Spotify

• What does the app collect beyond what it needs to work?

  They collect more than account and playback: search and browsing history, device IDs, inferences, ad-partner data, optional precise location, and more.

• Does it record your voice, face or body, and what happens to that?

  If you use voice features they collect voice recordings and list Voice Data among data used to train machine learning models. Age-check face photos are deleted right after the check.

• Are your chats and uploads used to train AI models, and is that off by default?

  They say they use personal data, including usage data and AI prompts, to train algorithmic and machine learning models. The policy does not describe a way to opt out of that training.

• Can employees or contractors read your conversations, and when?

  Not stated in the documents.

• Are you profiled or tracked for advertising?

  They run tailored ads using their data and data from advertising partners, with an opt-out. Partners can combine what Spotify shares with other data they have.

• Do they sell or share your data, and can you opt out?

  They share user and usage data with advertising and marketing partners and say some states treat tailored ads as sharing or selling. You can opt out in Tailored Ads.

• What rights do they take over what you type and what the AI makes?

  The Authors terms say you keep ownership of uploads but grant Spotify a worldwide license to use that content to run, develop, train, promote, and distribute the service. Consumer streaming terms were not in the documents we read.

• How long do they keep your data after you delete it, and can you delete it in the app?

  You can remove some saved items in the app, download data, or follow support steps to close the account. Search queries expire after 90 days; streaming history lasts for the life of the account, and some data can stay after deletion.

• Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

  They build inferences about your age, interests, and preferences from how you use Spotify. The policy does not describe a memory feature you can view, edit, and fully switch off.

• Do they commit to basic security, and have they leaked data?

  They describe encryption, pseudonymization, access and retention policies, and say no system is completely secure. They do not describe an independent audit in these documents.

• Is there a real age gate, and are teens protected?

  There is a country Age Limit and minors need parent consent. They can use optional third-party age checks. The standard service is not for children under that limit.

• Will they tell you when the rules change, and is the policy specific?

  The privacy policy is dated July 1, 2026 and lists data types, purposes, and some retention periods. They say they will give prominent notice of material changes.

• Can they close your account without warning, and can you get your data out first?

  For Authors, Spotify may suspend or end access at any time if they believe you broke the terms, must follow the law, or see harmful conduct, and they generally will not refund. Notice is mainly if they stop offering the service.

• If something goes wrong, who pays?

  The Authors terms provide the service as-is, cap most claims at fees paid in twelve months or $30, and require you to cover Spotify’s losses and lawyer fees in many cases.

• Do subscriptions renew on their own, and can you get a refund?

  Not stated in the documents.

The privacy policy is 6,564 words at a fairly hard level (Flesch reading ease 51.2); the terms are 7,308 words at a college graduate level.