Privacy Policy

1. Our approach

Muso is built around something personal: you tell us about someone you care about, and we turn it into a song. We collect what we need to make that song, deliver it, and keep the service running, and nothing beyond that. Your songs stay private to your account unless you choose to share one. We do not sell your data, and we do not show you ads.

This policy explains what we collect, why, who processes it on our behalf, and how to get it deleted.

2. What we collect

Account information.

• Your email address, and a password we never store in readable form. If you use Sign in with Apple, we receive the identifier Apple provides and the email you choose to share, which may be a private relay address.
• An optional display name and avatar.

What you create.

• The details you give us about a song: the occasion, what you tell us about the recipient, any lyrics you write, and the style choices you make.
• The finished song audio, its title, artwork choices, and any text you add to a cover.
• Whether a song is shared, its share link, and how many times a shared song has been played.

Purchases.

• A record of credits granted and spent, and whether you hold an active subscription. Payments are processed by Apple, so we never receive your card number or billing address.

Device and abuse prevention.

• A one-way token derived from Apple's DeviceCheck, so free credits cannot be claimed repeatedly from one device. It cannot be reversed to identify your device.
• Basic technical logs, such as request times, error records, and rate-limit counters, used to keep the service working and prevent abuse.

Product analytics.

• Events describing how the app is used, such as screens opened and songs created, linked to your account identifier so we can understand and improve the experience.

3. Sharing a song

Songs are private to your account until you choose to share one. Nothing you create is published, listed, or visible to other users by default.

When you share a song, we create a link to a page for it. That page can be opened by anyone who has the link, so treat a share link as public: it may be forwarded beyond the person you sent it to, and we cannot control where it travels. What a share page shows may change as we develop the app, so share a link only with people you are comfortable having access to it.

You can unpublish a song at any time, which stops the link working. Copies already downloaded by someone else stay with them.

4. How we use what we collect

• To create your songs and deliver them to you.
• To run your account, apply credits correctly, and honour your subscription.
• To host shared songs for the people you send them to.
• To keep Muso working and safe: preventing abuse, diagnosing faults, enforcing limits.
• To understand how the app is used so we can improve it.
• To reply when you contact us.
• To meet legal obligations.

Where the law requires a legal basis, we rely on performing our contract with you (making and delivering songs, managing your account), our legitimate interests (security, abuse prevention, product improvement), and consent where you have given it.

5. Who processes data for us

We use a small number of specialist providers. Each receives only what it needs, and none of them is permitted to use your data for their own marketing.

• Cloud platform. Hosts our database, authentication, and server functions.
• AI generation providers. Receive the style, lyrics, and description needed to write and record your song. They do not receive your email address or account identity.
• Storage and content delivery. Stores song audio and serves it to you and to anyone you share with.
• Purchase validation. Confirms App Store purchases and subscription status.
• Product analytics. Records app usage events.
• Apple. Handles payment, and provides Sign in with Apple and DeviceCheck.

6. What we do not do

• We do not sell your personal information.
• We do not show advertising, and we do not share data with ad networks.
• We do not read your gift details as part of creating a song. Generation is automated.
• We do not publish any song you have not chosen to share.

7. Storage and security

Data is encrypted in transit. Access to song data is enforced at the database level by row-level security, so one account cannot read another's songs, and our servers hold the only keys that can change credits or purchases, and the app itself holds none. Passwords are stored only as hashes. No system is perfectly secure, but we design so that a mistake in the app cannot expose other people's data.

8. How long we keep things

• Songs and account data. Kept until you delete them, or delete your account.
• Deleted songs. Removed from your library immediately; the underlying audio file is deleted shortly afterwards by a scheduled clean-up.
• Purchase records. Retained as long as needed for tax and accounting obligations, even after account deletion.
• Abuse-prevention tokens. The device token is kept after account deletion, unlinked from you, so free credits cannot be re-claimed repeatedly.

9. Deleting your data

You can delete individual songs at any time from your library. You can delete your entire account from within the app.

When you request account deletion, your account is disabled immediately and your songs are unpublished, so shared links stop working straight away. The account and its data are then permanently erased after 30 days. The delay exists so an accidental or compromised deletion can be reversed. Contact us within that window if you change your mind.

Depending on where you live, you may also have the right to access, correct, export, or restrict the processing of your data, to object to it, and to complain to your local data protection authority. Email us and we will help. We do not charge for these requests or treat you differently for making one.

10. Children

Muso is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, please contact us and we will delete it.

11. International transfers

Muso is available internationally and our providers operate globally, so your data may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

12. Changes to this policy

We will update this policy as Muso changes. The date at the top always shows the current version. If a change materially affects how we handle your data, we will tell you in the app or by email before it takes effect.

13. Contact

Questions, requests, or concerns: [email protected].