Privacy Policy

MX Music ("we", "us", "our") provides a music and short-video streaming service via mobile apps and the web. This Privacy Policy explains what personal information we collect when you use MX Music, how we use it, who we share it with, and the choices you have.

By using MX Music, you agree to the practices described here. If you do not agree, please do not use the service.

Account information

When you create an account, we collect your name, email address, and a hashed copy of your password. Passwords are never stored in plain text.

Profile data

You may optionally provide a nickname and avatar. These are visible only inside the app on your profile screen.

Usage data

To power features like "Continue Watching" and personalized recommendations, we record:

• Tracks, videos, and shorts you play, and your playback progress.
• Recent search queries inside the app.
• App version, device type, and operating system version (for diagnostics).

Authentication tokens

We issue signed authentication tokens (JWT) so you stay logged in. These tokens live on your device until you log out. They contain only your user id and an expiry timestamp — no sensitive data.

Information we do not collect

We do not collect your contact list, your photo gallery, your microphone input, your precise GPS location, or your payment card details. Payments — when introduced — are handled by Apple, Google, or Stripe, and we receive only confirmation of the transaction.

We use the information above only to:

• Authenticate you and keep your account secure.
• Stream content to your device and remember your playback position.
• Recommend music and videos you may enjoy.
• Send the occasional service email (account verification, password resets, important policy changes).
• Detect abuse, fraud, or violations of our Terms.
• Improve the app — fixing bugs, measuring feature performance.

We only share the minimum data necessary with carefully selected providers:

• Bunny.net — hosts and delivers our media (songs, videos, images). They process only the media files themselves and the IP of viewers requesting them (standard CDN behavior).
• Email provider — sends transactional emails (verification codes, password resets). They receive only the email address and the message content.
• Hosting provider — runs our API server. Standard server logs include IP address, user agent, and request path, and are kept for up to 30 days.

We may disclose information if compelled by valid legal process (court order, subpoena) or to protect the safety of our users.

We store your data on encrypted-at-rest servers in the European Union and Singapore. Connections between your device and our servers use industry-standard TLS encryption.

We retain your account data for as long as your account is active. When you delete your account, your profile, playback history, and recent searches are removed within 30 days. Anonymized aggregate analytics may be retained indefinitely.

No system is perfectly secure. While we use bcrypt password hashing, signed JWT tokens, server-side rate limiting, and infrastructure firewalls, we cannot guarantee absolute security. If you suspect your account has been compromised, please contact us immediately.

You have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete information.
• Delete your account and associated data ("right to be forgotten").
• Export your data in a portable, machine-readable format.
• Object to or restrict certain processing.
• Withdraw consent at any time for processing based on consent.

You can exercise most of these directly inside the app under Profile → Account. For anything else, email us at privacy@mxmusic.app and we'll respond within 30 days.

MX Music is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the app or by email. The "Last updated" date at the top of this page always reflects the current version.

If you have any questions about this policy or how we handle your data, we'd love to hear from you.

Privacy: privacy@mxmusic.app
General inquiries: hello@mxmusic.app