Privacy Policy

Your account email, obviously. Your profile — name, age, city, photos, bio, the prompts you answer. Your music-taste data — artists, tracks, and playlist names, whether that comes from connecting Spotify, Apple Music, or YouTube Music, or from your onboarding answers — plus the taste vectors we derive from it. And your activity on the app: swipes, matches, the messages you send, and any reports involving you.

To find people whose frequency lines up with yours, to keep the platform safe, and to run the service itself — think account recovery, not ad targeting.

We send artist, track, and playlist names — never your messages — to an AI service to derive genre tags and taste vectors. Your conversations stay between you and the person you're talking to.

When you connect Spotify, Apple Music, or YouTube Music, we read your library — the artists, tracks, and playlist names you've saved — to build your Music DNA. It's strictly read-only: we never post, change, or delete anything in your account. For YouTube Music we ask Google only for read-only access to your YouTube data (the youtube.readonly permission), and nothing more.

We use what we read for one thing: creating your taste vectors and finding people you resonate with. We don't sell it, we don't use it for advertising, and we don't use it to train general-purpose AI models. You can disconnect a service anytime in Settings, or revoke Musicrush's access to your Google account directly at myaccount.google.com/permissions.

Musicrush's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your data lives in Supabase/Postgres. Photos are served from unlisted links — not indexed or browsable, but like anything you share online, post what you'd be comfortable showing a date.

We don't sell your data. Full stop. We work with a small set of service providers — for hosting, email delivery, and analytics — and only to the extent they need to keep Musicrush running.

Our core product analytics (PostHog) run cookieless — no tracking cookies, no cross-site tracking, no session recordings. We count events like sign-ups and matches, never the content of your conversations.

We also load Google Tag Manager to manage measurement tags. By default — and until you choose to accept — analytics and advertising storage stay off via Google Consent Mode, so no Google cookies are set. If you accept, tools like Google Analytics may set cookies (such as _ga) and send measurement data to Google, governed by Google's own privacy terms. We don't use any of it for advertising.

You can change your mind anytime: update your cookie preferences. Declining keeps everything cookieless.

We keep your data for as long as your account exists. Want it gone sooner? Email hello@musicrush.ai — self-serve deletion is coming; until then email us and we'll handle it within 30 days — usually much faster.

You can ask to see what we hold on you, correct anything that's wrong, or have it deleted — all through hello@musicrush.ai.

Musicrush is built for adults. We don't knowingly collect data from anyone under 18, and accounts found to belong to minors get closed.

If we change this policy in a way that matters, we'll tell you inside the app before it takes effect — not bury it in a changelog nobody reads.

Questions, requests, or just want to say hi? hello@musicrush.ai.