Privacy Policy

Last updated: 3 October 2026

Kantus is an app where composers and performers of new music show their work, find each other and talk. This policy explains what we collect, why, who helps us run the service, and the rights you have.

Who we are

The data controller is The Camillo's Srl, Via del Circo Massimo 9, 00153 Roma, Italy, VAT 18632241008. For anything about your data, write to support@kantus.it.

What we collect

• Account: your email address and a password, which is stored only in hashed form. If you sign in with Google or Apple, we receive an identifier and the email address they share with us; with Apple this can be a private relay address.
• Profile: your name or stage name, handle, photo, short and long biography, role (composer, performer or both), instruments, styles, reference composers, what you are open to, links, and the place you choose. For the place we store its name and the coordinates of that place, picked from a list. The app does not use your device's location.
• What you publish: posts, photos, audio recordings, scores, concert programmes, pieces and performances (including the people you credit), comments, likes and saves.
• What you send: private messages, proposals and requests.
• Safety: the people you block, and the reports you file, including a copy of the reported content as it was when you reported it.
• Notifications: if you allow them, a push token that identifies your device to the notification service, and its platform (iOS or Android).
• Technical data: IP address and request times in the short-lived security logs kept by our hosting provider.

We do not use advertising, we do not use third-party analytics or tracking, and we do not sell or rent your data.

Who can see what

• Your profile, posts, pieces, performances, comments and likes are visible to other Kantus users. When you save someone's profile or post, that person is told it was you.
• Photos, audio, scores and programmes you upload are stored at web addresses that anyone holding the link can open.
• Messages and proposals are visible to the people in the conversation. Our team reads them only to handle a report or when the law requires it.

Why we use it

• To run Kantus for you (account, profile, publishing, search, messages, notifications about activity, the emails that confirm your account or reset your password). Legal basis: the contract between you and us, Article 6(1)(b) GDPR.
• To keep Kantus safe (reviewing reports, removing content, suspending accounts, preventing abuse, protecting the service). Legal basis: our legitimate interest and our legal obligations as an online service, Article 6(1)(f) and (c) GDPR.
• Push notifications are sent only if you allow them on your device. You can switch them off at any time in your phone's settings.

Who helps us run Kantus

These providers process data on our behalf, only to provide their part of the service:

• Supabase: database, sign-in, file storage and server functions. Data is hosted in the European Union (Ireland).
• Aruba S.p.A. (Italy): sending the emails about your account.
• Expo (650 Industries, Inc., USA): delivering app updates and push notifications.
• Google: delivering notifications to Android devices (Firebase Cloud Messaging), and Google sign-in if you use it.
• Apple: delivering notifications to iPhones, and Sign in with Apple if you use it.
• Photon by komoot (Germany): when you type a place name, that text is sent to suggest matching places. Nothing else about you is sent.
• Vercel (Vercel Inc., USA): hosting this website, kantus.it.

Some of these providers are based in the United States. Transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on its Standard Contractual Clauses. The app stores from which you download Kantus (Apple App Store, Google Play) handle the download under their own privacy policies.

How long we keep it

• Your account and everything in it stays until you delete it.
• When you delete your account, we delete your profile, what you published, the messages you sent and the files you uploaded. If you signed in with Apple, we also revoke Kantus's access to your Apple ID.
• Reports about content are kept for as long as we need them to handle the case and defend against legal claims, then deleted.
• Security logs are kept by our hosting provider for a few days.

How to delete your account: kantus.it/delete-account.

Your rights

You can ask to access your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. Write to support@kantus.it from the address on your account and we will answer within one month. You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali, or to the authority where you live.

Age

Kantus is for people aged 18 and over. We do not knowingly collect data from anyone younger.

Changes

If we change this policy in a way that matters, we will tell you in the app before the change applies. The date at the top always shows the current version.