PRIVACY POLICY

Last Updated: May 03, 2026
Effective Date: May 03, 2026

This Privacy Policy explains how Spotlit, Inc., including its affiliates, successors, assigns, operators, and authorized representatives, referred to as “Spotlit,” “Musaic,” “we,” “us,” or “our,” collects, uses, discloses, stores, protects, and otherwise processes information in connection with the Musaic mobile application, website, platform, music experience, artist identities, waitlists, memberships, deep links, landing pages, and related services, collectively referred to as the “Service.”

By accessing or using Musaic (from Spotlit), you acknowledge this Privacy Policy.

If you do not agree with this Privacy Policy, do not access or use Musaic (from Spotlit).

1. Summary

This summary is provided for convenience only. The full Privacy Policy below controls.

We may collect information such as:

  1. Apple Sign-In information.
  2. Account information.
  3. Contact information, if provided.
  4. Waitlist information.
  5. Future A-Lister membership information.
  6. Billing mobile number, if introduced for verification or membership.
  7. Listening activity.
  8. Ratings, favorites, bookmarks, and interactions.
  9. Vibe selections and preference signals.
  10. Deep-link sharing activity.
  11. Device, browser, network, and app information.
  12. Security, fraud prevention, and anti-piracy signals.
  13. Support communications.
  14. Moonlitter-related information, where applicable.

We use this information to operate Musaic, personalize your experience, secure the Service, prevent abuse, protect Musaic Content, operate deep links, manage memberships, communicate with you, and comply with law.

We do not grant you ownership of Musaic Content when we process your information.

2. Scope of This Privacy Policy

This Privacy Policy applies to information processed through:

  1. The Musaic app.
  2. Musaic websites and landing pages.
  3. Official Musaic Links.
  4. Account registration and Apple Sign-In.
  5. Waitlists.
  6. A-Lister membership features.
  7. Customer support.
  8. Security and anti-piracy systems.
  9. Analytics and app improvement tools.
  10. Moonlitter-related forms, applications, or contracts, where applicable.

This Privacy Policy does not apply to third-party websites, apps, services, or platforms that we do not control.

3. Information We Collect

3.1 Account Information

When you create or access an Account, we may collect:

  1. Account identifier.
  2. Apple Sign-In identifier.
  3. Name, if provided.
  4. Email address, if provided or shared by Apple.
  5. Authentication information.
  6. Account status.
  7. Membership status.
  8. Waitlist status.
  9. A-Lister status, if applicable.
  10. Account creation date.
  11. Account deletion or suspension status.

3.2 Contact Information

We may collect contact information you provide, including:

  1. Email address.
  2. Phone number.
  3. Billing mobile number, if future A-Lister verification uses mobile billing or mobile confirmation.
  4. Support contact details.
  5. Communication preferences.

3.3 Membership, Waitlist, and A-Lister Information

If you join a waitlist, apply for A-Lister access, or participate in future membership features, we may collect:

  1. Membership tier.
  2. Waitlist registration details.
  3. Verification status.
  4. Billing mobile number, if applicable.
  5. Payment or subscription status, if future paid tiers are introduced.
  6. Membership preferences.
  7. Eligibility information.
  8. Invite, referral, or access code information.
  9. Benefits, rewards, or tier usage.

3.4 Listening, Interaction, and Preference Information

When you use Musaic, we may collect information about your activity, including:

  1. Tracks viewed.
  2. Tracks streamed.
  3. Listening duration.
  4. Playback interactions.
  5. Favorites.
  6. Bookmarks.
  7. Ratings.
  8. Search activity.
  9. Playlist activity.
  10. Artist interactions.
  11. Vibe selections.
  12. Recommendation interactions.
  13. App navigation.
  14. Content discovery patterns.
  15. Feature usage.
  16. Session activity.

3.5 Deep Link and Sharing Information

When you share or open an Official Musaic Link, we may collect:

  1. Track identifier.
  2. Artist identifier.
  3. Share identifier.
  4. Deep-link identifier.
  5. Sharer Account identifier, where applicable.
  6. Timestamp.
  7. Referral source, where available.
  8. Link-click activity.
  9. App-open activity.
  10. Landing-page activity.
  11. Share format.
  12. Device type.
  13. Browser type.
  14. App version.
  15. IP address.
  16. General location inferred from IP address.
  17. Security and abuse signals.

We use this information to operate deep links, route users to the correct content, measure engagement, prevent abuse, protect Musaic Content, and enforce our Terms.

3.6 Device, Browser, Network, and Technical Information

We may collect technical information such as:

  1. Device type.
  2. Operating system.
  3. App version.
  4. Browser type.
  5. IP address.
  6. General location inferred from IP address.
  7. Language settings.
  8. Time zone.
  9. Crash logs.
  10. Diagnostic logs.
  11. Performance data.
  12. Security logs.
  13. Session identifiers.
  14. Access times.
  15. Referring pages or links.
  16. Error reports.

3.7 Security, Anti-Abuse, and Content Protection Information

To protect Musaic, users, artists, rightsholders, Moonlitters, and Musaic Content, we may process:

  1. Account security signals.
  2. Suspicious activity signals.
  3. Rate-limit information.
  4. Bot detection signals.
  5. Scraping detection signals.
  6. Deep-link abuse signals.
  7. Content identifiers.
  8. Watermark identifiers, where applicable.
  9. Share identifiers.
  10. Playback and access logs.
  11. Takedown or enforcement records.
  12. Unauthorized copying or misuse reports.
  13. Evidence of Terms violations.

We use this information to prevent fraud, misuse, scraping, unauthorized copying, AI training, content extraction, and other violations of our Terms.

3.8 Support and Communications

If you contact us, we may collect:

  1. Name.
  2. Email address.
  3. Phone number, if provided.
  4. Message content.
  5. Attachments.
  6. Support history.
  7. Issue category.
  8. Resolution notes.

3.9 Moonlitter Information

If you apply for, participate in, or are considered for the Moonlitter Program, we may collect:

  1. Name.
  2. Contact information.
  3. Image.
  4. Likeness.
  5. Voice, where applicable.
  6. Story information.
  7. Biography.
  8. Social handles.
  9. Contract information.
  10. Payment or revenue-share information.
  11. Tax information, where required.
  12. Promotional preferences.
  13. Consent records.
  14. Approval records.
  15. Creative contribution records.

Moonlitter participation may be subject to separate agreements and notices.

3.10 Future Payment Information

If Musaic introduces paid memberships, subscriptions, purchases, paid A-Lister tiers, or other paid features, payment information may be processed by third-party payment providers or app platforms.

We may receive limited payment-related information such as:

  1. Subscription status.
  2. Purchase status.
  3. Transaction identifier.
  4. Payment confirmation.
  5. Billing status.
  6. Refund status.
  7. Tier status.

We do not intend to store full credit card numbers unless expressly stated and legally compliant.

4. Sources of Information

We may collect information from:

  1. You.
  2. Your device.
  3. Your use of the Service.
  4. Apple Sign-In.
  5. App platforms.
  6. Analytics providers.
  7. Hosting and cloud providers.
  8. Security and anti-abuse tools.
  9. Payment providers, if future paid features are introduced.
  10. Customer support tools.
  11. Moonlitter applications or agreements.
  12. Publicly available sources, where lawful.
  13. Legal, enforcement, or takedown communications.

5. How We Use Information

We may use information to:

  1. Provide the Service.
  2. Create and manage Accounts.
  3. Authenticate users.
  4. Operate Apple Sign-In and future login methods.
  5. Stream Musaic Content inside the app.
  6. Operate Official Musaic Links.
  7. Display cover image, track title, artist identity, vibe, and other non-audio deep-link information.
  8. Personalize content and recommendations.
  9. Understand user preferences.
  10. Manage ratings, favorites, bookmarks, and interactions.
  11. Operate waitlists.
  12. Manage A-Lister membership features.
  13. Verify future billing mobile numbers, if introduced.
  14. Process future payments or subscriptions, if introduced.
  15. Communicate with users.
  16. Provide customer support.
  17. Improve the Service.
  18. Fix bugs and technical issues.
  19. Analyze performance.
  20. Prevent fraud, scraping, bot activity, and abuse.
  21. Protect Musaic Content.
  22. Detect unauthorized copying, extraction, recording, AI training, or misuse.
  23. Enforce our Terms.
  24. Send legal notices.
  25. Process rights claims or takedown requests.
  26. Comply with law.
  27. Protect our rights, users, partners, artists, rightsholders, and Moonlitters.
  28. Support business operations, financing, audits, transactions, and corporate governance.

6. AI and Automated Technologies

Musaic may use artificial intelligence, machine learning, recommendation systems, automation, and similar technologies to:

  1. Personalize recommendations.
  2. Organize content.
  3. Improve discovery.
  4. Support playlist and vibe experiences.
  5. Analyze usage patterns.
  6. Improve app functionality.
  7. Detect abuse.
  8. Protect Musaic Content.
  9. Support moderation and safety.
  10. Improve security.
  11. Assist creative, production, or operational workflows.

Musaic Content may include AI-assisted, AI-generated, synthetic, human-authored, human-led, licensed, curated, commissioned, or platform-created content.

We do not grant users rights to train AI systems on Musaic Content.

7. Sharing and Deep Links

Musaic may allow users to share Official Musaic Links.

When you share or open an Official Musaic Link, the link may display limited non-audio information, such as:

  1. Cover image.
  2. Track title.
  3. Artist identity.
  4. Vibe.
  5. Category.
  6. Short description.
  7. Musaic branding.
  8. “Listen on Musaic” call-to-action.

At launch, Official Musaic Links are not intended to provide external access to audio.

We may collect and use deep-link data to:

  1. Generate Official Musaic Links.
  2. Route users to the correct Musaic content.
  3. Open the app when installed.
  4. Display a landing page when the app is not installed.
  5. Measure engagement.
  6. Prevent scraping.
  7. Prevent unauthorized copying.
  8. Protect Musaic Content.
  9. Enforce our Terms.
  10. Improve the Service.

Shared Musaic links do not grant users ownership of Musaic Content or any right to use Musaic music outside the app.

8. Future Connected Services

Musaic is operated by Spotlit, Inc.

At launch, this Privacy Policy applies to Musaic. In the future, Spotlit, Inc. may connect Musaic with other Spotlit-operated services, including Spotlit, where available.

If connected services are enabled, we may use account information, preferences, activity, security signals, and app interactions across connected Spotlit-operated services to authenticate users, personalize experiences, protect content, prevent abuse, improve services, and enforce our terms.

We will update this Privacy Policy or provide additional notice where required by law.

9. How We Share Information

We may share information with the following categories of recipients.

9.1 Service Providers

We may share information with companies that help us operate the Service, including:

  1. Hosting providers.
  2. Cloud infrastructure providers.
  3. Analytics providers.
  4. Crash reporting providers.
  5. Authentication providers.
  6. Customer support providers.
  7. Security providers.
  8. Anti-abuse providers.
  9. Deep-linking providers.
  10. Content delivery providers.
  11. Email and communication providers.
  12. Payment processors, if future paid features are introduced.

These providers may process information on our behalf and under appropriate contractual restrictions.

9.2 App Platforms and Authentication Providers

We may share or receive information from app platforms and authentication providers, including Apple, to support login, app distribution, account functionality, app security, analytics, payment functionality, and platform compliance.

9.3 Rightsholders, Artists, Moonlitters, and Partners

We may share aggregated, de-identified, or limited information with rightsholders, artists, Moonlitters, partners, or contributors for:

  1. Reporting.
  2. Revenue share calculations.
  3. Performance measurement.
  4. Content management.
  5. Rights protection.
  6. Program administration.

Where user-level information is required for legal, security, enforcement, or contractual reasons, we may share it as permitted by law and our agreements.

9.4 Legal, Safety, and Enforcement

We may disclose information if we believe it is reasonably necessary to:

  1. Comply with law.
  2. Respond to legal process.
  3. Enforce our Terms.
  4. Protect Musaic Content.
  5. Investigate abuse.
  6. Prevent fraud.
  7. Protect rights, property, or safety.
  8. Respond to rights claims or takedown notices.
  9. Cooperate with courts, regulators, law enforcement, or legal representatives.

9.5 Corporate Transactions

We may disclose or transfer information in connection with:

  1. Merger.
  2. Acquisition.
  3. Financing.
  4. Investment.
  5. Reorganization.
  6. Bankruptcy.
  7. Sale of assets.
  8. Change of control.
  9. Corporate restructuring.

9.6 Public or Shared Information

If you use sharing features, certain non-audio information may be visible to recipients of Official Musaic Links or on Musaic-controlled landing pages, such as cover image, track title, artist identity, vibe, short description, and Musaic branding.

You should not share a link if you do not want others to see the content associated with that link.

10. Cookies, SDKs, Analytics, and Similar Technologies

We and our service providers may use cookies, software development kits, pixels, local storage, analytics tools, deep-linking tools, crash reporting tools, and similar technologies to:

  1. Operate the Service.
  2. Authenticate users.
  3. Remember preferences.
  4. Measure usage.
  5. Improve performance.
  6. Route deep links.
  7. Detect fraud and abuse.
  8. Protect Musaic Content.
  9. Debug errors.
  10. Understand engagement.

Where required by law, we will request consent for certain technologies.

11. Data Retention

We retain information for as long as reasonably necessary to:

  1. Provide the Service.
  2. Maintain your Account.
  3. Operate memberships and waitlists.
  4. Maintain deep-link functionality.
  5. Provide support.
  6. Protect Musaic Content.
  7. Detect and prevent abuse.
  8. Enforce our Terms.
  9. Resolve disputes.
  10. Comply with law.
  11. Maintain business records.

We may retain certain information after Account deletion where necessary for legal, security, fraud prevention, enforcement, tax, accounting, audit, rights protection, or legitimate business purposes.

When information is no longer needed, we may delete, anonymize, or de-identify it.

12. Account Deletion

You may request deletion of your Account through the method made available in the app or by contacting us at:

Email: deletemyaccount@spotlit.co

Account deletion may remove or disable your Account and personal information associated with it, except where we are legally required or permitted to retain information.

We may retain information where necessary for:

  1. Legal compliance.
  2. Security.
  3. Fraud prevention.
  4. Abuse prevention.
  5. Enforcement of Terms.
  6. Rights protection.
  7. Takedown or legal records.
  8. Tax, accounting, or audit obligations.
  9. Dispute resolution.

Deleting your Account may not remove information that has already been aggregated, de-identified, anonymized, or lawfully retained.

13. Security

We use reasonable administrative, technical, and organizational measures designed to protect information.

However, no system is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered, lost, or destroyed.

You are responsible for keeping your login credentials secure and for any activity that occurs through your Account.

14. International Data Transfers

Musaic may process information in the United States, India, and other countries where we, our affiliates, or our service providers operate.

These countries may have data protection laws that differ from the laws of your country.

Where required, we use appropriate safeguards for international transfers.

15. Your Choices

Depending on your location and applicable law, you may have the right to:

  1. Access your personal information.
  2. Correct inaccurate information.
  3. Delete certain information.
  4. Object to certain processing.
  5. Restrict certain processing.
  6. Withdraw consent where processing is based on consent.
  7. Request a copy of certain information.
  8. Opt out of certain communications.
  9. Appeal a privacy request decision, where applicable.
  10. Lodge a complaint with a data protection authority, where applicable.

To make a request, contact us at:

Email: legal@spotlit.co

We may need to verify your identity before responding.

16. Communications

We may send you Service-related communications, including:

  1. Account notices.
  2. Security notices.
  3. Terms and policy updates.
  4. Waitlist updates.
  5. A-Lister updates.
  6. Support responses.
  7. Important Service announcements.

Where permitted by law, we may also send promotional communications. You may opt out of promotional communications, but you may still receive non-promotional Service communications.

17. Individuals Under 16

Musaic is not intended for individuals under 16.

We do not knowingly collect personal information from individuals under 16.

If you believe an individual under 16 has provided us personal information, contact us at:

Email: legal@spotlit.co

If we learn that we collected personal information from an individual under 16 without appropriate consent, we will take reasonable steps to delete it.

If your country or region requires a higher minimum age, parental consent, or guardian consent, that higher requirement applies.

18. California and U.S. State Privacy Notice

This section applies to users who have rights under applicable U.S. state privacy laws.

Depending on your location, you may have rights to:

  1. Know what categories of personal information we collect.
  2. Know the purposes for collection and use.
  3. Access personal information.
  4. Correct personal information.
  5. Delete personal information.
  6. Receive a portable copy of certain information.
  7. Opt out of certain sales, sharing, or targeted advertising, where applicable.
  8. Limit certain uses of sensitive personal information, where applicable.
  9. Not be discriminated against for exercising privacy rights.

Categories of Personal Information We May Collect

We may collect the following categories:

  1. Identifiers, such as name, email address, Account ID, Apple Sign-In identifier, phone number, IP address, and device identifiers.
  2. Commercial information, such as membership status, future subscription status, and transaction identifiers.
  3. Internet or network activity, such as app usage, listening activity, deep-link activity, and interaction data.
  4. Geolocation information, such as approximate location inferred from IP address.
  5. Audio, electronic, visual, or similar information, such as Moonlitter materials, support attachments, or user-submitted materials, where applicable.
  6. Professional or biographical information, such as Moonlitter story or profile information, where applicable.
  7. Inferences, such as preferences, vibes, recommendations, and content interests.
  8. Sensitive information, only where applicable and legally permitted, such as payment-related information, account credentials, or other information you choose to provide.

Sale or Sharing

Musaic does not intend to sell personal information.

Musaic does not intend to share personal information for cross-context behavioral advertising at launch.

If this changes, we will update this Privacy Policy and provide required choices.

19. EEA, UK, and Similar Jurisdictions

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar legal requirements, our legal bases for processing may include:

  1. Performance of a contract, such as providing the Service and managing your Account.
  2. Legitimate interests, such as securing the Service, improving Musaic, preventing abuse, protecting Musaic Content, and enforcing our Terms.
  3. Consent, where required.
  4. Legal obligations.
  5. Protection of rights and safety.

You may have the right to contact a data protection authority in your jurisdiction.

20. India and Other International Users

If you are located in India or another country with applicable privacy or data protection laws, you may have rights under those laws.

We process personal information for lawful purposes described in this Privacy Policy, including operating the Service, managing your Account, providing recommendations, protecting Musaic Content, preventing abuse, and complying with law.

Where required, we will provide appropriate notice, request consent, allow withdrawal of consent, and support applicable data rights.

You may contact us at:

Email: legal@spotlit.co

21. Do Not Track and Global Privacy Signals

Some browsers or devices offer “Do Not Track” or similar signals.

At this time, Musaic may not respond to all such signals unless required by applicable law or technically supported.

Where required by law, we will honor applicable opt-out preference signals.

22. Third-Party Links and Services

The Service may include links to third-party websites, apps, platforms, or services.

This Privacy Policy does not apply to third-party services.

We are not responsible for the privacy practices of third parties. Review their privacy policies before using them.

23. App Store Privacy Details

Where required by app platforms, including the Apple App Store, we will provide information about our data collection and privacy practices.

The privacy details shown on app platforms may summarize this Privacy Policy, but this Privacy Policy is the more complete explanation of our practices.

If our data collection, use, sharing, or third-party integrations change, we may update our app platform disclosures as required.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may provide notice through the app, website, email, Account notice, or other reasonable method.

Your continued use of Musaic after the updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

Where required by law, we will request consent.

25. Contact Us

For privacy questions, requests, or complaints, contact:

Spotlit, Inc.
Legal Email: legal@spotlit.co
Support Email: musaic@spotlit.co
App: Musaic (from Spotlit)
Website: www.spotlit.co