Last changed 2026-10-04. The version before this date described the games only; this one covers the Resonance Lounge app as well.
1.1 This policy explains what personal data narayana games UG (haftungsbeschränkt) ("we", "us", "our") processes when you use Resonance Lounge (the app for iOS, Android, the web and desktop, and this website, resonancelounge.app), and when you play our games Holodance and Beat the Rhythm, which use the same account service. We are the controller for all of it. For who we are, see Section 13.
1.2 Resonance Lounge is for adults. You must be at least 18 years old to use it, and we do not knowingly process the data of anybody younger. If you learn that somebody under 18 has an account, write to us and we will delete it.
1.3 The app contains no advertising, no advertising identifiers and no third-party analytics or tracking. This website uses our own Matomo installation (see Section 10) and nothing else that tracks you.
1.4 How to delete your account, or some of your data without the account, is on the Data Deletion page, together with exactly what we keep afterwards and for how long. You can also download your account data under your account management.
1.5 Where this policy says that a third party acts as a processor, it processes data only on our instructions and on our behalf, under a data processing agreement, and for no purpose of its own.
2.1 Account data: your email address, a password (stored only as a hash), whether the address is confirmed, your two-factor settings and recovery codes (hashed), your phone number if you add one (for codes and recovery only, never for signing up), the external logins you link (Apple, Google, Steam, Microsoft, Facebook, X, Spotify), your language, your country (your own answer), and when the account was created. Purpose: running your account, signing you in, keeping it secure, recovering it, and contacting you about it. Legal basis: performance of the contract with you (Art. 6(1)(b) GDPR); for security measures, our legitimate interest in protecting the service and its members (Art. 6(1)(f)).
2.2 Identity and profile data: the nickname, picture, bio, skills and interests of each identity you present, which you choose and which other members see. You may use any name; a legal name is never required. Pictures are reduced, re-encoded and stripped of metadata (EXIF, location) before storage. Purpose: showing you to the people you choose to show yourself to. Legal basis: contract.
2.3 Connections, circles and encounters: who you are connected with and as which identity, the circles and events you are a member of and your roles in them, invitations you create and redeem, the codes you scan, the record that you met somebody in real life, the introductions and resonance scores computed between you and others, and what you choose to share with whom. Purpose: the core of the service, connecting people. Legal basis: contract.
2.4 Location, in two forms, both only if you switch them on:
(a) Around you (presence): your latest position, coarsened to an area of roughly a few hundred metres, kept as one record per member that is overwritten each time and deleted when you switch presence off. We never keep a location history. Purpose: telling you when somebody you know is nearby.
(b) Meeting requests: exact coordinates, kept only while both sides of a request to meet have accepted, and deleted the moment the request ends, declines or expires.
Legal basis: your consent (Art. 6(1)(a)), given by switching the feature on and withdrawn by switching it off. Where the app uses Bluetooth or the local network to notice other members next to you, no location is computed or stored; the radio is used only while you switch it on.
2.5 Communications: the text, voice notes, pictures, videos and documents you send in chats; voice and video calls; and, where a conversation is recorded or transcribed, the recording and the transcript, the summary written from it and its translations. Whether a call is transcribed follows the choice of the person who starts it and is shown to everybody in it; recording is an explicit act, announced in the conversation. A conversation record belongs to everyone who took part and is deleted when every participant agrees. Chat, calls, recordings and transcription run on the infrastructure of Stream (getstream.io), acting as our processor; summaries and translations are produced by a language model run by Anthropic as our processor, from the transcript text only. Purpose: the service itself. Legal basis: contract; for recording, your consent and that of the other participants.
2.6 Device and usage data: an identifier the app generates on installation; your device's own per-device identifier (the identifier for vendor on iOS, the Android ID on Android), which we use only for fraud prevention and abuse review and never for advertising; what the device declares about itself (operating system and version, model, whether it is an emulator or rooted, app version, time zone, screen); push notification tokens; and, for every registration, launch, login and sign-out, the IP address, the country derived from it by our edge provider, and the user agent. We also record when the app was opened and for how long, which surface it ran on, and the moments of your onboarding. Purpose: keeping your account and the service secure, finding and investigating abuse, understanding how the app is used, and delivering notifications. Legal basis: legitimate interest (Art. 6(1)(f)) in security and in running the service; for notifications, contract. These facts are never combined into a fingerprint of your device.
2.7 Notifications: push notifications are delivered through Apple (APNs) and Google (FCM), and for messages and calls through Stream, which receive your push token and the notification's content. Where you have opted in, a change to an event you attend may reach you by SMS or WhatsApp through Twilio. Legal basis: contract; your choices in the app decide what is sent.
2.8 Subscriptions and payments: which plan you are on, through which store or payment provider, when it started and ends, and the provider's transaction references. Payment is taken by Apple (App Store), Google (Google Play) or Stripe (web and desktop); we never see card numbers or bank details, only a customer reference. The region your prices come from follows your country and, in a store, the store's own territory. Purpose: providing what you paid for, accounting, and the legal duty to keep financial records. Legal basis: contract; legal obligation (Art. 6(1)(c)).
2.9 Identity verification (optional, on paid plans): if you choose to verify an identity, a specialised provider acting as our processor (Didit, or Stripe Identity as a fallback) captures your government ID and a liveness check and matches the face against that identity's profile picture. We keep only what a law-enforcement handover would need: the legal name, a stage name where the document carries one, the document type, number and issuing country, the date of birth, the provider's references and the match result, all encrypted with access to every read logged. Document images and the liveness capture are not retained by us. Purpose: trust and safety between people who meet in real life. Legal basis: your consent; for the retained minimum, our legitimate interest in being able to identify a person who harms another member.
2.10 Date of birth, birth time and place: the date of birth if you give it (age assurance), and optionally the time and place of birth for the matching engines you switch on (astrology, Four Pillars, Jyotish, Human Design), with the readings computed from them. Legal basis: consent, withdrawn by clearing the fields.
2.11 Reports and moderation: reports you file about others and others file about you, with the reason, your words, and the identifiers of the conversations and encounters you shared in the week before; suspensions and circle bans with their reasons; appeals; and the device facts of 2.6 where an abuse case needs them. Purpose: keeping the service safe, which the stores we publish in also require of us. Legal basis: legitimate interest; where the law requires it, legal obligation.
2.12 Game data (Holodance, Beat the Rhythm): play sessions, scores and leaderboard entries under your nickname, beatmap ratings, and the movement data of replays; where you opt in, the fitness estimates (calories) the games compute. Purpose: the games. Legal basis: contract. This data is collected by the games, not by the Resonance Lounge app.
2.13 Crash and error reports: from the build that first ships it, the app sends a report to Sentry (EU region, acting as our processor) when it crashes or meets an error: the error and where in the code it happened, the app version, device model and operating system, and the steps just before. No IP address is stored, no name, no message content. Purpose: fixing defects. Legal basis: legitimate interest. The server's own logs are kept in Google Cloud.
2.14 Correspondence: what you write to us, and our answers. Legal basis: legitimate interest in answering you and in keeping a record.
2.15 We may process any of this data where necessary to establish, exercise or defend legal claims, to comply with a legal obligation, or to protect somebody's vital interests.
2.16 Please do not give us another person's personal data unless we ask you to.
3.1 Processors, each under a data processing agreement and each only for the purpose named: Google Cloud (Cloud Run, Cloud SQL, Secret Manager, logging; region europe-west1, Belgium) for the account service and database; MongoDB Atlas for the game database; Cloudflare in front of the website and for delivering downloads and images; Stream for chat, calls, recordings and transcripts; Stripe for web payments; Twilio for codes by SMS and WhatsApp; Apple and Google for push notifications; Anthropic for conversation summaries and translations; Didit and Stripe Identity for identity verification; Sentry for crash reports.
3.2 Independent controllers: the stores you install the app from and pay through (Apple App Store, Google Play) process your purchase under their own policies, and so do the providers you sign in with (Apple, Google, Steam, Microsoft, Facebook, X, Spotify) and, for the games, Steam, Viveport, Meta, Microsoft, Sony and Unity Technologies (see 3.3). We receive from a sign-in provider your identifier there, your name and, where the provider has verified it, your email address.
3.3 Our games use Unity Analytics, governed by the Privacy Policy of Unity Technologies; you can opt out in the games' settings. Game progression, achievements and leaderboards are also transmitted to the store you bought a game from: Steam, Viveport, Meta, Microsoft, PlayStation, Google Play, Apple. Fitness tracking through YUR.fit is opt-in and governed by their terms.
3.4 Other members see what you choose to show them: the identity you present, and in a conversation what you say in it. Content you publish (a circle's public programme, for example) can be seen by anyone it is published to.
3.5 Authorities: we disclose personal data where the law obliges us to, or where it is necessary to protect a person. A report of potentially criminal behaviour is reviewed by us first and handed on only when it stands up to that review.
3.6 We do not sell personal data, and we do not give it to anybody for advertising.
4.1 Our servers and databases are in the European Union (Belgium and Ireland). Several processors in Section 3 are or may be in the United States or process data there (Stream, Stripe, Twilio, Apple, Google, Anthropic, Cloudflare, MongoDB, Sentry). Transfers rest on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the Commission's standard contractual clauses, with additional safeguards where needed.
4.2 What you publish or send to other members can be read by them wherever they are.
5.1 All data travels encrypted (TLS); nothing goes over plain connections. Passwords and recovery codes are stored as hashes; identity verification data is encrypted at rest with every read logged; secrets live in a managed secret store. The service runs in the European Union. We review access to member data and log it.
6.1 We keep personal data no longer than its purpose needs. In particular:
(a) account, identity, connection, circle, settings and communications data: for as long as your account exists, and deleted with it (Section 7), except for what the Data Deletion page lists as kept;
(b) presence location: the latest position only, deleted when you switch presence off; meeting coordinates: deleted when the request ends;
(c) conversation records (recordings, transcripts, summaries): until every participant asks for their deletion, or until the account of the last participant is deleted;
(d) the install record and access log of 2.6: 365 days from each entry, then removed by a scheduled sweep;
(e) subscription and payment records: 10 years after the end of the year they belong to (German commercial and tax law);
(f) identity verification data: 5 years after the verification, then blanked, or immediately on account deletion; the log of who read it is kept;
(g) reports, suspensions and bans: up to 5 years after they were decided, keyed by an internal id once the accounts involved are deleted;
(h) crash reports: 90 days;
(i) database backups: the account database keeps seven daily backups and a seven-day point-in-time log (about one week); the game database follows MongoDB Atlas's backup schedule. A backup is restored only to recover from a failure, and deletions made since are then repeated.
6.2 An account that was registered and never given an email address and password is kept for abuse review; we are working out the period after which such accounts are removed and will state it here.
6.3 We may keep data beyond these periods where a legal obligation requires it or to protect somebody's vital interests.
7.1 You can delete your account yourself, at any time, in the app (Identity tab, Your account) and on this website (Manage your account). The deletion runs at once across every surface. The Data Deletion page lists what goes, what stays and why, and how to delete some data without deleting the account. If you cannot sign in, write to [email protected]; we delete within 30 days.
8.1 Under the GDPR you have the right of access (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), to object to processing based on legitimate interest (Art. 21), and to withdraw a consent at any time without affecting the lawfulness of processing before the withdrawal (Art. 7(3)). Some rights have exceptions, for example where we must keep data to comply with a legal obligation.
8.2 You exercise most of them yourself: your account management lets you see, correct, download and delete your data; the app's settings let you withdraw each consent (location, birth data, notifications). For anything else, write to us (Section 13); we answer within a month.
8.3 You have the right to complain to a supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement happened. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach, Germany.
8.4 We make no decisions about you based solely on automated processing that have legal or similarly significant effects. Resonance scores and introductions are suggestions you may ignore; moderation decisions are made by people.
9.1 The app keeps your session, your settings and a copy of your chats on your device, in the device's secure storage where the platform offers it, so it works when you are offline. Nothing in the app is a tracking cookie.
9.2 This website uses cookies for signing you in and keeping you signed in, for protecting forms against forgery, and for remembering your cookie choice. These are strictly necessary. The analytics cookie of Section 10 is the only other one.
9.3 Most browsers let you refuse or delete cookies; see your browser's help. Blocking the necessary cookies stops you from signing in here.
10.1 This website (not the app) uses our own Matomo installation, hosted by us, to count visits and see which pages are read. It respects your browser's Do Not Track setting, and you can opt out below. The legal basis is our legitimate interest in knowing how the site is used. Google Analytics is not used on this website; some of our pages on other platforms (Steam, YouTube) are measured by those platforms under their own policies.
11.1 We may update this policy by publishing a new version here, with the date of the change at the top. For a change that matters to you, we tell you in the app or by email.
12.1 Earlier versions of this document were based on a template from SEQ Legal (https://seqlegal.com).
13.1 Resonance Lounge, this website and our games are owned and operated by narayana games UG (haftungsbeschränkt).
13.2 We are registered at Amtsgericht München (Munich), Germany under registration number HR 195759, and our registered office and principal place of business is at Forellenstraße 17, 82266 Inning am Ammersee, Germany.
13.3 You can contact us by post at that address, by telephone on +49 (8143) 9928688, or by email at [email protected] for anything about your data and [email protected] for everything else.
1.1 These terms and conditions shall govern your use of our website and services.
1.2 By using our website, you accept these terms and conditions in full; accordingly, if you disagree with these terms and conditions or any part of these terms and conditions, you must not use our website.
1.3 If you register with our website, submit any material to our website or use any of our website services, we will ask you to expressly agree to these terms and conditions.
1.4 You must be at least 18 years of age to use our website; by using our website or agreeing to these terms and conditions, you warrant and represent to us that you are at least 18 years of age.
1.5 Our website uses cookies; by using our website or agreeing to these terms and conditions, you consent to our use of cookies in accordance with the terms of our privacy and cookies policy.
2.1 This document was created using a template from SEQ Legal (https://seqlegal.com).
3.1 Copyright (c) 2018, narayana games UG.
3.2 Subject to the express provisions of these terms and conditions:
(a) we, together with our licensors, own and control all the copyright and other intellectual property rights in our website and the material on our website; and
(b) all the copyright and other intellectual property rights in our website and the material on our website are reserved.
4.1 You may:
(a) view pages from our website in a web browser;
(b) download pages from our website for caching in a web browser;
(c) print pages from our website;
(d) stream audio and video files from our website;
(e) use our website services by means of a web browser; and
(f) play the beatmaps downloaded from this Website in any rhythm game that can read them, subject to the other provisions of these terms and conditions.
4.2 Unless you own or control the relevant rights in the material, you must not:
(a) republish material from our website (including republication on another website);
(b) sell, rent or sub-license material from our website.
4.3 Notwithstanding Section 4.2, you may redistribute our newsletter in print and electronic form to any person.
4.4 We reserve the right to restrict access to areas of our website, or indeed our whole website, at our discretion; you must not circumvent or bypass, or attempt to circumvent or bypass, any access restriction measures on our website.
5.1 You must not:
(a) use our website in any way or take any action that causes, or may cause, damage to the website or impairment of the performance, availability or accessibility of the website;
(b) use our website in any way that is unlawful, illegal, fraudulent or harmful, or in connection with any unlawful, illegal, fraudulent or harmful purpose or activity;
(c) use our website to copy, store, host, transmit, send, use, publish or distribute any material which consists of (or is linked to) any spyware, computer virus, Trojan horse, worm, keystroke logger, rootkit or other malicious computer software;
(d) conduct any systematic or automated data collection activities (including without limitation scraping, data mining, data extraction and data harvesting) on or in relation to our website without our express written consent;
(e) access or otherwise interact with our website using any robot, spider or other automated means, except for the purpose of search engine indexing;
(f) violate the directives set out in the robots.txt file for our website; or
(g) use data collected from our website for any direct marketing activity (including without limitation email marketing, SMS marketing, telemarketing and direct mailing).
5.2 You must not use data collected from our website to contact individuals, companies or other persons or entities.
5.3 You must ensure that all the information you supply to us through our website, or in relation to our website, is true, accurate, current, complete and non-misleading.
6.1 You may register for an account with our website by completing and submitting the account registration form on our website, and clicking on the verification link in the email that the website will send to you.
6.2 You should not allow any other person to use your account to access the website.
6.3 You may want to notify us in writing immediately if you become aware of any unauthorised use of your account.
6.4 You must not use any other person's account to access the website.
7.1 If you register for an account with our website, you will be asked to choose a user ID and password.
7.2 Your user ID must not be liable to mislead and must comply with the content rules set out in Section 10; you must not use your account or user ID for or in connection with the impersonation of any person.
7.3 You must keep your password confidential.
7.4 You must notify us in writing immediately if you become aware of any disclosure of your password.
7.5 You are responsible for any activity on our website arising out of any failure to keep your password confidential, and may be held liable for any losses arising out of such a failure.
8.1 We may:
(a) suspend your account;
(b) cancel your account, at any time in our sole discretion without notice or explanation.
8.2 You may cancel your account on our website using your account control panel on the website.
9.1 In these terms and conditions, "your content" means all works and materials (including without limitation text, graphics, images, audio material, video material, audio-visual material, scripts, software and files) that you submit to us or our website for storage or publication on, processing by, or transmission via, our website.
9.2 You grant to us a worldwide, irrevocable, non-exclusive, royalty-free licence to use, reproduce, store, adapt, publish, translate and distribute your content in any existing or future media.
9.3 You grant to us the right to sub-license the rights licensed under Section 9.2.
9.4 You grant to us the right to bring an action for infringement of the rights licensed under Section 9.2.
9.5 You hereby waive all your moral rights in your content to the maximum extent permitted by applicable law; and you warrant and represent that all other moral rights in your content have been waived to the maximum extent permitted by applicable law.
9.6 You may edit your content to the extent permitted using the editing functionality made available on our website.
9.7 Without prejudice to our other rights under these terms and conditions, if you breach any provision of these terms and conditions in any way, or if we reasonably suspect that you have breached these terms and conditions in any way, we may delete, unpublish or edit any or all of your content.
10.1 You warrant and represent that your content will comply with these terms and conditions.
10.2 Your content must not be illegal or unlawful, must not infringe any person's legal rights, and must not be capable of giving rise to legal action against any person (in each case in any jurisdiction and under any applicable law).
10.3 Your content, and the use of your content by us in accordance with these terms and conditions, must not:
(a) be libellous or maliciously false;
(b) infringe any copyright, moral right, database right, trade mark right, design right, right in passing off, or other intellectual property right;
(c) infringe any right of confidence, right of privacy or right under data protection legislation;
(d) constitute negligent advice or contain any negligent statement;
(e) constitute an incitement to commit a crime, instructions for the commission of a crime or the promotion of criminal activity;
(f) be in contempt of any court, or in breach of any court order;
(g) be in breach of racial or religious hatred or discrimination legislation;
(h) be in breach of any contractual obligation owed to any person;
(i) depict violence in an explicit, graphic or gratuitous manner;
(j) be untrue, false, inaccurate or misleading;
(k) consist of or contain any instructions, advice or other information which may be acted upon and could, if acted upon, cause illness, injury or death, or any other loss or damage;
(l) constitute spam;
(m) be offensive, deceptive, fraudulent, threatening, abusive, harassing, anti-social, menacing, hateful, discriminatory or inflammatory.
11.1 We do not warrant or represent:
(a) the completeness or accuracy of the information published on our website;
(b) that the material on the website is up to date; or
(c) that the website or any service on the website will remain available.
11.2 We reserve the right to discontinue or alter any or all of our website services, and to stop publishing our website, at any time in our sole discretion without notice or explanation; and save to the extent expressly provided otherwise in these terms and conditions, you will not be entitled to any compensation or other payment upon the discontinuance or alteration of any website services, or if we stop publishing the website.
11.3 To the maximum extent permitted by applicable law and subject to Section 12.1, we exclude all representations and warranties relating to the subject matter of these terms and conditions, our website and the use of our website.
12.1 Nothing in these terms and conditions will:
(a) limit or exclude any liability for death or personal injury resulting from negligence;
(b) limit or exclude any liability for fraud or fraudulent misrepresentation;
(c) limit any liabilities in any way that is not permitted under applicable law; or
(d) exclude any liabilities that may not be excluded under applicable law.
12.2 The limitations and exclusions of liability set out in this Section 12 and elsewhere in these terms and conditions:
(a) are subject to Section 12.1; and
(b) govern all liabilities arising under these terms and conditions or relating to the subject matter of these terms and conditions, including liabilities arising in contract, in tort (including negligence) and for breach of statutory duty, except to the extent expressly provided otherwise in these terms and conditions.
12.3 To the extent that our website and the information and services on our website are provided free of charge, we will not be liable for any loss or damage of any nature.
12.4 We will not be liable to you in respect of any losses arising out of any event or events beyond our reasonable control.
12.5 We will not be liable to you in respect of any business losses, including (without limitation) loss of or damage to profits, income, revenue, use, production, anticipated savings, business, contracts, commercial opportunities or goodwill.
12.6 We will not be liable to you in respect of any loss or corruption of any data, database or software.
12.7 We will not be liable to you in respect of any special, indirect or consequential loss or damage.
12.8 You accept that we have an interest in limiting the personal liability of our officers and employees and, having regard to that interest, you acknowledge that we are a limited liability entity; you agree that you will not bring any claim personally against our officers or employees in respect of any losses you suffer in connection with the website or these terms and conditions (this will not, of course, limit or exclude the liability of the limited liability entity itself for the acts and omissions of our officers and employees).
13.1 Without prejudice to our other rights under these terms and conditions, if you breach these terms and conditions in any way, or if we reasonably suspect that you have breached these terms and conditions in any way, we may:
(a) send you one or more formal warnings;
(b) temporarily suspend your access to our website;
(c) permanently prohibit you from accessing our website;
(d) block computers using your IP address from accessing our website;
(e) commence legal action against you, whether for breach of contract or otherwise; and/or
(f) suspend or delete your account on our website.
13.2 Where we suspend or prohibit or block your access to our website or a part of our website, you must not take any action to circumvent such suspension or prohibition or blocking (including without limitation creating and/or using a different account).
14.1 We may revise these terms and conditions from time to time.
14.2 We will give you written notice of any revision of these terms and conditions, and the revised terms and conditions will apply to the use of our website from the date that we give you such notice; if you do not agree to the revised terms and conditions, you must stop using our website.
14.3 If you have given your express agreement to these terms and conditions, we will ask for your express agreement to any revision of these terms and conditions; and if you do not give your express agreement to the revised terms and conditions within such period as we may specify, we will disable or delete your account on the website, and you must stop using the website.
15.1 You hereby agree that we may assign, transfer, sub-contract or otherwise deal with our rights and/or obligations under these terms and conditions.
15.2 You may not without our prior written consent assign, transfer, sub-contract or otherwise deal with any of your rights and/or obligations under these terms and conditions.
16.1 If a provision of these terms and conditions is determined by any court or other competent authority to be unlawful and/or unenforceable, the other provisions will continue in effect.
16.2 If any unlawful and/or unenforceable provision of these terms and conditions would be lawful or enforceable if part of it were deleted, that part will be deemed to be deleted, and the rest of the provision will continue in effect.
17.1 A contract under these terms and conditions is for our benefit and your benefit, and is not intended to benefit or be enforceable by any third party.
17.2 The exercise of the parties' rights under a contract under these terms and conditions is not subject to the consent of any third party.
18.1 Subject to Section 12.1, these terms and conditions, together with our privacy and cookies policy (how to delete your account and your data is on the data deletion page), shall constitute the entire agreement between you and us in relation to your use of our website and shall supersede all previous agreements between you and us in relation to your use of our website.
19.1 These terms and conditions shall be governed by and construed in accordance with German law.
19.2 Any disputes relating to these terms and conditions shall be subject to the exclusive jurisdiction of the courts of Germany.
20.1 We are registered in shared register of companies for the German federal states; you can find the online version of the register at https://www.handelsregister.de/, and our registration number is HR 195759.
20.2 Our VAT number is DE 281613106.
21.1 This website is owned and operated by narayana games UG (haftungsbeschränkt).
21.2 We are registered at Amtsgericht München (Munich), Germany under registration number HR 195759, and our registered office is at Forellenstraße 17, 82266 Inning am Ammersee.
21.3 Our principal place of business is at Forellenstraße 17, 82266 Inning am Ammersee.
21.4 You can contact us:
(a) by post, to the postal address given above;
(b) by telephone, on +49 (8143) 9928688; or
(c) by email, using [email protected].