Privacy
Last updated: June 2026
Data controller
The controller of the personal data processed through Karaogle (www.karaogle.com, hereinafter the 'Service') is Anas Assadek El Ouamari, based in Barcelona, Spain. For any privacy-related matter you can contact us at support@karaogle.com. Karaogle is a free online game in which two people sing the same song in a live 1v1 video battle and an automatic system scores the performance.
Scope and applicable law
This Privacy Policy is adapted to the applicable European and Spanish data-protection law, in particular Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD), and Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE). We apply the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
Data we process
If you create an account, we process your username, your email address and an encrypted password. If you play as a guest, we process the display name and avatar you choose and an anonymous identifier stored on your device. In all cases we process your match results (rating, wins, losses and similar statistics) to power the ranking, and any reports or blocks you submit. We do not process special categories of data within the meaning of Article 9 GDPR.
Camera and microphone
To play, you grant access to your camera and microphone. During a battle your live video and audio are sent directly to your opponent through a peer-to-peer connection (WebRTC); that live stream is not recorded or stored by us. To score your turn, the short clip you sing is sent to our server and processed momentarily to compute your score. You are responsible for what you show and say on camera.
Third-party AI (OpenAI / Whisper)
To score your singing, the audio of your turn is transmitted to OpenAI (an AI provider based in the United States) and transcribed with its Whisper model. Only the audio of your turn is sent for this purpose; we do NOT send your name, email, account identifiers or any other personal data linked to you. The audio is used solely to compute your score, is not published, and in accordance with OpenAI's API policy is not used to train their models. OpenAI Privacy Policy: https://openai.com/policies/privacy-policy. Before your first battle, the app asks for your explicit consent to this processing.
Other third parties and processors
The Service relies on the following providers, who act as processors or independent controllers under their own policies: Supabase (authentication, database and realtime infrastructure), Vercel (web hosting) and YouTube (playback of the backing music). When you interact with content served by these providers, their own terms and privacy policies also apply.
Legal basis and purposes
The legal basis for processing is your consent and the performance of the service you request. We process your data to: provide the game and match you with an opponent, run the live battle and score it, maintain your account, rating and ranking, keep the Service safe (handling reports and blocks), and operate, secure and improve the Service. You may withdraw your consent at any time; it is as easy to withdraw it as to give it.
Data retention
Personal data is kept only for the time necessary for the purposes described above and, in any case, until you request its deletion. Guest data and session data are kept only for as long as needed to run your session. When you delete your account, your associated personal data is deleted.
Security
We adopt the technical and organisational measures appropriate to the risk in order to safeguard your personal data and prevent its loss, alteration or unauthorised access. Connections are protected with encryption (TLS/SSL). No system is completely immune, so should a personal-data breach occur that is likely to result in a high risk to your rights, we will notify you without undue delay as required by the GDPR.
International data transfers
Some processing involves a transfer of data to the United States, in particular when the audio of your turn is transcribed by OpenAI. These providers adhere to internationally recognised data-protection frameworks for such transfers.
Your rights
You may exercise the rights of access, rectification, erasure ('right to be forgotten'), restriction of processing, data portability, objection, and the right not to be subject to decisions based solely on automated processing. You can exercise these rights, or withdraw your consent, by writing to support@karaogle.com with the reference 'GDPR-karaogle' and proof of your identity. You can also delete your account at any time from the app's Settings.
Minors
Karaogle is not intended for children. You must be at least 16 years old to use the Service. By using Karaogle you confirm that you meet this requirement. If we become aware that we have processed the data of a person under the required age without appropriate consent, we will delete it.
Acceptance and changes
Using the Service implies acceptance of this Privacy Policy. We may update it to reflect legal, technical or service changes; the current version is always available on this page, so we recommend reviewing it periodically. If you believe your data is not being handled correctly, you have the right to lodge a complaint with a supervisory authority — in Spain, the Spanish Data Protection Agency (www.aepd.es).
Match recordings (VIP)
VIP players can record their matches. The recording includes the video and audio of both players (you and your opponent) and the lyrics, and is deleted after it is downloaded. By signing up and playing live matches you accept that the other player may record them under these conditions; if you do not want to be recorded, do not play live matches.
Contact
For any question about this Privacy Policy or to exercise your rights, contact: Anas Assadek El Ouamari — Barcelona, Spain — support@karaogle.com.