Privacy Policy
Luna (“we”, “us”) is a music-sharing social app. This policy describes what we collect, why, and how you can delete or withdraw.
Data we collect
- Account: email, password (hashed by our auth provider), username, display name, bio, avatar image.
- User content: posts (song metadata and captions), comments, likes, saves, follows, Song of the Month picks, reports, and blocks.
- Music metadata: Spotify (and optionally Apple Music / TIDAL) track IDs, titles, artists, artwork URLs, ISRC, and open links — obtained via our servers using Spotify’s catalog API. We do not ask you to log into Spotify and we do not store Spotify account tokens.
- Preferences: preferred music app and “installed app” flags you set in the product.
- Technical: device locale/region used as a market hint for catalog search; auth session tokens on device.
What we do not collect (v1)
- Advertising identifiers / App Tracking Transparency tracking
- Precise location, contacts, microphone, or analytics SDKs
- Payment card data (the app is free)
Processors
- Supabase — authentication, database, storage, Edge Functions
- Spotify — catalog search and metadata (server-side Client Credentials)
- Apple Music / TIDAL — optional catalog link resolution (server-side)
Purpose & legal bases
We process data to operate the social music-sharing service, open songs in your preferred app, moderate abuse, and comply with law. Where GDPR/UK GDPR applies, bases include contract performance and legitimate interests in safety/security.
Retention & deletion
Account data is kept while your account is active. You can delete your account in-app (Profile → Settings → Delete account). Deletion removes your auth user and cascades profile, posts, comments, likes, follows, saves, reports, and blocks, and removes avatar files. Backups may retain residual copies for a limited period. Report/audit logs may be retained longer as needed for safety and legal obligations.
Your choices
- Update profile and music preferences in the app
- Disconnect / clear preferred-app flags in Edit profile
- Delete your account in Settings
- Email support@discoverluna.app for privacy requests
Children
Luna is not directed to children under 13. Do not use the service if you are under 13.
International transfers
Data may be processed in the United States and other countries where our providers operate.
Security contact
Report security issues to support@discoverluna.app.