Cueing up
Version 1.1
·
Updated 5 August 2026
In plain words
We keep your email, your phone number, the songs you've asked for and what you paid. We don't sell any of it, and there's no advertising or analytics tracker in this app.
1
SpinWish is operated from Nairobi, Kenya. We are the data controller for everything described here, and you can reach us from Get help at the bottom of this screen.
2
Your account
Email, username, phone number, and a password we store scrambled — we can't read it. Why: to sign you in and reach you about a payment.
Your profile
Name, photo, bio, genres and any social handles you add. Why: so DJs and other listeners know who sent a song.
What you've asked for
Songs requested, DJs followed, ratings left, sessions joined. Why: your history, and better suggestions.
Your payments
For each one: the amount, the M-Pesa receipt number, the date, and the name and number M-Pesa returns to us. Why: it's a receipt, and we have to keep it.
Where you are
Only when you ask for sessions near you, and only for that one answer. We never store it — there is no location on your account.
Your device
A push token, if you allow notifications, plus the IP address and page of each request our server answers.
Pictures you upload — your profile photo, a session cover — are served from a public address. Anyone with the link can open one without signing in, the same way a photo on a public profile works anywhere else.
3
label: LegalPrivacyCopy.seenLabel
The DJ.
When you request a song, that DJ sees your name, the track, the amount and any message you attached. If you follow a DJ without ever paying them, all they see is your name and when you followed — not your phone number.
Safaricom.
Paying sends your number and the amount to M-Pesa. What they do with it is covered by their own terms, not ours.
Our service providers.
The company that sends our emails, the one that sends our SMS, and Google, who deliver push notifications to your phone. They handle it for us and for nothing else.
Nobody who wants to advertise to you.
We don't sell your data, we don't share it for advertising, and there is no advertising or analytics tracker in this app.
4
Your account and its history stay for as long as you have an account. Payments and receipts are kept for 7 years whether or not you do — tax and accounting law, and it is the one thing deleting your account does not remove.
You stay signed in while you keep using the app and are signed out after 30 days away. Verification codes last 10 minutes. Push tokens last until you turn notifications off.
The full list, with what each one is, is on What SpinWish knows about you.
5
Under Kenya's Data Protection Act 2019 you can see what we hold, correct it, take a copy, and have it erased. Four of those you can do here, now — they are on What SpinWish knows about you.
Taking a copy is the one without a button. Ask from Get help and a person puts it together; there is no export you can trigger yourself yet, and we would rather say so than draw a button that opens a form.
6
Tell us first — Get help, and we'll come back to you. If you're not satisfied, you can complain to the Office of the Data Protection Commissioner in Nairobi. You don't need our permission to do that.
These are the same documents the SpinWish app ships, at the same version.