Privacy Policy
Last updated May 5, 2026
Cthru is built around music taste, privacy controls, and user choice. This policy explains what information Cthru collects, how it is used, and what you can control.
What Cthru collects
Cthru collects account and profile information, such as your account identifier, email or sign-in provider information, display name, username, avatar, profile visibility, and app settings.
When you connect Apple Music, Cthru uses Apple Music authorization and music metadata to create Cthru stations, playlists, favorites, and Tastemaker experiences. This can include catalog IDs, track and artist metadata, artwork URLs, playlist or favorite metadata used inside Cthru, and playback-related app state.
Cthru also stores app activity needed to run the product, such as station actions, playlist and favorite actions, Tastemaker requests, approvals, blocks, reports, invite records, moderation decisions, and account deletion requests.
Cthru does not share MusicKit audio files, raw Apple Music library contents, raw Apple Music playlists, raw Apple Music favorites, or listening history with other users.
Apple Music boundaries
Cthru uses Apple Music authorization and Apple Music-derived metadata to power Cthru experiences. Cthru does not sell Apple Music data and does not use Apple Music data for advertising, tracking, device fingerprinting, or unrelated third-party sharing.
Sharing controls
Cthru profiles start hidden. You can choose whether your profile is Hidden, Private, or Public, and you can control whether Cthru-created stations, Cthru-created playlists, and Cthru-created favorites are visible to others. Shared Tastemaker surfaces are controlled by your visibility settings and by relationship or access state.
Moderation and safety
Cthru reviews user-selected profile photos and user-created or user-edited station titles before they can become visible to others. Cthru also supports reporting and blocking Tastemakers. Moderation, report, and block records may be retained as needed for safety, abuse prevention, and audit.
Service providers
Cthru uses service providers to operate the app, including Supabase for authentication, database, storage, and backend functions; Expo and EAS Update for app delivery and update services; OpenAI for automated moderation of user-generated text and images; and Apple Music/MusicKit for Apple Music authorization, playback, and music metadata.
Your choices
You can change profile and sharing settings in the app, disconnect or revoke Apple Music access, block or report Tastemakers, and delete your account from Settings. You can also contact support with privacy or account questions.
Retention
Account data persists until deletion. Invite, request, moderation, report, and block records may be retained as needed for safety, abuse prevention, and audit. Local cached data can be cleared by app deletion or sign-out flows where applicable.
Contacts, ads, and tracking
Cthru does not collect Contacts for the first beta. Invites use the native share sheet and do not require Contacts permission. Cthru does not use advertising SDKs and does not use your data for cross-app or cross-site tracking in the first beta.
Contact
For privacy or account questions, email support@cthru.app.