Privacy Policy

About this notice

MUSE is run by Flare Tech Pty Ltd, an Australian company. When we say "we", "our", or "us" in this notice, we mean Flare Tech Pty Ltd.

This notice explains, in plain English, what personal information we collect when you use the MUSE app, what we do with it, and the rights you have over it. If something here isn't clear, email us at hello@findmuse.appand we'll explain.

This notice covers everyone who uses MUSE. We've called out separately the bits that apply only if you're in the United Kingdom, the European Economic Area, Switzerland, or Australia.

What we collect

We collect different bits of information depending on what you do with the app.

To sign you in and set up your profile

Your phone number (so we can send the one-time code you sign in with).
Your email address if you sign in with Apple or Google.
The display name, bio, and photos you put on your profile.
Your date of birth, so we can check you're 18 or older.
The country your phone is set to, so we know whether you need the UK/EEA consent prompt.

To match you with people

Answers from the in-app music quiz you fill in when you join (favourite genres and artists you pick). This is how Music DNA works.
People you follow, events you save, crews you join.

To show you nearby people and events

A city-level approximation of where you are, only when you grant the location permission. We don't read background location. We don't sell or share precise location.

To deliver messages

The direct messages and event-chat messages you send and receive.

To run the app

Your phone model, operating system, app version, and IP address — standard stuff so the app works and so we can fix bugs.
Your push notification token from Apple or Google, so we can send you a notification when something happens.

To measure how the app is doing (only if you say yes in the UK/EEA/Switzerland)

Product analytics through PostHog: which screens you see, which buttons you tap, how long you spend in flows.
Install attribution through AppsFlyer: which ad or link brought you to the app. On iOS we only see your advertising ID if you tap "Allow" on Apple's tracking prompt.
Replay diagnostics through PostHog (only if analytics is also on): a recording of in-app interactions for engineering. We mask every text input and every image, so your messages and photos aren't visible in the replay.

To handle subscriptions

Apple and Google take your payment — we never see your card details.
We use RevenueCat to keep track of which subscription tier you're on. RevenueCat sees an anonymous purchase token plus your MUSE user ID.

To fix crashes

Sentry captures crash stack traces when the app misbehaves. Text in those reports is masked. This is essential — without it we can't fix bugs that affect you.

How we use it

We use the information above to:

Let you sign in and use MUSE.
Match you with people of similar music taste, in places you can actually get to.
Show you events near you and deliver your messages.
Keep the app secure and prevent abuse.
Fix bugs and improve how the app works.
Send the notifications you've asked for.
Process your subscription.

We do not sell your personal information. We do not share your data with advertising networks.

Our legal basis for using your data (UK/EEA/Switzerland)

If you're in the UK, EEA, or Switzerland, here's what we rely on under the UK GDPR / EU GDPR / nFADP:

Performance of a contract — for everything you need to use MUSE: sign-in, profile, matching, messages, subscriptions.
Your consent — for location, push notifications, product analytics, install attribution, and replay diagnostics. You can withdraw consent any time in Settings → Privacy → Choices, or in your device settings for permissions.
Our legitimate interests — for keeping the app secure, preventing abuse, and fixing crashes. We think the privacy impact is small and you'd reasonably expect it.

If we ever want to send you marketing messages or pushes, we'll ask separately. Right now we don't.

Who we share it with

We use the following companies to help run MUSE. Each one has a written agreement with us that limits how they can use your data.

Supabase, Inc.

Hosts our database, files, and authentication. Based in the United States.

PostHog, Inc.

Product analytics (opt-in only). Based in the United States.

AppsFlyer Ltd.

Install attribution (opt-in only). Based in the United States and Israel.

Functional Software, Inc. (Sentry)

Crash and error reporting. Based in the United States.

RevenueCat, Inc.

Subscription bookkeeping. Based in the United States.

Apple Inc.

Push notifications and App Store billing. Based in the United States and Ireland.

Google LLC

Push notifications and Play Store billing. Based in the United States.

We may also share information with law enforcement or regulators if the law requires us to, but we'd push back on any request that looks unlawful or too broad.

Where your data goes

The companies above are mostly based in the United States. To move your data outside the UK and EEA lawfully, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses (or the UK IDTA, where the processor uses that form instead) and the EU Standard Contractual Clauses for EEA users.

How long we keep it

Your account and profile — for as long as you have a MUSE account. If you ask us to delete it, we begin deletion within 30 days, or sooner if you ask us to.
Messages — for as long as your account exists. Deleted with your account.
Crash reports (Sentry) — 90 days.
Replay recordings (PostHog) — 30 days.
Analytics events — 13 months on a rolling basis.
Attribution data — 12 months.
Audit logs (consent choices, sign-in events, moderation actions) — kept for as long as we need them to keep MUSE safe and to show we're handling your data properly.

Your choices

Stop sharing location — turn off Location in your device's Settings for MUSE.
Stop notifications — turn off Notifications in your device's Settings, or in MUSE → Settings → App settings → Notifications.
Turn analytics, attribution, or replay off — MUSE → Settings → App settings → Privacy → Choices. UK/EEA/Swiss users see the same controls in the first-run prompt.
Delete your account — MUSE → Settings → Profile → Delete account. Or email us.

Your rights

If you're in the United Kingdom

The UK GDPR gives you the right to:

See a copy of the personal data we hold about you.
Correct anything that's wrong.
Delete your data (the "right to be forgotten").
Restrict how we use it.
Take a copy with you in a machine-readable format (we use JSON).
Object to processing based on our legitimate interests.
Withdraw any consent you've given us, at any time.
Not be subject to decisions made by automation alone with significant effect. We don't make decisions like that about you.

To use any of these, email hello@findmuse.appwith the subject "Privacy request". We'll reply within one month.

You can also complain to the Information Commissioner's Office at ico.org.uk. We'd like the chance to put things right first, but you don't have to talk to us before going to the ICO.

If you're in the EEA or Switzerland

You have equivalent rights under the EU GDPR or the Swiss nFADP. You can complain to your local supervisory authority (EEA) or the FDPIC (Switzerland).

If you're in Australia

The Privacy Act 1988 (Cth) applies. You can contact us and, if you're not satisfied, complain to the Office of the Australian Information Commissioner (OAIC).

How we keep your data safe

Traffic between the app and our servers is encrypted (TLS 1.2 or higher).
Data on our servers is encrypted at rest.
Only authorised engineers can access production data, with two-factor sign-in.

No system is perfect. If we find out about a serious breach that affects your data, we'll tell the ICO within 72 hours and tell you without delay.

Children

MUSE is only for people aged 18 and over. We ask you to confirm your date of birth when you sign up, and we'll add stronger age checks if a regulator requires them. If you think someone under 18 is using MUSE, please email us.

Changes to this notice

If we change this notice in a way that affects your rights or what we do with your data, we'll update the date at the top and let you know in the app.

Contact us

For privacy questions, to use your rights, or to make a complaint:

Email: hello@findmuse.app
Support: Contact Form
Post: Flare Tech Pty Ltd, Ground Floor, 470 St Kilda Rd, Melbourne VIC 3004, Australia
In-app:Settings → Help & support → Contact us