Legal
Privacy Policy for Goblin
Effective January 1, 2025. Last updated October 16, 2026.
Introduction
Welcome to Goblin ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Goblin mobile application (the "App").
By using Goblin, you agree to the collection and use of information in accordance with this policy.
Contact Information
Email: info@goblinmusic.club
Website: https://goblinmusic.club
1. Information We Collect
1.1 Information You Provide
When you create an account, we collect:
- Nickname (username)
- Date of birth
- Profile picture (optional)
- Bio/description (optional)
- Email address (for authentication)
User-Generated Content:
- Music posts and comments
- Photos and videos you post in fandoms or on an artist page. Phones save where a photo or video was taken inside the file; we remove that location before anyone else can see it
- Likes and reactions
- Social connections (followers/following)
1.2 Apple Music Data
When you connect your Apple Music account, we collect:
- Recently Played Tracks: the songs you played most recently (Apple Music shares up to 30 at a time). Over time these build your listening history on Goblin
- Apple Music User Token: To access your music data (stored securely)
- Storefront Information: Your Apple Music region
Purpose: This data is used to:
- Create your music taste profile ("Vibe Check")
- Match you with users who have similar music preferences
- Display your recently played tracks
- Enable music discovery features
- Show your music activity in the community
Your Control: You can disconnect Apple Music at any time in Edit profile. Goblin then stops reading your listening; the history it already has stays until you delete your account.
1.3 Usage Data
We automatically collect:
- Device Information: Device type, operating system version, unique device identifiers
- Log Data: App usage patterns, features accessed, timestamps
- Performance Data: Crash reports, error logs, app performance metrics
- Location Data (Country-Level Only): Approximate location based on your device timezone for country-based music feeds
1.4 Push Notification Data
If you enable push notifications:
- Push notification tokens (to send you notifications)
- Notification preferences and settings
2. How We Use Your Information
We use your data for the following purposes:
Core Functionality:
- Provide and maintain the App
- Create and manage your user profile
- Enable music-based social connections
- Display your Vibe Check (music taste compatibility)
- Show global and country-based music feeds
- Enable search and discovery features
Social Features:
- Connect you with other users based on music taste, only if you turn on "Let Goblin suggest me" (adults only)
- Display your music activity to your followers, only if you turn on sharing
- Write Ask Goblin's answers (see Anthropic in section 3.2). We never use your data to train AI models
- Enable likes, comments, and social engagement
- Show you on the interactive globe based on your country
Communication:
- Send push notifications about:
- Friend activity and Vibe Checks
- Likes and comments on your posts
- New followers
- App updates and important announcements
Improvement & Analytics:
- Analyze app usage to improve features
- Monitor app performance and fix bugs
- Understand user preferences and behavior
- Develop new features
Legal & Safety:
- Comply with legal obligations
- Enforce our Terms & Conditions
- Protect against fraud and abuse
- Resolve disputes
3. How We Share Your Information
3.1 Public Information
The following information is visible to other Goblin users:
- Your nickname and profile picture
- Your bio/description
- What you play, only if you turn on sharing: your followers see it in Friends lately, people in the same song or fandom room see you there, and artists can see you among the people who play them most
- Your posts, likes, and comments
- Your follower/following lists
- Your country (shown on the globe)
3.2 With Service Providers
We share data with trusted third-party service providers:
- Supabase (Backend Infrastructure): Stores user data, handles authentication
- Apple Music API: Accesses your music data with your permission
- Expo (Development Platform): Provides app infrastructure and push notifications
- Anthropic (Claude): Writes Ask Goblin's answers and the summaries of comments on artists' demos. It receives your question and only the facts needed to answer it, such as your listening totals or the conversation or comments involved
- Cloud Storage Providers: Stores profile images and media
All service providers are contractually obligated to protect your data and use it only for providing services to us.
3.3 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Prevent fraud or abuse
- Respond to government requests
3.4 Business Transfers
If Goblin is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
3.5 With Your Consent
We may share your information for other purposes with your explicit consent.
4. Data Retention
- Active Accounts: We retain your data as long as your account is active
- Deleted Accounts: When you delete your account, we delete your personal data within 30 days, except:
- Data required for legal compliance
- Anonymized usage statistics
- Public posts may remain visible (anonymized)
5. Your Rights & Choices
5.1 Account Management
- Access: View your profile and data in the app
- Edit: Update your nickname, bio, profile picture
- Delete: Delete your account in app settings
5.2 Apple Music
- Disconnect: Remove Apple Music connection at any time
- Control: Manage Apple Music permissions in iOS Settings
5.3 Notifications
- Manage: Toggle notification types in app settings
- Disable: Turn off notifications in iOS Settings
5.4 Data Rights
Depending on your location, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to data processing
- Export your data
- Withdraw consent
To exercise these rights, email us at info@goblinmusic.club
6. Children's Privacy
Goblin is available to users aged 13 and older. We do not knowingly collect data from children under 13. People under 18 are never suggested to others in Find my people and are never named among an artist's top fans. If you believe a child under 13 has provided us with personal data, please contact us immediately.
7. Security
We implement industry-standard security measures:
- Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
- Secure Storage: Passwords and tokens stored using secure encryption
- Access Controls: Limited employee access to personal data
- Regular Audits: Security assessments and updates
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
8. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers.
Note: Goblin services are not available in countries subject to comprehensive U.S. sanctions: Cuba, Iran, North Korea, Syria, and the Russian-occupied regions of Crimea, Donetsk, and Luhansk in Ukraine.
9. Third-Party Links
The App may contain links to third-party services (e.g., Apple Music). We are not responsible for their privacy practices. Please review their privacy policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by:
- Posting the new policy in the App
- Sending a push notification
- Updating the "Last Updated" date
Continued use of the App after changes constitutes acceptance of the updated policy.
11. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to know what personal data is collected
- Right to delete personal data
- Right to opt-out of sale of personal data (we do not sell your data)
- Right to non-discrimination
To exercise these rights, contact us at info@goblinmusic.club
12. European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under GDPR:
- Right to access, rectification, erasure
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Legal Basis for Processing:
- Consent (Apple Music data access)
- Contract performance (providing the service)
- Legitimate interests (app improvement, security)
13. Do Not Track
We do not track users across third-party websites. However, we do track usage within the App to improve our service.
14. Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us:
Email: info@goblinmusic.club
Subject Line: Privacy Inquiry - Goblin App
We will respond to your request within 30 days.
Summary of Data Collection
Data Type | Purpose | Sharing
---|---|---
Nickname, Bio, Profile Picture | User profile | Public to all users
Apple Music Data | Music taste matching, Vibe Check | Not shared externally
Recently Played Tracks | Social features, discovery | Visible to followers
Device & Usage Data | Analytics, improvement | Service providers only
Push Tokens | Notifications | Expo (notification service)
Country/Timezone | Globe feature, local feeds | Country visible to all users
Your Data, Your Control
✓ You choose what Apple Music data to share
✓ You control your profile visibility
✓ You can delete your account anytime
✓ You can export your data upon request
✓ We don't sell your data to third parties
✓ We use encryption to protect your data
By using Goblin, you acknowledge that you have read and understood this Privacy Policy.
Last Updated: January 1, 2025