Privacy policy

Privacy Policy
Last updated: July 23, 2026
This Privacy Policy explains how Musiscape Media GmbH ("Musiscape", "we", "us") collects, uses and protects personal data when you use the Musiscape mobile app (the "App") and our website at musiscape.com (the "Website", together the "Services").
We built Musiscape to help children fall asleep — not to collect data. We only process the minimum information needed to run the Services, and we do not sell personal data or show third-party advertising.
1. Who is responsible
The controller responsible for data processing is:
Musiscape Media GmbH
Heinrich-Lübke Str. 39
32427, Minden
Germany
Email: admin@musiscape.com
2. Children
Musiscape is made for parents and legal guardians. Accounts may only be created and subscriptions may only be purchased by adults. The App does not knowingly collect personal data from children: no account is required to listen to the free content, the App shows no advertising, and it contains no social features, chat or profiling of listeners. If you believe a child has created an account without a guardian's involvement, contact us at admin@musiscape.com and we will delete it.
3. What data we collect
When you use the App without an account:
No personal data is collected. The App loads music and cover images from our servers; our infrastructure provider processes your IP address for the technical delivery of this content (see section 5). Playback progress ("continue listening") is stored only locally on your device.
When you create an account (optional):
Your email address — used to sign you in via a one-time sign-in link ("magic link") and to associate your subscription with your account.
Your listening progress (which track and position you last played) — so playback can resume across sessions.
Your playlists (names and the tracks you add) — a Premium feature.
When you purchase a subscription:
The purchase itself is handled entirely by Google Play or the Apple App Store. We never see or store your payment details (no card numbers, no bank data).
We receive a pseudonymous confirmation of your subscription status (active / expired) via our subscription-management provider RevenueCat so the App can unlock Premium content.
When you visit the Website:
The Website is hosted on Shopify. Shopify processes technical data (such as your IP address and browser information) needed to serve the site. See Shopify's privacy policy for details.
We do not use third-party advertising networks and we do not sell personal data.
4. Why we process this data (legal bases under the GDPR)
Purpose    Data    Legal basis
Providing the App and streaming music    IP address (technical delivery)    Art. 6(1)(b) GDPR — performance of a contract
Account sign-in via magic link    Email address    Art. 6(1)(b) GDPR
Resuming playback, playlists    Listening progress, playlist contents    Art. 6(1)(b) GDPR
Unlocking and managing Premium    Subscription status    Art. 6(1)(b) GDPR
Responding to support requests    Email address, message contents    Art. 6(1)(b) and (f) GDPR
Complying with legal obligations (e.g. tax records for purchases)    Transaction records held by the app stores    Art. 6(1)(c) GDPR
5. Service providers we work with
We share data only with the processors needed to run the Services:
Supabase — database and authentication hosting (stores your email address, listening progress and playlists).
RevenueCat, Inc. — subscription status management (processes a pseudonymous app-user ID and purchase metadata; no payment details).
Google Play / Apple App Store — payment processing and app distribution (governed by their own privacy policies).
Shopify — website hosting.
Expo (EAS) — delivery of app updates (processes technical device data needed to serve the correct update).
Where these providers process data outside the EU/EEA, transfers are safeguarded by the EU Standard Contractual Clauses and/or an adequacy decision (e.g. the EU-US Data Privacy Framework, where the provider is certified).
6. How long we keep data
Account data (email, listening progress, playlists) is kept until you delete your account.
You can delete your account at any time directly in the App (Settings → Delete account). Deletion removes your account and the data linked to it from our systems without undue delay.
Purchase records are retained by Google/Apple and, where legally required, in our accounting records for the statutory retention periods.
7. Your rights
Under the GDPR you have the right to:
access the personal data we hold about you (Art. 15),
rectification of inaccurate data (Art. 16),
erasure (Art. 17) — also available self-service in the App,
restriction of processing (Art. 18),
data portability (Art. 20),
object to processing based on legitimate interests (Art. 21), and
lodge a complaint with a supervisory authority (Art. 77). In Germany, this is the data protection authority of your federal state.
To exercise any of these rights, email us at admin@musiscape.com.
8. Data security
All communication between the App, the Website and our servers is encrypted in transit (TLS). Access to personal data in our database is protected by row-level security, so each account can only access its own data.
9. Changes to this policy
We may update this Privacy Policy when the Services or the legal situation change. The current version is always available at musiscape.com. If changes are significant, we will inform you in the App or by email.