Garoove Privacy Policy

This policy covers the Garoove app and its share links on this site.

Effective date: October 12, 2026
Last updated: October 29, 2026 (v6)

Who we are: Garoove is made by Fusion Tech AI LLC, a Maryland limited liability company ("we", "us", "our"). Contact: ricky@fusiontechai.com. Mail: Fusion Tech AI LLC, 109 E Chestnut St, Salisbury, MD 21801, USA.

The app: "Garoove" for Android, an AI DJ that talks back (package com.fusiontechai.aidj). Garoove is in beta (testing). Some things below are still changing, like where our server runs. When they change, we update this policy.

Garoove is a music app with an AI DJ that talks. The music comes from YouTube and plays in YouTube's own player. This policy explains what Garoove collects, where it goes, why, how long we keep it, and how you delete it. It lives at https://fusiontechai.com/aidj/privacy, the page the app opens. Our Terms of Use are at https://fusiontechai.com/aidj/terms.

The short version

• No accounts and no sign-in. We don't put ads in Garoove, and there are no ad or analytics trackers in our code. (YouTube's own player may show YouTube's ads and use its own cookies.) We don't sell your data.
• Your lists, DJ memory and settings are saved on your phone, not on our server. The DJ memory is sent along with each request so the DJ can use it. Garoove keeps all of this out of Android's app backup.
• To work, Garoove sends what you say to the DJ, your song taste and your city to our server, which passes them to AI services. Song searches go to YouTube through our server. Your words ride inside the encrypted request, never in the web address. Your conversation with the DJ is kept separate from every other user's.
• Location is approximate only, and Garoove asks for it only the first time "near me" or the weather needs it.
• "Hey Garoove" is heard on your phone, only while Garoove is open. It's on until you turn it off in Settings. The listening stays on your phone, and nothing it hears leaves your phone. When it hears "Hey Garoove", Garoove may send our server a short note that it woke (no words). What you say goes to the DJ only after "Hey Garoove" or a mic tap.
• Every line the DJ says goes through our safety filters first. A person reads every line you report, within 7 days.
• Our server's log clears out lines older than 30 days. Saved song info from YouTube is refreshed or removed once it is 30 days old (on your phone, that happens the next time you open Garoove).
• Share links are public: anyone with the link can open it. You can turn a link off any time in Library > My shares > Unshare.
• You can erase your data any time: Settings > Legal & privacy > Delete my data.

1. YouTube

• Garoove uses YouTube API Services to find songs, check them and show their details.
• By using Garoove you agree to YouTube's Terms of Service.
• How Google handles data is explained in the Google Privacy Policy.
• Songs play in YouTube's own player inside Garoove. YouTube runs that player. It may show YouTube's ads, and it may place and read cookies or similar data on your phone, under Google's Privacy Policy. Song pictures (thumbnails) also load straight from YouTube onto your phone. No other company can show ads or place cookies in Garoove.
• When you ask for a song, the search words go to YouTube from our server. Our server also asks YouTube about song IDs, to check them and to refresh their details.
• When the DJ plays a station of one artist, our server asks YouTube for one public YouTube playlist for that artist (it sends only the artist's name) and plays songs from it. It keeps that answer for 30 days, for everyone who asks for the same artist.
• The YouTube data Garoove uses: video IDs, titles, channel names, thumbnail links, whether a video is "made for kids", can be played in other apps or was removed, the songs in a YouTube playlist you import, and the songs in a public YouTube playlist the DJ uses for a station.
• If a song can't play inside Garoove, Garoove may show a Watch on YouTube button. It opens YouTube's own app or website, under YouTube's terms.
• The 30-day rule: song info from YouTube (title, channel, picture link) is refreshed from YouTube or deleted once it is 30 days old.
• On your phone: each time you open Garoove, songs saved 28 or more days ago are checked with YouTube again. If that can't happen by day 30, the title, channel and picture are blanked and only the video ID stays, until a refresh brings them back. Songs YouTube removed, marked "made for kids" or no longer lets other apps play drop out of your lists (and pause, if one is playing). In My shares, a song link's title is replaced with "A song you shared" after 30 days. If you don't open Garoove for a while, these checks run the next time you open it.
• On our server: the search cache, the station cache and the log keep song info for 30 days. Our server clears out older entries when it starts and every 6 hours while it runs.
• On the share host: titles and card pictures expire after 30 days (section 8).
• Revoking access: Garoove doesn't sign in to your Google or YouTube account and doesn't ask for access to it, so there is no Google permission to revoke. If that ever changes, you'll be able to revoke it at https://security.google.com/settings/security/permissions.
• Deleting your data: any time, with Settings > Legal & privacy > Delete my data (section 16).

2. What stays on your phone

Garoove keeps these in its private storage on your phone, which other apps can't open:

• your history (up to 500 songs), favorites, saves, "never play" list, folders and the current line-up;
• DJ memory: your "About me" text, the short notes the DJ writes about you (like a city or a favorite band), your name, home city and "right now I'm in" city if you give them, and the conversation log (lines older than 30 days are removed when you open Garoove);
• notes on what you liked or disliked about songs (removed after 30 days);
• your settings: DJ name, voice, personality, roast level, your custom personalities, and the answers you gave on Garoove's microphone, location and Music Detective cards;
• DJ lines you reported (the last 50), and whether each one has reached us yet;
• your last known location and city, if you allowed location;
• two random IDs made on your phone: an install ID for our server and a share ID for the share host. Neither one is tied to your name, your Google account, your phone number or your phone's hardware;
• My shares: each link you made (the link, whether it's a song or a folder, its title, the date) and the code that turns it off (Unshare); also which folder each folder link you opened became;
• a link a friend sent that is still loading or didn't load (only the link's ID and when you first tapped it), so Retry works even if Garoove closed while it was loading;
• the key that pairs your phone with our server, and our server's addresses;
• the date you agreed to the Garoove terms and this policy;
• the date Garoove was installed, once it has checked whether a friend's share link came with the install (section 8);
• DJ voice clips (so greetings play right away);
• share pictures and backup files the app makes (deleted the first time you open Garoove after they are a day old);
• the YouTube player's cookies and storage;
• the "Hey Garoove" speech model (section 4). It holds no personal data.

You can see, edit or clear your DJ memory any time in Settings > DJ Memory. You can remove songs and folders in the Library.

Delete my data erases all of this except the speech model and the install date. Uninstalling Garoove erases all of it.

Android backup is off for Garoove. Garoove tells Android not to copy any of its data to your Google account's backup or to a new phone during a phone-to-phone transfer. A new phone starts Garoove fresh. To move your lists yourself, use Back Up My DJ in the Library (section 9).

3. What goes to our server

Garoove's server (we call it the "gateway") holds the keys for the paid services, so the app never does. Today it runs on a computer we operate. We are moving it to a hosted server.

With each request to the DJ, our server gets:

• what you said or typed to the DJ (your voice is turned into text first, see section 4);
• the song playing now (title, channel, video ID) and the last few lines of this conversation (up to 12);
• your taste: up to 15 favorite titles, up to 30 "never play" titles and your last 12 songs;
• your folder names, the station you're on and which screen you're on;
• your DJ memory: About me, the DJ's notes, your name, your home city and the city you're in now (the one you told the DJ, or else the one from your phone's location);
• your DJ settings: DJ name, personality and roast level, the names of your custom personalities and the description of the one you're using;
• when you tap "Ask about this place", that place's details.

Other things it gets:

• for the DJ's quick "on it" line: what you said, the song playing, your personality, roast level, custom personality description and the DJ's last few quick lines (so it doesn't repeat itself);
• the DJ's lines, to turn them into a voice, with the voice you picked and your personality's name (so the voice's delivery fits it, like slower and calm for Chill);
• song IDs to check with YouTube, search words, artist names for stations, and YouTube playlist links you import;
• the songs in a folder (up to 25 titles and channels) and your personality (and custom personality description), when you ask the DJ to name it;
• for "near me": your approximate location, what you're looking for, your city and your personality (section 5);
• for weather: your city, your personality, roast level and custom personality description (section 5);
• a few seconds of sound for Music Detective (section 6);
• lines you report (section 7);
• short app health and timing notes (for example "player error 150", or how long each step of a voice turn took). These can include the words your phone's speech service heard after you tapped the mic or said "Hey Garoove", but never what the "Hey Garoove" listener hears while it waits (section 4);
• your install ID, with every request except quick "are you there?" checks.

Your words go inside the request, never in the web address. Search words, weather, "near me", the DJ's requests and the app's health notes travel in the body of an encrypted request. Web addresses (URLs) can end up in web servers' logs; the body doesn't. (Only our internal test builds, talking to an older test server, may fall back to the web address.)

What our server keeps, and for how long:

• The log: 30 days. It records requests and answers: what you said, the DJ's answers, songs, search words, Music Detective results, weather lines, the health notes, the results of the safety check (section 7, including the words it stopped), the fingerprint of the custom personality that said a line, and "near me" locations rounded to about 100 meters. Each line written for your phone carries your install ID so Delete my data can find it. Our server deletes lines older than 30 days when it starts and every 6 hours while it runs.
• Your DJ memory is passed along to the AI. Our server doesn't save it to disk. But the log keeps the DJ's answers, and an answer can include a new note the DJ is adding about you, like your name or your city.
• The AI's short-term memory, one per phone: so the DJ can follow your conversation, our server keeps the recent turns of your phone's own conversation with the main AI, in memory only (never written to disk). No other user's conversation can see yours, and yours can't see theirs. It starts fresh after about 20 turns, after a day, when you change personality, when our server restarts, and when you use Delete my data. Our server keeps a limited number of these conversations at a time; the least recently used one is dropped first.
• Reported lines: each one carries a review status. A person reviews every report within 7 days (section 7). A reviewed report is deleted 12 months after it arrived; a report is never deleted before someone has reviewed it. Delete my data removes yours at any time.
• YouTube search cache: search words and results, up to 30 days. It isn't linked to any person or install.
• Station cache: artist names and the songs from public YouTube playlists (section 1), up to 30 days. It isn't linked to any person or install.
• "Near me" cache: search words, locations rounded to about 1 km, and the places found, up to 30 days. Only OpenStreetMap results are kept. Results from Google Places are never stored. It isn't linked to any person or install.
• Small working notes in memory only: the safety check's verdict on each custom personality, and which custom personality said each of the last 2,000 lines said in one (so a report can name it). Both are kept as fingerprints (one-way codes), not the text, and both are gone when our server restarts. The voice's delivery comes from the personality sent with each line; our server doesn't remember which personality your phone used.
• Blocked lists: words the DJ must never say, and fingerprints of custom personalities we blocked after a report. They aren't linked to any person or install.
• Daily usage counts: how many requests of each kind our server made today, to enforce our spending limits. Just numbers, nothing about you.
• Not kept: Music Detective recordings and the DJ's voice audio.
• Our server doesn't write down your phone's internet (IP) address, except when it turns away a connection that doesn't have the pairing key.

4. Your voice and the microphone

The first time you open Garoove (after you agree to the terms), a card explains when Garoove uses the microphone and where your words go. Android asks for the permission only if you tap Allow microphone. If you tap Not now, nothing is asked until you tap the mic. (If you opened Garoove from a friend's share link, the card waits until you tap the mic or open Garoove again.)

• Tap the mic: your phone's own speech service turns your words into text. On most Android phones that's Google's speech recognition, under Google's privacy policy. Garoove gets the text, not a recording.
• "Hey Garoove" (Hands-Free) is on by default while Garoove is open. You can turn it off in Settings (the Hands-Free switch).
• It uses a small speech model that runs only on your phone (Vosk). Garoove downloads it once (about 40 MB) from Vosk's official site, alphacephei.com, and checks that the file is exactly the one we expect before using it. On Wi-Fi it downloads by itself. On mobile data Garoove asks first ("Get Hey Garoove · 40 MB data").
• It listens only for "Hey Garoove", only while Garoove is open on your screen, and only if you allowed the microphone. It works offline. The listening stays on your phone, and nothing it hears leaves your phone. What you say goes to the DJ only after "Hey Garoove" or a mic tap.
• Until the model is on your phone, "Hey Garoove" doesn't work and you tap the mic instead. No other speech service listens for "Hey Garoove".
• After "Hey Garoove", the DJ answers with a short greeting (like "Yeah?") and your phone's speech service listens for your request. The mic may open a split second before the DJ finishes talking (Settings > Mic head start) so it doesn't miss your first words. If it catches the DJ's own last words, Garoove drops them.
• When it hears "Hey Garoove", Garoove may send our server a short note that it woke, with no words in it. That note goes into our server's 30-day log.
• "Always listening" ("Hey Garoove" while Garoove is closed) exists only in our internal test builds. The version of Garoove on Google Play doesn't have it, doesn't listen while it's closed, and doesn't ask to show notifications.
• Your words go to our server and to AI services (section 7). They also show up in the conversation log on your phone (30 days) and in our server's log (30 days).

5. Location ("near me" and weather)

Garoove asks for approximate location only, never precise location, and it doesn't ask when you first open it. It asks the first time "near me" or a weather question needs to know where you are and the DJ doesn't already know a city (one you typed or told it). A one-line reason shows first ("To find places near you and get your local weather, Garoove needs your approximate location"), then Android's question. You can say no.

If you allow it:

• Garoove doesn't have background location permission. Android gives it an approximate location (Android says it's accurate to about 3 square kilometers, about 1.2 square miles), never your exact spot. Garoove reads it when you open the app and when you ask for something near you (at most about every 5 minutes).
• Your phone turns that into a city name with Android's Geocoder (usually a Google service). The location and city are saved on your phone.
• Your city goes to our server with each DJ request, so the DJ knows where you are (unless you've told the DJ you're somewhere else).
• "Near me" tiles ("pizza near me"): your approximate latitude and longitude, the search word, your city and your personality (or the description of your custom personality) go to our server. Our server asks OpenStreetMap map servers (Overpass: overpass-api.de, overpass.private.coffee, overpass.kumi.systems) with the location and what you're looking for. If those are all busy, it asks Google Places instead, with the search word and location (that backup is switched on, with a daily limit). If there is no location, our server looks up your town in the U.S. Census Bureau's public list of places (a file on our own server; nothing is sent to the Census Bureau). The OpenStreetMap places it finds (not your location) go to an AI service, which writes a short line for each tile, and then the DJ tells you about them. Google Places results are never sent to an AI. Those tiles show a plain line (what it is, how far, the hours).
• If Garoove has no location and no city, or the map search finds nothing, it opens Google Maps with your search (and your city, if it knows it) instead.
• Weather: our server looks up your town in the U.S. Census Bureau's public list of places (a file on our own server; nothing is sent to the Census Bureau), then asks the U.S. National Weather Service (weather.gov) for the forecast. They get map coordinates only, never your name or words. Then an AI service (Groq) gets the forecast and your personality, roast level and custom personality description, and says the forecast the way your DJ would. Every number is checked against the forecast; if anything doesn't match, you hear the plain forecast. The DJ may add a note like "Lives in/near Salisbury, MD" to its memory.

You can turn location off in Android settings. Garoove then stops reading your location, but the last city it found stays saved on your phone and still goes with DJ requests until you use Delete my data. (Telling the DJ "I'm in Ocean City" uses that city instead.) If Garoove knows no city at all, the DJ asks what city you're in.

6. Music Detective

• "It's playing" or "Hum it": before the first time, a card tells you what happens and asks you to Continue. Then, only when you tap the mic on one of these, Garoove records about 10 seconds of sound (12 for humming) and sends it through our server to ACRCloud. For "It's playing", if ACRCloud doesn't find the song, the sound goes to AudD. They name the song and handle the sound under their own policies. Our server doesn't keep the recording. The result (title and artist) goes into our 30-day log.
• "I remember something" or "Sing the words": what you type or say goes to the DJ like any other request (sections 3 and 7). No sound recording is sent.

7. AI service providers

To write the DJ's lines, our server sends the request details from section 3 (your words, songs, taste, DJ memory, city and settings) to these AI service providers:

• OpenAI, through our OpenAI API business account (GPT models): the DJ's main brain. It also names folders when you ask the DJ to.
• Groq (running OpenAI's open "gpt-oss" models): the DJ's quick lines (the instant "on it" reply, the lines on the "near me" tiles, chats about a place, the custom-personality builder, the weather in your DJ's personality), the safety check (below) and the first backup.
• Cerebras and Mistral AI: backups, used only when the ones above don't answer.
• xAI (Grok): only if we switch the main brain to it. That is not the current setting. If we do, each phone gets its own Grok conversation, which Grok saves on our server's disk. We delete your phone's Grok conversations when you use Delete my data, and all of them after 30 days.
• OpenAI's moderation service checks every line the DJ is about to show or say, in every personality, plus folder names and first names before a share link goes public, and DJ or personality names you pick. It gets only that text. A line that fails is replaced with a neutral one.
• A DJ or personality name can't be a real person's name. We check new names with OpenAI (it gets only the name).
• Cartesia turns the DJ's lines into the DJ's voice. It gets only the text of each line, the voice you picked and a delivery style (like slower and calm for Chill, faster for Spunky). Our server picks that style from the personality name your phone sends with each line; Cartesia doesn't get the name.

Each provider gets this data to produce the DJ's answer, and handles it under its own terms and privacy policy, including how long it keeps the data and whether it uses it to improve its AI. We don't use your data for ads, and we don't sell it.

Safety rules: our server adds safety rules to every personality, built-in or custom, and tells the AI they come first: no slurs or hate, nothing sexual, no harassing real people, nothing that encourages self-harm or danger, never pretending to be a real person, and roasts aim at music taste only. That includes the DJ's answers, its quick lines, folder names, weather lines and the lines on "near me" tiles.

If you might hurt yourself: if you tell Garoove you might hurt yourself, it drops the personality and the roast and points you to the 988 Suicide & Crisis Lifeline (call or text 988) or 911. Your words are handled like any other request: checked by OpenAI's moderation service, and kept only in our 30-day server log. Our crisis protocol: https://fusiontechai.com/aidj/safety

The blocked-words filter: on our server, every line the DJ is about to say, in every personality, is checked against a list of words and phrases it must never say (slurs, sexual content involving minors, encouraging self-harm, threats). That covers the DJ's answers, its quick lines, folder names, weather lines, the lines on "near me" tiles, chats about a place and the personality builder. A line with one of them is swapped for a neutral one (like "Let's keep it about the music."). This filter runs on our server alone, so it works even when the safety check below can't.

The safety check on custom personalities: before the DJ uses a personality you made, a safety model (on Groq) checks its name and description. Every line the DJ says in a custom personality, and every folder name it makes up, is checked too. If the check says a personality is unsafe, the DJ won't use it, switches to Funny as Hell and says why; an unsafe line is replaced with a neutral one, and an unsafe folder name with "Fresh Picks". The check gets only that personality's name and description, or the line or folder name itself. If the check can't run (for example, it's busy), nothing unchecked goes out: until the check passes, the DJ talks as Funny as Hell and says why, a line that couldn't be checked is swapped for a short neutral one, a folder name for "Fresh Picks", and a new personality isn't made yet. AI can still get it wrong.

Report a line: tap the flag next to a DJ line, or use Settings > Legal & privacy > Report a DJ line. We get the line, when it was said, the personality, voice and roast level that made it, your install ID and, if a custom personality said it, that personality's fingerprint (a one-way code made from its description). If our server can't be reached, the report waits on your phone and goes the next time you open Garoove or your phone is back online.

What happens to a report: each one is marked "new" until a person reviews it, within 7 days. The review can block words or phrases in the filter above, or block the custom personality that said the line, for everyone. Then the report is marked reviewed. A reviewed report is deleted 12 months after it arrived (section 11).

8. Share links

When you share a song or a folder, Garoove sends this to our share host (garoove.com; test versions use garoove-dev.rickyponline.workers.dev), which runs on Cloudflare:

• the YouTube video IDs (up to 200 songs), with their titles and channel names;
• the folder name (when you share a folder);
• a 1200 x 630 card picture: song pictures from YouTube, the song's title and channel (or the folder name and song titles), and the words "A friend shared…";
• a random share ID (not tied to who you are) and the app version;
• a Play Integrity token, when the share has a card picture (below);
• your first name, only if you turn on "Put my first name on it" in the share box. It's off by default and appears only when your DJ profile has a name. It sends the first word of that name (up to 24 characters). It then shows on the card picture ("Sam shared a vibe"), on the link's page and preview, and on the first line of the message you send. With the switch off, your name goes nowhere.

The share box says it plainly: anyone with the link can open it.

What the share host does:

• It makes a public link. Anyone with the link can open it, in Garoove or in a web browser. Someone without Garoove sees a web page on our share host, which may show YouTube's player (covered by Google's Privacy Policy) and a way to get Garoove.
• It checks the titles with YouTube (YouTube's oEmbed service).
• The card picture and the titles expire after 30 days.
• The share record (the link, its song IDs, the folder name and the first name, if you added it) stays until you unshare it or we remove it. If you share the same song or folder again within 30 days, Garoove reuses the same link instead of making a new one.

My shares and Unshare: Library > My shares lists every link you made, with Copy link and Unshare. Unshare turns the link off for everyone you sent it to. Your songs and folders on your phone stay put. Chat apps (like Messenger or WhatsApp) may keep their own copy of a link's preview picture, which we can't remove. Delete my data does not turn off links you already sent, and it erases the codes that do, so unshare first. After that, email us the link and we'll take it down.

Every link Garoove makes is a record on the share host, and every one shows in My shares with Unshare. There is no other kind of link: if the share host can't be reached, Garoove doesn't make a link at all and shows Retry. (Older basic song links that hold only a YouTube video ID still open, but Garoove no longer makes them.) Sharing "Garoove itself" sends a link to the app's page, and nothing is uploaded. Copy link copies the same link that sending makes.

Play Integrity (share box and card pictures): so that only the real Garoove can put a picture on our share host, Garoove uses Google Play's integrity service. When you open the share box for a song or folder, Garoove gets Google Play ready to make a token (usually once each time Garoove runs); nothing about the share goes to Google then. When you share with a card picture, Garoove asks Google Play for an integrity token for that exact share. A share without a card picture never asks for a token. The token goes to the share host with the share, and the share host sends it to Google to check that the request came from a real copy of Garoove installed from Google Play. To get ready, and to make and check the token, Google receives signals about your device and the app (for example, whether the app is the genuine one from Google Play and whether the device looks genuine), under Google's terms and privacy policy. We get back only Google's verdict, not those signals. If there's no token or it doesn't pass, the share still goes up, just without the picture.

Opening a link: for a song or folder link, Garoove sends only the link's ID to the share host. Then it checks the songs with our server (the song IDs and your install ID) for YouTube's "made for kids" label. If that check can't run, nothing plays. A folder from a link is added to your folders (with Undo for a few seconds). If a link can't load (for example, you're offline), Garoove keeps its ID on your phone, shows Retry, and tries again by itself when you're back online or open Garoove, for up to a day. If Garoove opens for the first time from a link, the agreement screen says a friend sent you music, and it plays only after you tap Agree and play.

Getting Garoove from a share link: if you didn't have Garoove and installed it from a share link's page, Google Play passes that link's ID to Garoove (Google Play's "install referrer"). Garoove reads it once, on your phone, right when it first opens, and looks only at the share's ID (and the YouTube video ID, if there is one). Before you agree, it uses that only to show "A friend sent you music" on the agreement screen; nothing is sent anywhere until you tap Agree. After you agree, it opens that song or folder the same way as a tapped link. (If Google Play doesn't answer within a moment, Garoove shows the normal agreement screen and reads it after you agree; then the friend's link waits in the Import box and opens only when you tap Open link, because that screen never promised to play it.) It doesn't use any advertising ID. It keeps only the date Garoove was installed, so the song never replays.

Like any website, the share host sees the internet (IP) address of the phone or browser that connects to it, and may use it to stop abuse and to count shares made and opened by country.

The share site sets no cookies for visitors. Its only first-party cookie is a sign-in cookie for the site owner, set only on the owner page (/admin).

Website waitlist (garoove.com)

The garoove.com website has a waitlist form. It's separate from the app: the app itself doesn't ask for your email.

• What we keep: the email address you type, the date you joined, and that you ticked the box agreeing to be emailed. It's stored on our share host (Cloudflare). The form uses Cloudflare Turnstile to stop robots.
• Why: to send you one email when Garoove is on Google Play or on iPhone (whichever list you joined). Nothing else. We don't sell it or share it, and we don't add it to any other list.
• How long: until that one email is sent. Then we delete it.
• Getting off the list: reply to our email, or email ricky@fusiontechai.com, and we'll delete your address.

9. Permissions, other apps and things you send

• Permissions Garoove asks for: the microphone (talking to the DJ, "Hey Garoove", Music Detective) and approximate location while you use the app ("near me" and weather), each one with a card that says why first. It also uses network access, the network's status (to wait for Wi-Fi before the "Hey Garoove" download, and to retry when you're back online), Google Play's install referrer and Google Play's integrity service (made ready when you open the share box; a token only for share card pictures, section 8); Android doesn't ask about those. You can change the microphone and location in Android settings.
• The DJ can open other apps and websites for you, only while Garoove is open on your screen: Google Maps for directions, Uber with the drop-off filled in, your phone's dialer, a business's website, a Google search, or an app's Play Store page. Websites open only as secure (https) pages; any other kind of link the AI suggests is refused, except maps and Play Store links, which go to those apps. You press the final button. The DJ never orders, pays, books, calls or sends anything by itself. Those apps and websites get what's in the link (like an address or search words), under their own privacy policies.
• To open an app by name ("open Uber"), Garoove looks at the list of apps on your phone. That list stays on your phone.
• Garoove doesn't look through your contacts, photos, messages or files. It reads text or a file only when you share it into Garoove yourself (a share link you share in opens like a tapped link).
• When you tap Import Playlist, Garoove looks at your clipboard. If you copied something it can open (a YouTube playlist or video link, a Garoove share link, code or backup), it fills the box with it. Nothing opens until you tap Import or Open link, and anything else on your clipboard is ignored. It stays on your phone unless you import it.
• Save picture saves a share card to your phone's Pictures > Garoove folder. Back Up My DJ makes a text file of your lists and the name in your DJ profile. Both go only where you put them.

10. Who gets your data, at a glance

11. How long things are kept

12. Security

• The keys for paid services stay on our server, never in the app.
• The version of Garoove on Google Play makes only encrypted (HTTPS) connections: to our server, the share host, YouTube, the Vosk download and everyone else. It refuses plain, unencrypted connections.
• Your words (searches, weather, "near me", what you say to the DJ, health notes) ride inside the encrypted request, not in the web address (section 3).
• Our internal test builds can also reach our server over a USB cable, home Wi-Fi or a private VPN link without HTTPS. A pairing key keeps other devices out.
• Our server's connections to YouTube, the AI providers, Cartesia, ACRCloud, AudD, the map services and the National Weather Service use HTTPS.
• No system is perfectly safe.

13. DJ Lines (purchases)

In Garoove 1.0.2 and later, DJ Lines (the paid voice lines) work like this:

• New installs get 20 free DJ lines.
• Garoove Monthly and Boosts are bought through Google Play. Google handles the payment, and we never see your card.
• All purchases are final. You get free DJ lines to try Garoove before you buy, so we don't give refunds ourselves. Google Play may still refund a purchase under its own refund policy. If Google Play or your bank reverses a payment, the DJ lines from that purchase are removed; lines you already used stay used.
• Purchases are tied to the Google account you used, and you can restore them through Google Play.

For purchases, our server keeps each purchase's order ID and product (and, for Garoove Monthly, each period's end date), tied to a hashed device ID, plus a hashed copy of each purchase token (never the raw token). It asks Google Play whether a purchase is real before giving lines, and checks Google Play's list of refunds and chargebacks so lines from a reversed payment can be removed.

14. What we don't do

• We don't put ads in Garoove, and there are no advertising or analytics trackers in our code. (YouTube's player may show YouTube's own ads, see section 1.)
• We don't sell or rent your data, and we don't use it for ads.
• No accounts and no sign-in. The app itself doesn't ask for your email. We only have your email if you write to us or join the website waitlist (section 8).
• No advertising ID. Garoove doesn't ask for it.

15. Children

Garoove is for adults 18 and over. It is not directed to anyone under 18, and we don't knowingly collect data from anyone under 18. Garoove checks YouTube's "made for kids" label on songs from searches, imports, backups and share links, and it doesn't play those videos. If the check can't run, nothing plays. If you think someone under 18 has used Garoove, use Delete my data on that phone, or email us and we'll help.

16. Your choices and deleting your data

• Delete my data: Settings > Legal & privacy > Delete my data. Step by step: https://fusiontechai.com/aidj/delete
• On your phone it erases everything in section 2 (except the speech model and the install date) and clears the YouTube player's cookies and storage.
• It asks our server to delete every log line and report tied to your install ID, to close your phone's AI conversation (no other user's data is touched), and to delete your phone's Grok conversations if there are any.
• Then Garoove restarts like a fresh install, with new IDs, and asks you to agree again.
• If our server can't be reached, the app shows a short code (your old install ID). Email it to ricky@fusiontechai.com and we'll delete the rest by hand within 30 days.
• What Delete my data can't reach:
• share links you already sent: unshare them first in Library > My shares; afterwards, email us the link (section 8);
• pictures and backups you saved to your phone's Pictures or Downloads folder (delete them in your Files or Gallery app);
• the YouTube search cache, the station cache, the "near me" cache and the blocked lists, which aren't linked to you;
• older server log lines from before October 12, 2026, which have no install ID (they delete themselves 30 days after they were written);
• copies kept by the services in sections 4 to 8 under their own policies.
• Uninstalling Garoove erases its data on your phone. Our server's log clears itself after 30 days, but reported lines stay until 12 months after they arrived (section 11). To remove those right away, use Delete my data before you uninstall, or email us.
• Other choices: turn off Hands-Free in Settings; turn off the microphone or location in Android settings; edit or clear your DJ memory in Settings > DJ Memory; leave "Put my first name on it" off when you share; unshare links in Library > My shares.
• Questions, or requests to see or delete your data: email ricky@fusiontechai.com. Garoove has no accounts, so our records aren't under your name. Delete my data in the app is the surest way to find and delete them.

Your rights (EU/UK and US states)

Garoove launches in the United States only. If privacy laws where you live give you rights (for example the EU or UK GDPR, or US state laws like California's), here is how they apply:

• What's on our server: the 30-day log, reported lines and your phone's short-term AI conversation, all tied to your install ID, not your name (section 3); share links you made (section 8); and waitlist emails (section 8).
• Legal basis: we use this data to run the service you asked for (the DJ, its voice, song search, share links). We use the microphone and your approximate location only with your OK, and you can take that back any time in Android settings. We send a waitlist email only because you asked for it.
• Your rights: to see (access) your data, to have it deleted, and to object to how we use it.
• How: use Delete my data in the app (https://fusiontechai.com/aidj/delete), or email ricky@fusiontechai.com with the code the app shows there. We delete server records within 30 days. Because Garoove has no accounts, that code is how we find your records.

17. Changes

If we change this policy, we'll update the dates at the top. If the change matters, Garoove will ask you to agree again before you keep using it.

What changed in v2 (October 12, 2026): your AI conversation is kept separate per phone; location is approximate only and asked when first needed; "Hey Garoove" is on-phone only and asks before downloading on mobile data; Android backup is off; Google Places results are never stored and the "near me" cache keeps 30 days; weather is said in your DJ's personality; custom personalities get a safety check; My shares with Unshare, and an optional first name on share links; "Always listening" is not in the Google Play version; the app opens other apps and websites only while it's open, and only secure web pages; the Google Play version uses HTTPS only.

What changed in v3 (October 12, 2026): every link Garoove makes is listed in My shares with Unshare (no more basic song links; Retry when the share host can't be reached); the install referrer is read at first launch only to show "a friend sent you music", with nothing sent until you tap Agree; Play Integrity on share card pictures (Google Play is made ready when you open the share box, and only a share with a card picture asks for a token); the voice gets your personality's name with each line; stations from public YouTube playlists (station cache, 30 days); your words travel in the request body, not the web address; "Hey Garoove" sends our server only a note that it woke, never the words it heard; the blocked-words filter on every line and every folder name the DJ makes up, and the safety check now holds back anything it can't check; a custom personality that fails the safety check is switched off with a reason; reports carry a review status, are reviewed within 7 days and are deleted 12 months after they arrive.

What changed in v4 (October 12, 2026): Garoove is for adults 18 and over (section 15; it was 13 and over).

What changed in v5 (October 14, 2026): the app is now called Garoove, and its wake phrase is "Hey Garoove"; OpenAI runs through our OpenAI API business account; one fewer backup AI provider (section 7); our mailing address; the garoove.com website waitlist (section 8); the delete-my-data page; your rights (EU/UK and US states, section 16); Garoove launches in the US only.

What changed in v5.1 (October 14, 2026): weather and town lookups use the U.S. Census Bureau's public list of places (a file on our own server) and the U.S. National Weather Service; OpenAI's moderation service checks every line and name; DJ and personality names can't be a real person's name; Google Places results are never sent to an AI; what happens if you tell Garoove you might hurt yourself (988 / 911, section 7).

What changed in v6 (October 29, 2026): purchases are now Garoove Monthly and Boosts, and section 13 says exactly which purchase details our server keeps (order ID, product, subscription end date, a hashed device ID and hashed purchase tokens).

18. Law

This policy is governed by the laws of the State of Maryland, USA, except where the law where you live says otherwise. Nothing in it takes away privacy or consumer-protection rights you have under the law where you live.

19. Contact

Fusion Tech AI LLC, a Maryland limited liability company. 109 E Chestnut St, Salisbury, MD 21801, USA. Email: ricky@fusiontechai.com. Copyright notices: https://garoove.com/dmca