Privacy Policy

starzMix helps musicians find each other and play together, through the iOS app and the website at www.starzmix.app. starzMix is responsible for the personal data described here. For anything about your data, email starzmix.contact@gmail.com.

• Account. Your email address and your password, which is stored only as a one-way hash. If you sign in with Google, we also receive the first and last name on your Google account. If you sign in with Apple, we receive the email address Apple shares (which can be a private relay address) and a token from Apple that we keep only so we can cancel Apple sign-in when you delete your account.
• Profile. Your name, city, bio, profile photo, instruments, genres, and any Spotify, SoundCloud or YouTube links you add.
• What you share. Your posts, your comments, and the messages you send, with when they were sent and who they were sent to.
• Safety. The accounts you block, the reports you make (the reason, any note you add, and a copy of the content you reported), and moderation decisions about your account, such as a suspension and its reason.
• On your device. The app and website store your sign-in token, your light or dark theme choice, and when you last read each conversation. These stay on your device.
• Connection data. Like any online service, our hosting providers receive your IP address and basic request details when your device connects to starzMix.

We don't collect your device's location, your contacts, or advertising identifiers, and we don't use analytics or tracking tools. When you choose a profile photo, the app only receives the photo you pick.

• To create your account and sign you in.
• To show your profile and posts to other musicians, and to deliver your messages.
• To show you musicians near you. We turn the city on your profile into map coordinates for this.
• To keep starzMix safe: reviewing reports, removing content that breaks our Terms of Service, and suspending accounts.
• To reply when you contact us.

We don't sell your data, share it with advertisers, or use it to show you ads. If you are in the EU or UK, we process it because it's needed to provide the service you signed up for, and for our legitimate interest in keeping the platform safe and secure.

• Your profile, posts and comments are visible to people signed in to starzMix. They aren't shown to people who aren't signed in.
• Your messages are visible to you and the person you're talking to. They are encrypted in transit but not end-to-end encrypted, and they are stored on our servers.
• If someone reports a message or an account they've talked to, a starzMix moderator can read that conversation to review the report. Every time a moderator opens a conversation, it is logged.
• People you block can't message you or see your posts. We never tell anyone who reported them.

• Render runs the starzMix server, including messaging.
• Neon hosts our database, in the United States.
• Cloudinary stores and serves profile photos.
• Vercel hosts the website.
• Google and Apple handle sign-in, only if you choose to sign in with them.
• OpenStreetMap (Nominatim)receives the name of a city the first time anyone on starzMix enters it, to look up its coordinates. It doesn't receive who entered it.
• CARTO provides the map images on the website, and Apple Maps the map in the app. They receive your IP address when the map loads.
• Spotify, SoundCloud and YouTube receive your request when you play a music link, under their own privacy policies.
• Gmail holds the emails you send us.

Several of these providers are based in the United States, so your data may be processed outside the country you live in.

We keep your data for as long as you have an account. You can delete your account yourself, in the app from the menu under Delete account, or on the website from your account menu. Deleting is immediate and permanent:

• Your account, profile, posts, the comments on your posts, your comments on other posts, and every message in your conversations, including the other person's copy, are deleted.
• Blocks you made, and blocks made against you, are deleted.
• If you signed in with Apple, we ask Apple to cancel starzMix's access.
• Reports you made are kept without your name on them, so a moderator can still act on them, along with the copy of the reported content they hold.
• The file of your profile photo can remain with Cloudinary after the account is gone. Email us and we'll delete it.

Emails you send us are kept for as long as we need them to help you. Our hosting providers keep connection logs for a limited time under their own policies.

You can see and edit your profile at any time, and delete your posts and your account yourself. You can also email starzmix.contact@gmail.comto ask for a copy of your data, to correct or delete something, or to object to how we use it. We reply within 30 days. If you are in the EU or UK and aren't satisfied with our answer, you can complain to your local data protection authority.

starzMix is only for people aged 16 and over. If we learn that an account belongs to someone under 16, we close it and delete its data.

All connections to starzMix use HTTPS, passwords are stored only as hashes, and only moderators can use moderation tools. No online service can promise perfect security, so please use a password you don't use anywhere else.

If we change this policy, we'll post the new version here and update the date at the top. Questions about it go to starzmix.contact@gmail.com.