HARMONIA
Back

Privacy Policy

Last updated: August 4, 2026

Harmonia is an early-access, invite-only application that uses artificial intelligence to analyze your Spotify library and build playlists on your behalf. This policy explains what data we collect, why, and how you can control it.

Harmonia is currently a small, independently-run project in limited early access (waitlist-gated). This policy will be revised as the product grows.

1. Information we collect

From Spotify, with your permission (OAuth):

  • Your Spotify account ID, display name, and email address
  • Your saved ("Liked") tracks and the playlists you own or follow
  • Metadata about your tracks and playlists: track/artist/album names, Spotify IDs, release dates, duration, explicit flag, popularity, and genre tags Spotify associates with your artists

From you directly:

  • The email address you submit to join the waitlist

Generated by Harmonia:

  • AI-derived analysis of your tracks — mood, energy, themes, and similar descriptive tags, produced by sending track metadata (and, where available, lyrics) to a third-party AI provider
  • Numerical embeddings used to group your tracks into clusters for playlist generation
  • Playlists Harmonia creates, and the tracks it adds to or removes from them
  • Lyrics text, fetched from a third-party public lyrics database when available

We do not collect payment information (Harmonia does not currently charge for access), location data, or device/browsing data beyond what's needed to keep you signed in.

2. How we use your information

  • To authenticate you and keep your session signed in
  • To read your Spotify library and generate AI-organized playlists
  • To export playlists Harmonia creates back to your Spotify account, if you choose to export them
  • To send you account-related email: waitlist confirmation, approval notice, and updates about playlists Harmonia has created or changed
  • To diagnose bugs and keep the service running correctly

We do not sell your data, use it for advertising, or share it with anyone except the service providers listed below, and only as needed to operate Harmonia.

3. Third-party services we use

Harmonia relies on the following third parties to operate. Each processes a limited slice of your data, strictly to perform its function:

Service Purpose
Spotify Source of your library data; destination when you export a playlist
An AI inference provider Classifies track mood/energy/themes from metadata and lyrics
An AI embeddings provider Generates the numerical vectors used to cluster your tracks
LRCLib Public, open lyrics database — queried by track/artist/title, no account data shared
Resend Delivers transactional email (waitlist, approval, notifications)
Neon Hosts our Postgres database
Vercel Hosts the application

We do not permit any of these providers to use your data to train their own models beyond what their standard processing terms require, and we do not share your Spotify data with any provider beyond what's needed to generate the specific analysis you're using.

4. Data retention and deletion

We retain your data for as long as your account is active, so Harmonia can keep your library and playlists in sync.

To request deletion of your account and all associated data (library cache, generated playlists, AI analysis, lyrics), email us at the address below. We'll confirm once your data has been removed. Self-service account deletion isn't available yet — we're a small early-access project and this is manual for now, but we'll delete promptly on request.

Revoking Harmonia's access from your Spotify account settings stops us from reading new data, but does not by itself delete data already stored — email us to have it removed.

5. Cookies and sessions

Harmonia uses a single session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

6. Data security

We use industry-standard practices to protect your data (encrypted connections, access-controlled infrastructure) but no system is perfectly secure. If we become aware of a data breach affecting your information, we will notify you.

7. Children's privacy

Harmonia is not directed at children under 16, and we do not knowingly collect data from them.

8. Changes to this policy

We may update this policy as Harmonia evolves. Material changes will be reflected in the "Last updated" date above, and where appropriate, communicated by email.

9. Contact

Questions about this policy, or data deletion requests, can be sent to malekgarahellalbus@gmail.com.