GravyBread Privacy Policy

Last updated: October 2026

1. Introduction

GravyBread (“GravyBread,” “we,” “us,” or “our”) is operated by iProdigy Music Group, Inc., a Wyoming corporation domiciled in Pennsylvania, and provides a social platform for music fans, artists, and the music industry. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use our website and services (the “Service”).

This Policy is intended to describe the Service as offered at launch. Features and data practices may change as the platform develops. We will update this Policy when necessary and provide additional notices or obtain consent where required by applicable law.

The laws that apply to personal information depend on factors that may include your location, our activities, and the nature of the processing. This Policy describes important privacy rights and practices without suggesting that every law applies in every circumstance.

2. Information We Collect

Account and authentication information

We may collect your email address, username, display name, authentication information, language preference, and information necessary to create, maintain, and secure your account. If you choose Google sign-in, we receive information made available through that authentication process.

Your account email address is not displayed publicly by default.

Profile information and MUSIC DNA

You may provide a profile photo, biography, location, favorite artists, songs, genres, eras, scenes, places, shows, records, music-related interests, and other profile information.

MUSIC DNA represents your musical identity and supports discovery and connections. Information you choose to display on your profile may be visible to other users. Certain profile information may also appear in public profile previews or publicly accessible pages, depending on the feature and your settings.

Please consider carefully what you choose to make public.

Content and communications

We collect information and content you submit through the Service, including posts, comments, messages, playlist information, artist links, images, event details, listening-party activity, and other supported content.

Messages are intended to be accessible to their participants. Authorized personnel may review messages and related information when reasonably necessary to investigate a report, address safety concerns, enforce our rules, or comply with legal obligations.

Personal music library and local audio files

GravyBread's personal music player is designed to let users import supported audio files from their own devices and play those files through the built-in player.

Audio files imported into the personal music player remain on the device where they are added. GravyBread does not upload those audio files to its servers as part of the local-first player experience.

GravyBread may store and synchronize library metadata and playlist information, such as track titles, artist names, playlist names, track ordering, and identifiers needed to organize a personal library across supported devices. The actual audio file does not automatically transfer to another device. If a track is unavailable on the device being used, the user may need to add their own file on that device to play it.

Local files may become unavailable if the user removes them, clears browser or device storage, changes devices, or uses a browser that does not retain the relevant local data. Users should keep their own backups of music files they wish to preserve.

Personal music-library audio is separate from GravyBread's social music-sharing features. The player does not make a user's local audio files available to other users. Social sharing uses supported song information, artwork or other authorized media, and links to external listening destinations rather than redistributing a user's private audio files.

Users are responsible for ensuring that they have the rights and permissions necessary to possess and play the files they import.

Activity and analytics

We may collect information about how you use GravyBread, including follows, searches, profile visits, recommendations, song-link interactions, clicks, and other events supported by the Service.

We use this information to operate and improve discovery, understand engagement, maintain security, troubleshoot problems, and develop aggregate insights. Authorized administrators may access certain activity-level information. Artists may receive information about engagement with their own profiles or content where the relevant feature supports it.

We will describe and obtain any consent required for analytics or tracking technologies under applicable law.

Artist email subscriptions

If you subscribe to an artist's email updates, we may collect your email address, the artist you subscribed to, the date and source of the subscription, your language preference, and subscription status.

Subscribing to artist emails is separate from following an artist on GravyBread and separate from any optional GravyBread marketing subscription.

The artist concerned and authorized GravyBread personnel may access the information needed to administer the subscription. You can unsubscribe through the link in an artist's email or an available subscription-preference feature.

Artists must use subscriber information only for the purposes disclosed when the subscriber opted in and must honor applicable consent, privacy, and unsubscribe requirements.

Tips, payments, and payouts

When real payment features are available, we and our payment providers may process information needed to complete and administer tips, payments, refunds, disputes, and artist payouts.

This may include transaction references, amounts, currencies, payment status, processing fees, refund or dispute information, payout status, and information needed to verify an account or prevent fraud.

Payment providers, including Stripe if used for the relevant transaction, may collect payment-card details, identity-verification information, tax information, and other information they require to provide their services or comply with law. Their own privacy policies apply to their processing of personal information.

We do not intend to store full payment-card details on GravyBread's own systems. We may retain transaction and payout records as necessary for accounting, fraud prevention, dispute resolution, security, and legal compliance.

Technical information

We and our service providers may process technical information such as browser and device details, session information, diagnostic information, and server logs needed to deliver, secure, and maintain the Service.

Information from other sources

We may receive information from authentication providers, payment providers, security and service providers, or other sources where permitted by law and necessary to provide the Service.

3. How We Use Information

We use personal information as reasonably necessary to:

Create, authenticate, maintain, and secure accounts.

Provide profiles, MUSIC DNA, music discovery, posts, messaging, follows, events, listening parties, playlists, and other features.

Organize and synchronize personal music-library metadata and playlists across supported devices.

Operate artist email subscriptions and respect subscription preferences.

Process tips, payments, refunds, disputes, and artist payouts.

Provide notifications and respond to questions and requests.

Detect abuse, investigate reports, enforce our Terms and Conditions, and protect users and the Service.

Understand usage, improve functionality, troubleshoot issues, and develop aggregate insights.

Meet legal obligations and establish, exercise, or defend legal claims.

We do not use consent as a substitute for another legal basis where applicable law requires a different basis. Where consent is required, we will request it for the relevant activity.

4. Legal Bases for Processing

Where the EU General Data Protection Regulation (GDPR), UK GDPR, or another applicable law requires a legal basis, the relevant basis may include:

Contract: processing necessary to provide features or services you request or to take steps at your request before entering into a contract.

Legitimate interests: operating, securing, improving, and protecting the Service, where those interests are not overridden by your rights and interests.

Consent: processing for which you have given consent, where consent is the appropriate legal basis.

Legal obligation: processing necessary to comply with applicable law.

Vital interests or public interest: where applicable law permits and the circumstances justify that basis.

The applicable legal basis depends on the specific processing activity and the law that applies. Where we rely on consent, you may withdraw it at any time, subject to applicable law. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. How We Share Information

We do not sell personal information to third parties in exchange for money. Depending on the services and technologies used, certain disclosures or advertising-related activities may fall within broader legal definitions of “sale,” “sharing,” or targeted advertising under some privacy laws. Where those laws apply, we will provide required notices and choices.

We may disclose information in the following circumstances:

With other users

Content you choose to share through profiles, posts, messages, events, or other features may be accessible to the audience intended for that feature. Personal audio files imported into the local music player are not intended to be shared with other users through GravyBread.

With artists

Artists may receive information needed to administer email subscriptions and aggregate engagement information about their own profiles or content where supported by the Service.

With service providers

We may share information with providers that help us operate the Service, including hosting, databases, authentication, security, analytics, email delivery, and payment processing providers. They may process information on our behalf under applicable agreements and law.

For legal, safety, and business purposes

We may disclose information when reasonably necessary to comply with law, respond to valid legal process, protect users or others, investigate fraud or security incidents, enforce our agreements, or complete a merger, financing, reorganization, or transfer of business, subject to applicable law.

At your direction

We may disclose information when you direct us to do so or use a feature that clearly involves sharing it.

6. Third-Party Services and External Links

GravyBread may link to external artist websites, streaming services, music stores, ticketing services, merchandise stores, and other third-party destinations. When you visit an external service, its own terms and privacy policy govern its handling of your information.

Where supported by the Service, we may record outbound-link activity, such as the artist, destination, page, and time of a click. This helps us understand discovery and engagement. A recorded click does not establish that you completed a purchase on the destination site.

We may also use third-party services for authentication, hosting, email, fonts, security, payments, and other functionality.

7. Cookies, Browser Storage, and Similar Technologies

The Service may use cookies, local storage, session technologies, and similar mechanisms to authenticate users, maintain preferences, support features, protect security, and understand usage.

The local music player may use browser or device storage to make imported audio files available for playback on that device. Such files are not automatically uploaded to GravyBread's servers as part of the local-first player experience.

Where applicable law requires consent for cookies or similar technologies, we will provide appropriate choices before using the relevant technologies. You may also manage some browser storage through your browser settings, although disabling or clearing certain storage may affect functionality or make locally imported audio unavailable.

8. Data Retention and Deletion

We retain information for as long as reasonably necessary to provide the Service, maintain security, administer accounts and transactions, resolve disputes, enforce agreements, and meet legal obligations.

You may request account deletion through available account settings or by contacting us. We will delete or de-identify personal information within the period required by applicable law, subject to lawful exceptions and legitimate retention needs.

When an account is deleted, we will remove or de-identify associated information from active systems in accordance with our deletion procedures. Information may remain temporarily in backups, logs, or other retained records until it expires under established retention schedules. Some records may need to be retained for financial, tax, legal, security, fraud-prevention, dispute-resolution, or audit purposes.

Deleting a GravyBread account does not automatically delete audio files that remain on a user's device. Users should separately manage those files through their device or browser.

We will disclose applicable retention periods or the criteria used to determine them where required by law. We will not retain personal information longer than reasonably necessary for the relevant purposes unless a longer period is legally justified.

9. Privacy Rights and Choices

Your rights depend on your location and the laws that apply. Where applicable, rights may include:

Access to personal information we hold about you.

Correction of inaccurate or incomplete information.

Deletion of personal information.

A copy of certain information in a portable format.

Restriction of, or objection to, certain processing.

Withdrawal of consent where processing is based on consent.

Opting out of certain sales, sharing, or targeted advertising activities.

Information about how personal information is collected, used, and disclosed.

Non-discrimination for exercising applicable privacy rights.

The ability to complain to an appropriate privacy regulator.

You may manage some information and preferences through the Service. To make a privacy request, contact **hello@iProdigy.xyz**. We may need to verify your identity and clarify the scope of a request. Some rights are subject to exceptions under applicable law, and we will respond within the legally required period.

European Economic Area and United Kingdom

Where the EU GDPR or UK GDPR applies, you may have rights to access, rectify, erase, restrict, or object to processing of personal data; receive certain data in a portable format; and withdraw consent where processing is based on consent.

You may also lodge a complaint with the data-protection supervisory authority in your country or, in the UK, the Information Commissioner's Office. We will provide additional controller, representative, and contact information where required by applicable law.

California and other US states

Depending on your state of residence and whether the relevant law applies to GravyBread, you may have rights to know or access personal information, correct it, request deletion, obtain a portable copy, and opt out of certain sales, sharing, targeted advertising, or profiling activities. Some states provide additional rights concerning sensitive personal information, appeals, or authorized agents.

We will provide required notices and mechanisms for applicable rights and will not unlawfully discriminate against you for exercising them.

Other jurisdictions

Depending on applicable law, residents of other jurisdictions—including countries with comprehensive privacy laws such as Brazil—may have additional rights relating to access, correction, deletion, portability, consent, objection, and complaints to a regulator.

10. International Data Transfers

GravyBread and its service providers may process information in the United States and other countries. Those countries may have privacy laws different from those where you live.

Where required by applicable law, we will use appropriate safeguards for international transfers, which may include approved contractual protections or other legally recognized mechanisms. Information about applicable safeguards may be requested using the contact details below.

11. Children and Teen Artists

General fan accounts are intended for people aged 18 or older.

An artist under 18 may be represented on GravyBread only through an account created and managed by their parent or legal guardian, subject to the Service's applicable rules and safeguards. The adult account holder is responsible for managing the account and associated financial activity. Minors may not independently operate general fan accounts.

Parents or legal guardians who believe a child's information has been submitted in violation of these rules may contact **hello@iProdigy.xyz**.

We will handle information relating to minors in accordance with applicable law and the safeguards implemented for the relevant account arrangement.

12. Security

We use reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure.

We design the personal music player so that imported audio files remain on the user's device rather than being uploaded to GravyBread's servers. The library metadata synchronized by GravyBread remains subject to the Service's account and access controls.

No website, device, network, or storage system can be guaranteed to be completely secure. We will address security incidents and provide notices where required by applicable law.

13. Automated Processing and Recommendations

GravyBread may use rules, preferences, and activity signals to support discovery, recommendations, and music-related features. We may use aggregate insights to understand engagement and improve the Service.

Where applicable law provides rights concerning automated decision-making or profiling, we will honor those rights to the extent they apply. We will provide additional disclosures if we introduce automated processing that requires them.

14. Advertising

GravyBread may develop advertising features in the future. If advertising, targeted advertising, or related tracking is introduced, we will update this Policy and provide required notices, choices, and consent mechanisms before using personal information in ways that require them.

15. Changes to This Policy

We may update this Policy as the Service develops or legal requirements change. We will revise the “Last updated” date and provide notice of material changes through the Service or another appropriate method where required by law. Where consent is legally required for a change, we will seek it.

16. Contact Us

For privacy questions, requests, or concerns, contact iProdigy Music Group, Inc., operator of GravyBread:

Email: hello@iProdigy.xyz