This policy explains what Music Mergers collects, why, who it is shared with, and
what you can do about it. It covers the Music Mergers mobile app
(com.musicmergers.app) and the services behind it.
Music Mergers Marketing Group is the controller of the personal data described here. You can reach us at aston@triplemgrp.com for any question or request in this policy.
| Category | Examples | Why |
|---|---|---|
| Account details | Email address, password (stored hashed), name, role (artist, songwriter, A&R) | To create and secure your account and route you to the right portal |
| Profile information | Artist or writer name, biography, links, profile image, genre and location fields you enter | To show your profile to the people you are trying to reach |
| Content you upload | Audio tracks, voice recordings, lyrics and drafts, cover artwork, documents, split sheets | To provide the features you uploaded them for, and to store them for you |
| Messages and deal activity | Inbox messages, letters of intent, pitches, pipeline notes, project room chat and the files shared in a room (visible only to the people in it) | To deliver messages and maintain a record of an agreement's history |
| Subscription status | Tier, term, renewal and expiry, store or Stripe transaction identifiers | To grant the access you paid for |
| Sign-up answers | What kind of creator you are, what you want to do first, genres, and whether you asked for release tips by email | To open the app on the right first step, and for the totals described in section 5 |
| Sign-up progress | Which sign-up screens are reached, skipped or completed, kept against a random ID for your phone until you have an account, then attached to it | To find and fix the screens that lose people |
| Device and region | Phone platform, device model, OS and app version, language and timezone, refreshed when you open the app | To know which versions and devices to support, and to count who uses the app by region |
| Country | The country you choose on your EPK. Until you choose one, the country of your App Store account when you signed up, or else your phone's region setting | Shown on your profile so A&Rs can find talent by region, and used for the totals in section 5. Change it on your EPK at any time |
| Rights details you enter | Your performing rights organisation (PRO) memberships and IPI/CAE number | To show your PRO names on your profile and to prepare split sheets and registrations. The numbers are visible only to you and to the other party on a deal you are part of |
| Date of birth | Your date of birth, kept private | To confirm your age, and to place your account in a broad age group for the totals in section 5. See section 13 |
| Codes and invites | Trial or offer codes you redeem and when, and who invited you if you joined through an invite | To apply the code and credit the person who invited you |
| Royalty registrations you report | Whether you have registered with The MLC, and your MLC member number if you add it | To guide you to collect what is yours. We record what you tell us and do not contact The MLC for you |
| Releases and catalog moves | Audio, artwork, credits and release details; for a catalog move, the store links, UPCs and ISRCs of the releases you move | To deliver your releases and move existing ones without losing their history |
| Support messages | What you send us through in-app support, and our replies | To answer you |
| Invites | The email address a member enters to invite someone to a project room | Only to add that person to the room once they sign up and verify the address. An invite stops working after 30 days |
| Sign in with Apple token | A token Apple gives us when you use Sign in with Apple | To end the link to your Apple ID when you delete your account |
| Approximate or precise location | Device location at the moment you open Studios Near Me | Only to list recording studios near you — see section 6 |
| Diagnostics | Crash reports, error traces, performance timings, device model and OS version | To find and fix crashes |
| Connected account data | Profile and audience statistics from Spotify, SoundCloud or Apple Music if you link them, and public YouTube channel statistics for the artist profile you claim | To show your traction without you typing it in — see section 3 |
| Industry analytics about you | Streaming, audience, and velocity figures from third-party music data providers | To calculate momentum and benchmarks — see section 4 |
| Identifiers | Account ID, push notification token | To operate the account and deliver notifications you have enabled |
We do not sell personal data, and we do not track you across other companies' apps or websites. Music Mergers does not use advertising identifiers and does not present an App Tracking Transparency prompt, because it has nothing to ask for.
You can optionally link a Spotify, YouTube, SoundCloud, or Apple Music account. When you do, we request read-only access to your profile and your audience statistics on that platform, and we use it to populate your Music Mergers profile and momentum figures. We do not post anything, we do not read your private messages, and we do not access anything beyond what that platform's permission screen lists at the moment you approve it.
YouTube. You never sign in to Google for this. When you claim your artist profile, we look up the official YouTube channel that Chartmetric or Soundcharts lists for it and read that channel's public title and statistics (subscribers, views, video count) through YouTube API Services, to show your audience in the app and on your EPK. If you choose to verify the channel, we check its public description for a short code you add, which proves you run it; you can remove the code afterwards. We never post, upload, or read private data, and we do not share YouTube data with anyone. By using this feature you agree to the YouTube Terms of Service, and the Google Privacy Policy applies to Google's handling of data. Stored YouTube data is refreshed at least every 30 days and deleted when you remove the channel in Settings, when it has not been refreshed for 30 days, or when you delete your account.
You can disconnect a linked account at any time in the app, which revokes our access going forward. Figures already calculated from it remain on your profile until you change or delete them.
Music Mergers uses third-party music industry data providers, including Chartmetric and Soundcharts, for streaming, audience, and velocity figures about artists. This information is drawn from public and licensed industry sources rather than from your device, and it may appear on your profile and in the momentum and benchmark features whether or not you have linked an account. If you believe a figure attributed to you is wrong, contact us and we will correct or remove it.
Where the GDPR applies, we rely on performance of a contract for operating the service, legitimate interests for security, diagnostics, and industry analytics, consent for the microphone, location, notifications, connected accounts and marketing email, and legal obligation where a law requires us to retain or produce something.
We share personal data with the service providers below, who process it on our instructions and for no purpose of their own. We do not sell it, and we do not share it for advertising.
| Provider | What it handles |
|---|---|
| Supabase | Authentication, database, and file storage. Most data in this policy lives here. |
| Sentry | Crash and performance diagnostics. |
| OpenAI | Text, images, and audio you submit to AI features — see section 7. |
| AssemblyAI | Transcription of audio you record in Writers Room. |
| Sightengine | Audio of releases you submit for distribution, checked for AI-generated content. |
| Google (Places) | The approximate location of a Studios Near Me search, to find studios nearby. |
| Cloudflare | Fallback provider for AI image generation. |
| Apple and Google | Subscription purchases and receipt validation. We never receive your card details. |
| Stripe | Web purchases in the United States. We never receive your card details. |
| Empire Distribution | Releases you submit for distribution, with the credits and account details needed to deliver them to stores and account for their royalties. |
| Spotify and Apple Music | Public catalog lookups when you move music from another distributor. |
| Expo | App delivery, over-the-air updates, and push notification routing. |
We may also disclose data if required by law, or in connection with a merger or acquisition, in which case we will tell you before your data becomes subject to a different policy.
Several features send what you give them to a third-party provider so it can produce a result:
We ask first. The first time a feature would send anything to one of these providers, the app names the provider and what will be sent, and sends nothing unless you allow it. You can withdraw that permission at any time in Settings › Privacy & Data › AI features (Turn off AI features); each permission and withdrawal is recorded against your account.
These features run only when you invoke them, and only on what you submit to them. Generated output is stored against your account and is private to it unless you choose to share it.
We use these providers under their business and API terms, which do not grant them the right to train their models on the content we send, and we do not enrol in any programme that would allow it. We do not control these providers' own practices, and if their terms change in a way that affects your content we will update this policy before the change takes effect.
Location is requested only by Studios Near Me, and only at the moment you open it. It is used to search for nearby recording studios and is not written to your profile, not attached to your account record, and not retained after the search. Declining the permission disables that one screen and nothing else.
The country on your profile (section 2) is not device location: it is the country you choose, or else the one your App Store account or phone settings name. It never says where you are.
The microphone is used only while you are actively recording in Writers Room, or dictating lyrics. Recordings are stored in your library until you delete them. Dictation and audio processing send the recording for transcription as described in section 7. Nothing is recorded in the background, and nothing is recorded without you starting it.
The camera and your photo library are used only when you choose a profile image or cover art. On Android the app uses the system photo picker, so it receives only the images you select rather than access to your library. Images you choose are uploaded to your own profile storage and nowhere else.
Face ID, Touch ID and the Android biometric prompt are used only to unlock a sign-in saved on a device you have already used. The check happens entirely on your device. We never receive your fingerprint or face data — only whether the device accepted it.
Deleting your account starts a schedule, not an instant wipe — the windows below are the same ones a real, scheduled job in our database enforces automatically once you request deletion:
You can request access to your data, correction, deletion, a portable copy, or that we restrict or stop a particular use. If you are in the EEA or UK you may also complain to your data protection authority. If you are in California you may request disclosure of the categories collected and their purposes, and deletion; we do not sell or share personal information as those terms are defined by the CCPA.
Deleting your account: open Settings → Delete Account in the app. This starts the removal schedule described in section 11. You can also email aston@triplemgrp.com and we will action it within 30 days.
Music Mergers is for people 16 and over, and 18 and over in the United Kingdom. It is not directed to anyone under 16, or to anyone under 18 in the United Kingdom. We ask for your date of birth when you first sign in and keep it private. We also record the country your app store or phone is set to, once, so the right minimum age applies. We use your date of birth to confirm your age and to place your account in a broad age group (for example 18 to 24) for the totals described in section 5. Your date of birth itself is never shown to other members or shared outside the company. For users aged 16 or 17 we record the name and email of the parent or guardian who agrees to an agreement, and when they agreed. If you believe someone under the minimum age has given us data, email us and we will delete it.
Data is encrypted in transit and at rest, access is restricted by row-level security so accounts can only reach their own records, and entitlement is written only by our servers. No system is perfectly secure, and we do not claim otherwise; if a breach affects you we will notify you as the law requires.
Our providers are primarily in the United States, so if you are outside the United States your data will be transferred there. Where required we rely on standard contractual clauses for those transfers.
If we change this policy we will update the date at the top, and for a material change we will tell you in the app before it takes effect.
Music Mergers Marketing Group, registered in the State of Texas, United States.
aston@triplemgrp.com