Privacy Policy

This policy explains what information Mucin collects, why, and the choices you have. It covers both the app and the website.

We've written it in plain language. If anything is unclear, write to us at hello@mucin.app.

You don't need an account to use Mucin. As a guest, you can browse and listen without giving us your name, email or any other personal details, unless you choose to ask to join the beta.

Signing up takes an email address and a password. Sign-in is handled by Supabase Auth, which stores your password in hashed form, never as readable text. We use your email to sign you in and to send messages about your account, such as a confirmation or password reset link.

Your profile holds your display name and, if you add them, a short bio and a profile photo. Photos are stored in Supabase Storage. We also keep your invite code, your account settings (such as your app mode and any access an administrator gives your account), and the dates your account was created and last updated.

Every account has its own invite code and link that you can share with friends. Someone who opens your link can see your display name.

We don't record who invited whom, and we don't track whether your invites are used.

Anyone can ask to join the Mucin beta, with or without an account. If you do, we keep the email address you enter, the language you use the app in, when you asked and whether your request was approved. We use them only to review your request, to tell you the decision, and to turn the beta on for the account that uses that email, now or when you sign up with it.

We tell you about the decision by email and, if you allow notifications, with a notification that your device creates itself. We don't collect a push token or any other device identifier for this.

If you delete your account, a request linked to it is deleted too. To remove a request you made without an account, write to hello@mucin.app.

Liked songs, saved playlists, followed artists, listening history and recent searches are kept only on your device or in your browser. They are not sent to or stored on our servers, even when you're signed in.

This also means they don't sync between devices. They stay until you clear them, for example by clearing your history in Settings, deleting the app or clearing your browser's site data.

To show charts for your region, Mucin works out which country you're in from your network connection, using an IP-based lookup provided by Cloudflare. We use the result only to pick regional charts. It is not stored on our servers, and we don't ask for your precise location.

Mucin asks for camera access only when you choose to scan a code or take a profile photo. Scanning happens entirely on your device, and images from the scanner are never uploaded.

A profile photo you take or pick from your photos is uploaded only when you save it to your profile. You can turn camera access off at any time in your device's settings.

Mucin plays and shows content from other services. Music comes from Audius, which offers full-length tracks from independent artists. Charts for your country use 30-second previews from Apple Music, which are labeled and link back to Apple. Accounts in personal mode, turned on by an administrator or by joining the beta, can also play music from YouTube Music. Lyrics come from LRCLIB.

Mucin never signs in to Google or YouTube, never reads a YouTube account, and stores nothing YouTube returns on its servers: what you play stays on your device.

These services receive the requests needed to play or show that content, such as your IP address and the song you asked for. Accounts, profile photos and beta requests are hosted by Supabase, beta approval emails are sent through Resend, and the country lookup is provided by Cloudflare. Each of these services handles data under its own privacy policy.

We use the information described here only to run Mucin: to sign you in, show your profile, keep your invite link working, handle beta requests and play the music you choose.

There are no ads. We don't sell or rent your information, we don't use third-party analytics or advertising trackers, and we don't track you across other apps or websites. We share account information only with the providers that run the service for us, such as Supabase, or when the law requires it.

We keep your account information for as long as you have an account. You can delete your account at any time in Settings in the app, or on the website.

Deletion happens immediately and can't be undone: your sign-in, profile, profile photo, account settings and any beta request linked to your account are permanently erased, and your invite link stops working. Your library stays on your device until you clear it. You can also ask us to delete your account by writing to hello@mucin.app.

You can listen without an account, edit your name and bio, change or remove your photo, and change your password at any time. You can also clear your listening history on your device.

If you'd like a copy of the information in your account, or want us to correct or delete it, write to hello@mucin.app and we'll help.

We take reasonable steps to protect your information, and we keep what we collect to a minimum. No online service can be perfectly secure, so please use a strong password that you don't use anywhere else.

Mucin is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, write to hello@mucin.app and we'll delete it.

If we change this policy, we'll update the date at the top of this page. If a change significantly affects how we handle your information, we'll let you know in the app or on the website.

If you have questions about this policy or your information, write to hello@mucin.app.