

Controlling Tailored Advertising

3. Information SONYGRAM Gather About you

SONYGRAM may request your street address for reasons such as:

Sometimes a third-party tool (e.g., Google Maps) may be used to validate your address.

Examples include:

Examples include:

Your general (non-precise) location

This helps SONYGRAM to:

Your device sensor data

Logged-out usage

4. How and Why We Use Your Details

The table below explains:

You can also watch our video about Personal Data at Sonygram

In countries where Legitimate Interest is not recognized as a valid legal basis, SONYGRAM will rely on Contractual Necessity or Consent, depending on the requirement.

To deliver additional parts of the SONYGRAM Service.

Legitimate Interest

Legitimate Interest

Legitimate Interest

Compliance with Legal Obligations & Legitimate Interest

Legitimate Interest

Legitimate Interest

Legitimate Interest

Legitimate Interest

Legitimate Interest

Legitimate Interest

In jurisdictions where legitimate interest is not recognized as a legal basis, we reply on contractual necessity or consent

5. Where and with Whom Your Data Goes

Information SONYGRAM May Share

6. How Long We Hold Your Information

SONYGRAM keeps your personal data only for as long as it is genuinely required. This includes providing you with the SONYGRAM Service and fulfilling SONYGRAM’s important operational and legal responsibilities, such as:

I. Data kept until you remove it

II. Data that automatically expires after a set period

III. Data kept until your SONYGRAM account is deleted

IV. Data stored for longer periods for specific purposes

7. Sending your Data to Other Regions

8. Our Commitment to Protecting Your Data

9. How We Revise and Refresh This Policy

10. Contact Information