LEGAL

Privacy Policy

Last updated: October 12, 2026

This policy covers the ShortMusic apps for iPhone and iPad (App Store) and for Android phones and tablets (Google Play), the ShortMusic service behind them, and this website. For privacy questions or requests, email tuyetnt6134@icloud.com.

In short

1. Who we are

ShortMusic (“we”, “us”) is the developer named on the ShortMusic App Store and Google Play pages and is responsible for the information described here. Contact: tuyetnt6134@icloud.com.

2. Information we collect

Account and device identity

When you first open the app, ShortMusic creates a device-linked account. We process an account ID, an installation identifier, and authentication tokens so the service can keep your credits, music and purchases together. On iPhone and iPad the credentials are stored in the iOS Keychain. On Android they are encrypted with an Android Keystore key and excluded from device backups, so uninstalling the app removes them from the device.

Profile information (optional)

If you edit your creator profile, we process the display name, creator handle and profile image you choose. The profile image is picked with the system photo picker: the app only receives the photo you select and never has access to the rest of your library.

Music you create and publish

We process the prompts, styles and creation options you submit, the music generated for you, and the titles, captions, hashtags and visibility (private or published) you set.

Search history and suggestions

When you search, we keep what you searched, when, how many results it found and the first song you opened from it. We use this to show your recent searches, suggest searches as you type, show trending searches, and tailor your For You feed to the words you search and the creators whose songs you like, save or finish from search results. Trending searches are phrases searched by several different people; they never show who searched them. Searches are kept for up to 90 days. You can remove a search or clear them all in the app, and you can turn off Save search history in Settings → Privacy, which also deletes your history and what was learned from it.

Invites and gift songs

Your invite link carries a short code that identifies you. When someone joins ShortMusic through your invite or a gift song, we record who invited whom and how (the link, a gift, the Google Play install referrer, or a code they pasted or typed), and any credits either of you received. A new account that arrives this way follows the inviter, and the inviter follows back; either can unfollow at any time.

A gift song is a song you make for someone. We store the song, the recipient name, the occasion and the optional note you add, and the gift page can be opened by anyone who has its link, without the app. The person who opens it in the app can reply with a song of their own. Names and notes are checked against the same rules as comments, and anyone can report a gift page.

When someone taps “Get the app” on an invite or gift page, our website records the tap together with a keyed one-way hash of their network address (never the address itself) and deletes it after 7 days. We use it to count how invites perform and, where we enable it, to match an iPhone installation to the invite it came from.

Inviting from your contacts uses the system contact picker: the app receives only the one contact you choose, uses the phone number on your device to open your messaging app with the invite, and never sends that number or your contact list to us.

People you may know

We suggest people you may know only from what happened in ShortMusic: invites and gift songs between you, links one of you shared that the other opened (song links you share carry your short code for this), people who follow you, people followed by those you follow, and likes, comments or uses of each other’s songs. The country we derive from your network address when you sign up can only break a tie between other reasons. We never use your contacts, phone number or precise location for suggestions. You can dismiss a suggestion, block someone, or turn off Suggest my account to others in Settings → Privacy.

Videos you make and post

The video studio builds your video on your phone, from clips you film with the camera, photos and videos you pick from your library, or your song’s cover. Nothing leaves your phone until you post. When you post a video, we upload the video, a cover image, a few still frames taken from it and your caption to our storage. Before a video post goes live, those frames and the caption are checked by automated moderation (and, where needed, by a person), so it starts as pending and can be rejected. Videos you only save to your gallery or share to other apps are not uploaded to us.

Comments

When comments are available and you write one, we store the comment, which post it belongs to, and your creator profile. Comments are public to everyone who can see the post, the post’s owner can delete comments on it, and anyone can report one.

Songs you send to friends

When you send a song to people inside the app, we store who sent it, who received it, the post and the optional message you add. Each recipient sees your display name, handle and profile image, the post and your message in their notifications. Messages are checked against the same rules as comments (no links, blocked words).

Follows, likes and favorites

We store who you follow, the posts you love and the ones you save as favorites, and we show follower, like and favorite counts on posts and profiles. Whom you follow and your follower count are visible on your profile.

In-app notifications

We keep an inbox of in-app notifications for your account, such as a new follower, a like, a comment or reply, a song sent to you, your song used in a video, or a view milestone. Notifications older than 90 days are deleted automatically.

Listening and interaction data

We process feed impressions, plays and progress, completed plays, skips, daily views, likes, saves, shares and follows to run playback, maintain your library and shape your feeds.

Reports and blocks

When you report a track or creator, we process the report, the reason and details you add, and your account ID so moderators can review it. Reports are not shown to the person reported. When you block a creator, we store the block to keep their music out of your feed and search.

Purchases

Purchases are made through the Apple App Store or Google Play and managed with RevenueCat. Our server verifies each purchase with the store (the signed transaction or purchase token) before adding credits. We receive the product, transaction identifiers, purchase and renewal dates, and subscription status needed to add credits or unlock subscription benefits. We never receive your card or other payment details; Apple or Google handle payment under their own privacy policies.

Technical information

Each request to our service includes the platform (iOS or Android), app version and device language, and our servers receive your IP address. When your account is created we derive your country from it. We use these to deliver the right content and language, keep the service secure, prevent abuse and diagnose failures, and the country as a minor signal for people suggestions.

What we do not collect

We do not collect your precise location (only the country described above), your contact list, microphone audio, calendar, health or fitness data, browsing history, or photos, videos and files other than those you choose to post or share. We do not read your messages in other apps. We do not use advertising identifiers.

3. Device permissions and features

4. How we use information

Where the law requires a legal basis (for example in the EEA and UK), we rely on performing our contract with you (running the app you chose to use), our legitimate interests (security, moderation, improving the service), your consent (notifications, which you can withdraw at any time), and legal obligations (for example, keeping purchase records).

5. Who we share information with

We do not sell personal information or share it for cross-context behavioral advertising.

6. Retention and deletion

We keep account information, your music, videos, comments, follows and your library while your account is active; in-app notifications and search history are deleted after 90 days, and “Get the app” taps on invite pages after 7 days. When you ask us to delete your account, we delete or de-identify its personal data within 30 days of verifying the request; copies in encrypted backups are overwritten within a further 30 days. Purchase and transaction records are kept for as long as tax and accounting law requires, and records of reports and enforcement are kept for up to 12 months to prevent abuse. Content other users already shared outside the app is beyond our control. Details: Delete your account.

7. Your choices and rights

You can edit your profile and make tracks private or delete them in the app, clear your search history or stop it being saved and stop your account being suggested to others in Settings → Privacy, turn off notifications in system settings, and cancel subscriptions in your App Store or Google Play account. Depending on where you live, you may also have the right to access, correct, delete, export or restrict the use of your personal information, to object to processing, and to withdraw consent. To make a request, email tuyetnt6134@icloud.com from the app (Profile → ••• → Contact Support) so we can match it to your device-linked account. We reply within 30 days and will not treat you differently for exercising your rights. You can also complain to your local data protection authority.

8. Security

All traffic between the apps and our service is encrypted in transit (HTTPS). Credentials are kept in the iOS Keychain or protected by the Android Keystore, access to our systems is restricted, and service providers are bound to protect the information they process for us. No method of transmission or storage is completely secure, but we work to protect your information and will notify you where the law requires.

9. International processing

Our service and providers may process information in countries other than yours, including the United States. Where required, we use appropriate safeguards such as standard contractual clauses.

10. Children

ShortMusic is not directed to children under 13 (or the higher minimum age where you live) and is not designed for children. If we learn that we have collected personal information from a child under that age, we delete it. Parents can contact us at tuyetnt6134@icloud.com.

11. Store privacy disclosures

The App Privacy details on the App Store and the Data safety section on Google Play summarize the practices in this policy. If they ever seem to differ, this policy describes what the apps do.

12. Changes

We will publish updates on this page with a new effective date, and tell you in the app before material changes take effect.

13. Contact

Email tuyetnt6134@icloud.com with any question about this policy or your information.