Privacy Policy

Updated at 2026-10-04

MusicDude (“we,” “our,” or “us”) is operated by DUDES and is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used and disclosed by MusicDude.

This Privacy Policy applies to the MusicDude mobile application and the servers it connects to (collectively, our “Service”). By using the Service, you signify that you have read and understood how we collect, store, use and disclose your personal information as described in this Privacy Policy and our Terms & Conditions.

Definitions and key terms

• Company: when this policy mentions “Company,” “we,” “us,” or “our,” it refers to DUDES, the operator of MusicDude, responsible for your information under this Privacy Policy.
• Country: where DUDES and the founders of MusicDude are based, in this case Italy.
• Device: any internet-connected device, such as a phone or tablet, used to access the Service.
• Personal Data: any information that directly, indirectly, or in connection with other information allows for the identification or identifiability of a natural person.
• Processor: a company that handles data on our behalf to run the Service, listed below.
• Service: the MusicDude app and its servers.
• You: a person who has registered with MusicDude to use the Service.

What Information Do We Collect?

• Your account: email address, first name if you give one, your password (stored only as a one-way hash), your app language, your chosen communication style, your handle if you pick one, and your time zone offset. If you sign in with Google or Apple, we store only their account identifier, never a password from them. We also record when you confirmed that you are 16 or older at sign-up and, if you choose the “18+” communication style, when and from which app version you confirmed that you are 18 or older.
• Your music: the tracks you add — library files you import (such as a file made with TuneMyMusic, or a Spotify or Apple data export), playlist links you paste, songs you search and add, your Apple Music library if you import it on iPhone (read on your device), and playlists you import from Spotify or Apple Music through ListenBrainz. MusicDude never asks for your Spotify or Apple Music password. If you use TuneMyMusic to make a file of your library, you log in to your music service on TuneMyMusic's own website, an independent service with its own privacy policy; we receive only the resulting list of tracks.
• Your listening, only if you turn on Live listening: on Android, with the Notification access you grant, the title and artist of what plays in your media apps and when; on iPhone, what plays in the Music app and your Music library's play counts; and, if you connect ListenBrainz, the Spotify listens ListenBrainz records for you. You can turn these off at any time in your device settings or in the app.
• Mood moments, only if you turn on care check-ins or right-moment notifications: when Live listening notices a moment in a listening session — a run of one mood, a change of mood, or one song on loop — we record that moment (its kind, the mood and when the session started), so the matching notification is sent only once. If neither switch is on, the moods of your sessions are not recorded.
• How you respond to recommendations: when you play a recommended track for 15 seconds or more, open it in your music service, skip it, save it, or tap “More of this” or “Not for me”, we log that together with the recommendation it belongs to, and use it to improve recommendations.
• Your taste profile, computed on our servers from that music: eras, regions, languages, moods and similar descriptors.
• Social features you use: your friend code, the friends you add, playlists you create, your game results and league standings, and the gigs you mark “I'm going”.
• Location, only when you ask: an event search uses your position or the city you type and does not store it. If you turn on event alerts, we keep an area rounded to about 10 km, or the city you chose, and delete it when you turn alerts off.
• Notification tokens for your device, so we can send the notifications you turn on.
• Subscription status (active, trial, expired) from the app stores via RevenueCat. We never see your card details.

We do not collect your contacts, photos, camera, microphone or advertising identifiers.

How Do We Use The Information We Collect?

• To provide the Service: your portrait, eras, daily card, recommendations, playlists, event matches and taste comparisons with friends.
• To send the notifications you turned on: the daily song, listening check-ins and event alerts. Each has its own switch in the app.
• To write the short descriptions in the app (see “AI-written descriptions” below).
• To improve recommendations, from how you respond to them.
• To process subscriptions and restore purchases.
• To keep the Service secure and working.

We do not sell your data, we do not show advertising, and we do not use your data for advertising or share it with advertisers.

What Your Friends Can See

When you compare with a friend, they see a taste comparison: shared and different eras, regions, languages and genres, a match percentage and blend playlists. Your listening moods, your mood moments, your listening times and your individual plays are never shown to anyone else.

• Games: individual tracks from your library can appear in your friends' games (for example “Whose Track Is It?”), unless you turn this off in Profile.
• Gigs: the gigs you mark “I'm going” are visible to your friends, unless you turn this off in Profile. It is on by default.
• Weekly leagues: other players in your league see your handle and your points, never your email. Friends may see your first name instead of your handle.

AI-written descriptions

Some short texts in the app are written by an AI model from aggregated facts about your taste (for example “mostly the nineties, indie rock, English and Spanish”). These facts are sent through OpenRouter to Google's Gemini models without your name, email or any identifier. The texts contain no numbers and never describe your health, mental state or life events. If you use Belarusian, these texts are shown in Ukrainian.

To tell which language a song is sung in, we may look up its lyrics on LRCLIB and, when that is not enough, send the song's title and artist through OpenRouter to a Google Gemini model. This concerns songs in the catalogue, not you: no name, email or identifier is sent. Lyrics are used only to detect the language and are not stored.

Do we share the information we collect with third parties?

Only with processors that run the Service for us, each receiving only what its task needs:

• Supabase (database) and Render (servers) host the Service.
• OpenRouter and Google receive aggregated taste facts, without identifiers, to write descriptions, and song titles and artist names to detect a song's language.
• Ticketmaster receives the city you search, or your position when you use it, to find events.
• Deezer, Apple iTunes, MusicBrainz, Wikidata and LRCLIB receive track and artist names to look up music information; MusicBrainz may also receive the city you search. None of them learn who you are.
• ListenBrainz (MetaBrainz Foundation), only if you connect it: we read the listens it records for you (which is how Spotify listening on iPhone reaches MusicDude) and the playlists you choose to import, and send it the tracks of playlists you export to Spotify or Apple Music. Listens on ListenBrainz are public by default under ListenBrainz's own settings.
• RevenueCat, Google Play and the Apple App Store handle subscriptions and payments.
• Google and Apple verify your sign-in if you use them.
• Firebase Cloud Messaging (Android) and Apple Push Notification service (iPhone) deliver notifications.

We may also disclose information to government or law enforcement officials where required by law, or to protect our rights, the safety of the public or any person, or to prevent illegal activity.

Event Listings

Event details come from Ticketmaster and MusicBrainz. We keep them in memory for about an hour and never in a database, so a listing removed at the source, or on request, is gone from MusicDude within 24 hours. For alerts we remember only a one-way code for each event already sent to you.

How Long Do We Keep Your Information?

Your data is kept while your account exists. Mood moments and your responses to recommendations are kept until you delete your account. Deleting your account (Profile → Delete account) removes your profile, library, plays, taste profile, mood moments, friends, playlists, game results, alerts and notification tokens from our database immediately. Copies in our hosting providers' routine backups expire on their own schedule.

How Do We Protect Your Information?

Data travels encrypted (HTTPS) between the app and our servers. Passwords are stored only as one-way hashes, and access to production systems is restricted. We cannot, however, guarantee absolute security of any information you transmit to the Service.

Could my information be transferred to other countries?

DUDES is based in Italy. Some of our processors may process data outside the European Economic Area. Where they do, the transfer relies on the safeguards those providers offer under the GDPR, such as Standard Contractual Clauses.

Information about General Data Protection Regulation (GDPR)

If you are in the European Economic Area, we process your data on these legal bases:

• Contract: to provide the Service you signed up for.
• Consent: for Live listening, notifications (including care check-ins and right-moment notifications, and the mood moments they record) and location-based event features, each of which you can withdraw at any time in the app or your device settings.
• Legitimate interest: to keep the Service secure and working, to improve recommendations from how you respond to them, and to show friends your tracks in games and the gigs you plan to attend, both of which you can turn off.

Your Rights

You have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time. You can delete everything yourself in the app (Profile → Delete account); for anything else, contact us at the address below. You also have the right to lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali.

Kids' Privacy

MusicDude is not intended for anyone under 16. Creating an account requires confirming that you are 16 or older, and we do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us and we will delete it. The “18+” communication style, which uses swearing, is only available to users who confirm they are 18 or older; we record when, and from which app version, that confirmation was given.

Subscriptions and Payments

Subscriptions are purchased through Google Play or the Apple App Store and managed by RevenueCat. Your payment details are handled by the store; we only receive whether your subscription is active. Deleting your MusicDude account does not cancel a store subscription — cancel it in Google Play or the App Store.

Changes To Our Privacy Policy

We may need to change this Privacy Policy so that it accurately reflects our Service. Unless otherwise required by law, we will notify you through the Service before we make material changes and give you an opportunity to review them. If you do not agree to an updated Privacy Policy, you can delete your account.

Governing Law

This Privacy Policy is governed by the laws of Italy, without prejudice to the mandatory protections of the country where you live.

Contact Us

Don't hesitate to contact us if you have any questions.

• DUDES — Via Email: dudes.info.temp@gmail.com