Privacy Policy

Cthru is built around music taste, privacy controls, and user choice. This policy explains what information Cthru collects, how it is used, and what you can control.

What Cthru collects

Cthru collects account and profile information, such as your account identifier, email or sign-in provider information, display name, username, avatar, profile visibility, and app settings.

If you request beta access on the Cthru website, Cthru stores the email address you provide, request and invitation-attempt timestamps, invitation status, and an opaque TestFlight tester identifier after an invitation is handled. This information is used only to administer beta access and send transactional TestFlight invitations, not for marketing, advertising, or tracking.

When you connect Apple Music, Cthru uses Apple Music authorization and music metadata to create Cthru stations, playlists, favorites, and Tastemaker experiences, and to power Tune In live profile sessions when you choose to use them. This can include catalog IDs, track and artist metadata, artwork URLs, playlist or favorite metadata used inside Cthru, and playback-related app state.

Cthru also stores app activity needed to run the product, such as station actions, playlist and favorite actions, Tastemaker requests, approvals, blocks, reports, invite records, moderation decisions, and account deletion requests.

If you use Tune In or live profile features, Cthru may store compact session metadata and activity, such as host and listener account IDs, current Apple catalog IDs, allowed current-track metadata, approximate playback position, play or pause state, session timestamps, heartbeat or expiry state, listener joins and leaves, removals, blocks, reactions, and listened-through-profile activity.

Apple Music boundaries

Cthru uses Apple Music authorization and Apple Music-derived metadata to power Cthru experiences. Cthru does not sell Apple Music data and does not use Apple Music data for advertising, tracking, device fingerprinting, or unrelated third-party sharing.

Tune In syncs session metadata, not audio. Listeners use their own Apple Music authorization and entitlement. Cthru does not stream, record, rebroadcast, or relay Apple Music audio from one user to another.

Sharing controls

Cthru profiles start hidden. You can choose whether your profile is Hidden, Private, or Public, and you can control whether Cthru-created stations, Cthru-created playlists, and Cthru-created favorites are visible to others. Shared Tastemaker surfaces are controlled by your visibility settings and by relationship or access state.

Tune In is private by default for each listening session. If you allow Tune In for a session, eligible profile viewers may see that you are live, view allowed current-track metadata, tune in through their own Apple Music account, react, and appear in live-session or recent activity surfaces until you turn Tune In off or the session ends.

Moderation and safety

Cthru reviews user-selected profile photos and user-created or user-edited station titles before they can become visible to others. Cthru also supports reporting and blocking Tastemakers and Tune In participants. Moderation, report, block, removal, and live-session records may be retained as needed for safety, abuse prevention, and audit.

Service providers

Cthru uses service providers to operate the app, including Supabase for authentication, database, storage, and backend functions; Expo and EAS Update for app delivery and update services; OpenAI for automated moderation of user-generated text and images; and Apple Music/MusicKit for Apple Music authorization, playback, and music metadata. Apple App Store Connect and TestFlight are used to administer beta invitations.

Your choices

You can change profile and sharing settings in the app, disconnect or revoke Apple Music access, block or report Tastemakers, and delete your account from Settings. You can also contact support to ask about or delete a website beta request, or with other privacy or account questions.

Retention

Account data persists until deletion. Invite, request, moderation, report, block, removal, and live-session records may be retained as needed for functionality, safety, abuse prevention, and audit. Local cached data can be cleared by app deletion or sign-out flows where applicable. Website beta requests are retained while Cthru administers beta access and may be deleted by contacting support.

Contacts, ads, and tracking

Cthru does not collect Contacts for the first beta. Invites use the native share sheet and do not require Contacts permission. Cthru does not use advertising SDKs and does not use your data for cross-app or cross-site tracking in the first beta.

Contact

For privacy or account questions, email support@cthru.app.