Privacy Policy — Cued Music

Cued Music ("Cued," "we," "us") is a music-discovery app that builds personalized playlists from the music you already love, played through your own Apple Music subscription. This policy explains exactly what we store, why, and how to delete it.

We do not sell your data. We do not use it for advertising. We do not track you across other apps or websites.

Who we are

Cued Music is an independent app (bundle com.gagangrewal.musicme). For any privacy question or request, contact: gagangrewal49@gmail.com.

What we collect

Account identity (from Sign in with Apple). When you sign in with Apple, we receive and store:

• An opaque Apple user identifier (your stable account key — not your Apple ID or password).
• Your email address, only if you choose to share it. This may be an Apple private relay address; we never see your real address unless you share it.
• Your name, only if you choose to share it.
• A sealed (encrypted) Apple token used solely so we can sever the Sign-in-with-Apple link if you delete your account.

We use this only to identify your account and contact you about the service. We do not use your name or email in our recommendation engine.

Your music and taste data. To generate playlists, we store:

• The tracks and artists in your library that you mark as loved or owned (as identifiers).
• Taste signals from your use of the app — which suggestions you accept, skip, play through, or save, and how long you listen.
• Your saved vibes and discovered "moments" (named clusters of your taste).

Optional personal-learning import. Before Cued imports first-use evidence, the app asks for versioned consent. If you agree, Cued may inventory your Apple Music library songs, albums, playlists and their track relationships, the authorized recent-listening window, supported ratings and favorites, and the on-device library/download identifiers the app can access. We store song and collection identifiers, source relationships, your confirmations, corrections and use contexts, and learned representations. We do not store the Music User Token, audio files, or private playlist names in shared operational receipts. Preview URLs are used only at the token-bound import boundary; token-free embedding work is queued after that boundary.

You may continue without importing Apple Music history. In that catalog-only path, Cued stores the four artists you explicitly select, a typed request only when you submit one, the exact recordings the server offers, and learning only after a recording validly enters playback. Passive suggestions, downloads, recent plays, and prefetched recordings are not treated as confirmed taste. If you previously agreed and later withdraw personal learning or history import, Cued removes the imported identifiers, relationships, receipts, P1-derived personal Home/Moment projections, artist selections, first-mix/playback-learning rows, and queued personal preview work. Only the blocked consent state needed to offer recovery remains. Optional-consent withdrawal does not delete base-product account data that existed before P1, including a prior legacy Moment set; that remains until account deletion. Shared song analysis remains non-personal. Account deletion removes the same personal-learning state plus the rest of your account data.

Service logs. We keep minimal operational logs of which suggestions were shown to you and basic session records, to make the app work and improve recommendation quality.

What we do NOT collect. We do not collect your location, contacts, photos, phone number, demographic information, or payment-card details. Playback happens through your own Apple Music subscription; we are not a payment processor.

How your music is processed

To find new music that matches your taste, we analyze the sound of tracks (using short public preview clips) and compare it to your taste profile. These audio analyses describe the songs, not you, and are shared across all users — they are not personal data.

If you type a free-text vibe (e.g. "rainy sunday"), that phrase may be processed by a third-party AI provider to interpret what you mean. We do not send your identity, name, or email with it.

Who we share data with

We use trusted infrastructure providers strictly to operate the service:

• Apple (Sign in with Apple, MusicKit, Apple Music) — for authentication and playback through your own subscription.
• Cloud hosting and database providers — to run the app and store your data securely.
• An AI provider — only to interpret typed vibe phrases, as described above.

We do not share your personal data with advertisers or data brokers, and we never sell it.

How long we keep it

We keep your data while your account is active. When you delete your account, your personal data is erased immediately (see below).

Deleting your account and data

You can delete your account at any time from within the app (Account → Delete account). When you do:

• All of your taste, listening, library, saved-vibe, and log data is permanently erased.
• Your name and email are removed; an anonymous tombstone prevents an ordinary later sign-in from silently recreating the deleted account. Re-registration, if offered, is a separate explicit flow.
• Your Sign-in-with-Apple link to Cued is revoked with Apple.

Shared, non-personal music analysis (which describes songs, not you) is retained.

You may also email gagangrewal49@gmail.com to request deletion.

Children

Cued is not directed to children under 13, and we do not knowingly collect their data.

Changes

We may update this policy; the "Last updated" date above will change. Material changes will be communicated in-app.

Contact

Questions or requests: gagangrewal49@gmail.com