Privacy Policy

Information used to provide MAHU

Optional accounts. If you continue with Apple or Google, we receive a provider-specific account identifier and the email address that provider shares with us, which may be an Apple private relay address. We store those details, your MAHU account identifier, account timestamps, and sign-in session information to recognize your account and keep you signed in. For Apple sign-in, we also retain encrypted authorization tokens so we can revoke the connection when you delete your account. We do not receive your Apple or Google password.

Saved music. When you sign in and save a song, we store that song's identifier with your account so your saved library can be available on other devices. Your saved library is private.

On your device. The website keeps player preferences and playback state, such as the current song, queue, volume, repeat setting, and position, in browser storage. The iOS app keeps its active queue and playback state on the device while you listen. Guest saved music stays on the device. We use session cookies or secure app storage to keep you signed in.

Service requests. Streaming and hosting providers retain operational logs that include your IP address, country derived from the connection, request times, requested pages or audio files, browser or app information, response results, and request-processing times. Requested audio addresses identify the song being streamed. These records help deliver music, protect the service, and diagnose errors and performance problems. MAHU does not add advertising trackers or a playback analytics SDK to the app or website.

Support. If you email us, we receive your email address, your message, and any files or troubleshooting details you choose to provide. We use them to respond and resolve the issue.

Optional email updates. If you separately join the mailing list at Updates, we store your email address, signup time, consent record, and email delivery status. The curator receives a signup notification through the email service. We use this information to send the music updates you requested and manage the list. Sign-in and mailing-list forms also use temporary rate-limit records derived from IP addresses to prevent abuse.

How information is used and shared

We use information to operate your account, deliver audio, save your library, provide support, protect the service, and meet legal obligations. Creating an account does not subscribe you to a marketing mailing list. We do not sell personal information, share it for targeted advertising, or track you across other companies' apps and websites for advertising.

Hosting, database, delivery, and email providers process information needed to run the service for us, including Cloudflare and our website hosting infrastructure. Apple or Google processes information when you choose its sign-in option. Those providers' own services are also governed by their policies: Apple, Google, and Cloudflare.

We may disclose information when required by valid legal process or when necessary and lawful to address fraud, protect safety, or defend legal rights. Service providers may process information in countries outside your own. Where applicable law requires a transfer safeguard, we use the safeguards required for that transfer.

Where a legal basis is required, we process account and saved-library data to provide the service you request; necessary security and support data for our legitimate interests in operating a reliable service; information needed to comply with legal duties; and optional information on the basis of consent where required. You may withdraw consent without affecting processing that was lawful before withdrawal.

Retention and deletion

Account details and saved music are kept while your account is active. Use Account and choose Delete account to remove the account and saved library from our active service and end its sign-in sessions. Deleting MAHU does not delete your Apple or Google account. Removing the app or signing out alone does not delete your MAHU account.

Local player information remains on a device until cleared or replaced. You can remove website storage through your browser settings or remove the iOS app and its data through device settings. Limited information may remain in provider backups until those backups expire, or be kept where necessary to meet a legal duty, resolve a dispute, or investigate abuse. We retain support messages and security logs only as long as needed for their purpose and applicable legal requirements.

Mailing-list membership is separate from your MAHU account. We keep the subscription until you unsubscribe. To leave, email mahumesso@gmail.com from the subscribed address. We will remove you from active mailings; a limited record of your request may be kept to honor your choice or meet legal obligations. Deleting your MAHU account does not automatically unsubscribe an independently provided mailing-list address.

Your choices and rights

You can listen to public music without signing in. You can remove saved songs, sign out, clear local data, or delete your account. Depending on applicable law, you may also request access, correction, a portable copy, deletion, or restriction of your information, object to certain processing, or appeal a privacy decision. Send requests to mahumesso@gmail.com. We may ask for information reasonably needed to verify the request. You may also complain to your local data protection authority.

Children and policy changes

MAHU is not directed to children under 13 or anyone below a higher applicable minimum age. We do not knowingly collect their account information. Contact us if you believe a child has provided personal information so we can investigate and remove it as required.

Updates will appear here with a new effective date. We will provide additional notice or obtain consent when required for a material change.