Privacy.

Privacy Policy – Juqed Go (iPhone & iPad)

As of: 10 July 2026 · This policy applies to the iOS and iPadOS app Juqed Go. It is intentionally written separately because the technical processing differs from Juqed (Mac).

1. Controller

The controller within the meaning of the GDPR for the processing of personal data within Juqed Go is the operator named in the Legal Notice.

2. Principle: hosted service, no local library

Juqed Go is an iOS / iPadOS application that uses Apple Music via Apple's official MusicKit framework. Unlike Juqed (Mac), Juqed Go does not process a local music library; playback streams directly from the Apple Music catalog. To allow host and guests to share an event across different networks (Wi-Fi, mobile data, mixed), the relay runs through a server in Germany operated by the developer (Hetzner Online GmbH, see Section 4).

3. What data is processed?

On the host device (iPhone / iPad) — by the app itself:

• Apple Music song identifiers (MusicItemID) of tracks suggested by the host or guests
• Cover, title, artist, album, and duration metadata returned by Apple's MusicKit API
• Vote counts of queue entries
• Playback history of the current session
• Blacklist terms and fair-use settings (stored locally)

From the guest device (smartphone / browser):

• A freely chosen display name (e.g. "Anna", "DJ Tom") — no real names required
• Search queries within the Apple Music catalog
• Song suggestions (MusicItemIDs) and voting actions
• An anonymous browser token used for fair-use logic (no personal reference)

No email addresses, phone numbers, location data, IP addresses, or device IDs are collected. Apple ID data stays with Apple.

Legal basis: processing is necessary to provide the service (Art. 6(1)(b) GDPR). For persistent configuration data (blacklist, fair-use settings), the operator's legitimate interest in providing a usable application also applies (Art. 6(1)(f) GDPR).

4. Relay server (Hetzner, Germany)

To allow host and guests to share an event across different networks, voting and queue data is relayed through the operator's server. This server is hosted at Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany); a data processing agreement under Art. 28 GDPR is in place. Transmission between app, server, and guest browsers is encrypted via HTTPS.

Stored on the server: only the data required to operate the event: event ID, queue and history entries (MusicItemID plus the song's title, artist and genre — required to display the guest view), the suggesting guest's display name, vote counts, and event settings (e.g. blacklist terms). When the host ends an event, all event data is deleted immediately and completely. Events that are not explicitly ended are deleted automatically once the event validity expires (normally 7 days).

4a. Server log data when guests visit the event page

Unlike Juqed (Mac), where the guest interface is served only on the local Wi-Fi, the Juqed Go guest interface contacts the relay server over the public internet. When loading the guest URL and on every interaction (search, suggest, vote), server log data is generated by the Hetzner server, as is technically standard for any web service:

• IP address of the requesting device
• Date and time of the request
• Requested URL or API endpoint
• HTTP status code and amount of data transferred
• User agent (browser and operating system identifier)
• Referrer (previously requested page), if available

Purpose and legal basis: this processing is required to ensure technical operation, prevent abuse (e.g. DDoS, automated attacks), and analyze errors. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in a stable, secure service). No further analysis (e.g. profiling, personalized advertising) takes place.

Retention period: server logs are kept for a maximum of 14 days and then automatically deleted or anonymized. They are not combined with other data sources. IP addresses are not used for marketing and not shared with third parties.

Cookies and similar technologies: the guest interface sets no cookies. It uses only the browser's Local Storage for UI preferences (display name, theme) and an anonymous session token for fair-use detection. No tracking pixels, no advertising IDs, no cross-device recognition is used.

Event URLs are not guessable: every event URL contains a cryptographically random event ID. Without the specific URL (via QR code or shared by the host), an event cannot be discovered. There is no public list of running events.

5. Apple Music — processing by Apple

Playback uses Apple's official MusicKit framework. Accordingly, Apple Inc. (One Apple Park Way, Cupertino, CA 95014, USA) processes data — in particular search queries, playback actions, and the host's Apple ID linkage — as an independent controller within the meaning of the GDPR. The operator of Juqed Go has no influence over this processing. Apple's privacy policy applies and is available at apple.com/legal/privacy.

Juqed Go transmits to the relay server only the catalog data of suggested songs required to display the queue (MusicItemID, title, artist, genre — see Section 4). The host's Apple ID, listening history and other Apple Music account data are not transmitted to the relay server and not shared with third parties.

6. Guest browser: no cookies, no tracking

The guest web interface uses no cookies and no tracking. It uses only the browser's Local Storage for UI preferences (display name, theme) and an anonymous session token for fair-use detection. This data does not leave the guest device (other than the token, used solely to limit duplicate submissions) and can be deleted by the guest at any time via the browser's settings. The server-side anonymous reach statistics are described in Section 6a.

6a. Anonymous reach statistics (server-side)

To measure the overall usage of Juqed Go, the relay server periodically aggregates anonymous counters across all events:

• total number of events (counted via the random event IDs, no personal reference)
• country of the event (Apple Music storefront, e.g. "DE")
• number of upvotes cast
• number of songs suggested by guests
• number of songs added by Auto-DJ

No cookies, no IP addresses, no device IDs, no names. The statistics consist exclusively of aggregate totals with no personal reference; neither song titles nor artists nor display names are included. Re-identification of individual hosts or guests is technically impossible. (The relay-server logs described in Section 4a are technically separate and are deleted after 14 days at the latest.)

Retention and use: The anonymous totals are kept indefinitely and published in aggregated form, among other places on juqed.com (e.g. "total events"). Since this is anonymous data with no personal reference, it does not constitute processing of personal data within the meaning of the GDPR; to the extent a personal reference were exceptionally present at the moment of collection, the processing is based on Art. 6 (1) (f) GDPR (legitimate interest in measuring the reach of the service).

6b. Juqed Gold (subscription) — subscription verification

For the optional "Juqed Gold" subscription, Apple handles the entire purchase (Merchant of Record); payment and account data remain with Apple. To link a Gold extension to an event and to prevent abuse, the app transmits the pseudonymous subscription transaction number (originalTransactionId) to the relay server. It is stored there together with the event and removed when the event is deleted (see Section 4). In addition, the server processes Apple-signed subscription status notifications (App Store Server Notifications) to detect expired or revoked subscriptions. The operator cannot derive the host's name, Apple ID or payment data from this. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).

7. App Store — Apple as distributor

Juqed Go is distributed via the Apple App Store for iOS and iPadOS. Apple Inc. acts as Merchant of Record and processes payment, Apple ID, and update data as an independent controller. Anonymized crash reports (if the user has enabled "Diagnostics & Usage") are made available via App Store Connect for the sole purpose of bug fixing.

8. App Store — data categories (Privacy Nutrition Labels)

In accordance with Apple's App Store Connect requirements, the collected data categories are declared as follows:

• Data collected by the developer: only the event data required for operation on the relay server (Section 4; deleted when the host ends the event, at the latest when the event validity expires), technical server logs (Section 4a; 14 days), anonymous aggregated usage counters (Section 6a) and, with an active Gold subscription, the pseudonymous subscription transaction number (Section 6b).
• Data used to track you: none. The app contains no tracking, no advertising IDs, no cookies and no cross-device recognition.
• Data linked to you: none. The operator cannot link any of the processed data to a natural person; Apple ID and payment data remain entirely with Apple.
• Data not linked to you: the anonymous counters of the reach statistics (Section 6a) and the operational event data (Section 4).

9. User rights

Since Juqed Go — apart from the data described in Section 4a (server logs) and Section 6b (subscription verification) — does not collect personal data and the operator at no point receives data that he can link to a natural person, the typical data subject rights under Art. 15–21 GDPR cannot, in practice, be exercised against the operator. The host can uninstall the app at any time or remove app data via "Settings → General → iPhone Storage → Juqed Go". Guests can delete their browser's Local Storage at any time. For data protection inquiries, contact the email address listed in the Legal Notice.

10. Changes

This privacy policy may be adjusted in case of changes to the app or the form of distribution. The current version is available at juqed.com/en/legal/privacy-juqed-go.