Privacy Policy
Musento · Last updated 15 August 2026
Musento is an app for keeping a personal record of the museums you visit. This policy explains what it stores, why, and what you can do about it. There is no advertising in Musento, and your information is never sold.
What is collected
| Data | Why |
|---|---|
| Email address | To create and sign in to your account. If you use Sign in with Apple and choose to hide your address, Musento only ever receives Apple's private relay address. |
| Handle, display name, and optionally a bio, avatar and country | Your public profile. These appear to other members on profiles, leaderboards and in friends' feeds. |
| Visits — the museum, the date, and points awarded | The record the app exists to keep. Visible to you and to friends whose requests you have accepted. |
| Notes attached to a visit | Private to you. Notes are never shown to friends or on any leaderboard. |
| Friendships and achievements | To show your collection and your friends' activity. |
| Approximate location, if you grant permission | Sent to the server only to look up which museums are near you. It is used for that request and not stored. Musento works without it — you can search the catalogue instead, and the app never tracks you in the background. |
Analytics and crash reporting
If enabled for a build, Musento records a small number of product events (signing in, logging a visit, acquiring an achievement, sending or accepting a friend request) through PostHog, and crash diagnostics through Sentry. Crash reports are configured not to attach personally identifying information. Neither service receives your visit notes.
Who can see what
Your handle, display name, bio, avatar, country and achievements are public. Your visits are visible to you and to accepted friends. Global leaderboards show handles and scores. Your email address and your visit notes are never shown to anyone else.
Where it is stored
Data is held in Supabase (PostgreSQL, authentication and file storage for avatars). Access is enforced at the database level by row-level security policies, so one member cannot read another's private data.
Deleting your account
Settings → Delete Account removes your profile, visits, notes, friendships and achievements, along with any avatar you uploaded. This is immediate and cannot be undone. You may also edit or clear individual profile fields at any time from Settings.
Children
Musento is not directed at children under 13 and does not knowingly collect their information.
Changes
If this policy changes materially, the date above will be updated and the new version published here.
Contact
Questions or requests about your data: [email protected]