Last Updated: July 28, 2026
In order to ensure transparency and give you more control over your personal information, this privacy policy (“Privacy Policy”) governs how we, MusicX Inc. (“MusicX”, “we”, “our” or “us”) use, collect and store personal information that we collect or receive from or about you (“you”) in connection with https://boombap.co/ (the “Website”) and the services provided through the Boombap application (the “App”; and collectively with the Website, the “Services”).
We greatly respect your privacy, which is why we make every effort to provide a platform that would live up to the highest user privacy standards. Please read this Privacy Policy carefully, so you can fully understand our practices in relation to personal data. Important note: Nothing in this Privacy Policy is intended to limit in any way your statutory rights, including your rights to a remedy or other means of enforcement.
Table of contents:
1. What personal information we collect, why we collect it, and how it is used
2. Location information
3. Health and fitness data (Health Connect and Apple Health)
4. How we protect and retain your personal information
5. How we share your personal information
6. Your privacy rights
7. International transfers of personal information
8. Use by children
9. Interaction with third-party products
10. Analytic Tools and Cookies
11. Specific provisions applicable under California privacy law
12. Contact us
Our mission is to seamlessly blend cutting-edge technology with the power of music to create a platform that entertains, inspires, and connects.
This Privacy Policy may be updated from time to time and, therefore, we ask you to check back periodically for the latest version of this Privacy Policy. If we implement material changes in the way we use your information, in a manner that is different from that stated at the time of collection, we will notify you by posting a notice on our Website or by other means and take any additional steps as required by applicable law.
1. WHAT PERSONAL INFORMATION WE COLLECT, WHY WE COLLECT IT, AND HOW IT IS USED
(i) We Process the Following Personal Information:
a. Information provided through the Website. We collect personal information that you voluntarily provide, such as your full name and email address as well as any other information that you decide to provide us when you interact with our Website, such as when you apply for our beta waiting list through our Website.
b. Information provided through the App. We collect personal information that you provide, such as your registration information when signing up to the App, including your full name, email address, username, password and profile picture provided by you or your chosen log-in provider (such as Google or Apple), as well as any other information that you decide to provide us when you interact or make any submissions through the App. When you use the Services and/or submit any content:
i. We collect and process the personal information submitted, such as posts, reports or any other content that you choose to upload to the App.
ii. We process any other personal information made available as part of your interaction with the Services, like the lists of accounts followed by you on the App, the list of music tracks uploaded and/or any actions you take with regard to the content you or other users post, such as reposting other users’ content.
iii. We collect information on links you interact with across our Services.
iv. We process interactions with other users’ content, such as reposts, likes, shares, downloads, replies, if other users mention or tag you in content or if you mention or tag them, and broadcasts you have participated in (including your viewing history, listening, commenting and reacting).
v. We highly recommend that you do not provide sensitive personal information in your interactions with the App, and you acknowledge that any submissions you make may be viewed by other users of the App.
c. Information Provided Through Email. When you reach out or submit a job application via our email or through our social media pages, we collect and process your email address along with any additional information you choose to provide, including your full name, LinkedIn profile and resume.
d. Information automatically collected. We automatically collect certain information through your use of the Services, such as cookies, pixels, tracking technologies and similar identifiers ("Technologies"), your Internet Protocol (IP) address, device identifiers, browser type and language, hardware type, operating system, internet service provider, app version, dates and times of access, application interactions, music listening and playback activity, and other information about actions taken through the Services and Website. We may also collect or infer location information as described in Section 2.
e. Information from Other Sources. We may also obtain information about you from other sources, including publicly or commercially available information and through third-party data platforms, partners and service providers.
f. Information you provide to us in person. For example, when you visit one of our exhibition booths or attend one of our events and provide us with your contact details, company position or any other information that you decide to provide, we will use this information to answer your inquiries or provide additional information to you.
g. Information we collect from online interactions. For example, if you attend a webinar, contact us via social media or otherwise interact with our business, including as a representative of a current or prospective customer, supplier or partner, we track and make a record of those interactions, which may contain your contact details, such as full name, email address, messages and any other information that you decide to provide.
h. Health and fitness information. If you choose to turn on the optional step-tracking feature in the App and grant permission, we read your daily step count from Health Connect (Android) or the Health app (iOS). This is the only health or fitness information we collect, and it is governed by Section 3 below.
i. Location information. We may collect or infer location information and associate it with your account, device, sessions, application interactions, analytics events and music playback activity. See Section 2 for further details.
(ii) We process information for the following purposes:
a. To provide you with the Services. We will use the information, including, without limitation, for the following purposes: (i) to allow you to create an account; (ii) to provide you with the Services and process your requests; (iii) to communicate with you about your use of the Services and for support purposes; (iv) to fulfill any instruction and/or request made by you in the context of the Services; (v) to send you push notifications, emails and notifications regarding your account or certain features of the Services, including updates pertaining to your subscription and related to the services we provide; (vi) to personalize your experience with our Services; (vii) to allow you to create more users and administer your users; (viii) to generally administer and improve the Services; and (ix) to determine the country or region from which the Services and music content are accessed and apply geographically relevant content availability, territorial restrictions or licensing requirements.
b. To allow you to make use of our App. We will use your information to allow you to make use of our App, including: (i) if you request to use our App, to process your request and provide you with an opportunity to explore the App; (ii) to answer your questions and allow you to communicate with us; (iii) to analyze your use of our App and improve our Services; (iv) to customize your experience; and (v) to provide geographically relevant functionality, content and recommendations where available.
c. For Administrative Purposes. We use your information: (i) to respond to your questions, comments and other requests for customer support or information, including information about potential or future services; (ii) to provide you with the Services; (iii) for internal quality control purposes; (iv) to generally administer the Services; and (v) to process your job application.
d. Marketing our Services. We use information to market the Services. Such use includes: (i) notifying you about offers and services that may be of interest to you; (ii) tailoring content, advertisements and offers for you, including targeting and re-targeting practices; (iii) conducting market research; (iv) developing and marketing new products and services and measuring interest in the Services; (v) other purposes disclosed at the time you provide information; and (vi) as you otherwise consent. This Section 1(ii)(d) does not apply to health and fitness information. We never use health and fitness information for marketing, advertising, targeting, re-targeting, profiling or market research. See Section 3.
e. Security purposes. Some of the above information will be used to detect, take steps to prevent and prosecute fraud or other illegal activity; identify and repair errors; conduct audits; and for security purposes. Information may also be used to comply with applicable laws, investigations performed by relevant authorities, law enforcement purposes and/or to exercise or defend legal claims. We may use location and device information to identify unusual account access, fraudulent activity, license circumvention, unauthorized account sharing and other misuse of the Services.
f. De-identified and Aggregated Information Use. In certain cases, we may anonymize or de-identify your information and further use it for internal and external purposes, including, without limitation, to analyze and improve our Services and for research purposes. We may use this anonymous or de-identified information and/or disclose it to third parties without restrictions, for example to improve our services, enhance your experience, develop new product features and improve existing offerings. This Section 1(ii)(f) does not apply to health and fitness information. Health and fitness information is never included in any de-identified or aggregated information that we disclose to third parties. See Section 3.
g. Cookies and Similar Technologies. We, as well as third parties that provide content, advertising or other functionality on the Services, use Technologies to automatically collect information through the Services (generally known as "cookies"). These are small data files placed on your device that allow us to record certain pieces of information whenever you visit or interact with the Services to provide features, monitor and analyze web traffic and personalize the Service. You may opt out of cookies and similar technologies by blocking, deleting or disabling them as your browser or device permits or by changing your settings and preferences.
h. Location and usage analytics. We may use approximate location associated with application and playback events to understand how the Services and music content are used by country, region or city, measure service performance, plan service availability and improve the Services. Where reasonably possible, we use approximate or aggregated location rather than precise location for these purposes.
(iii) The lawful bases we rely on for processing personal information are, if and when applicable:
a. The data subject has given consent to the processing of his or her personal data;
b. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
c. Processing is necessary for compliance with a legal obligation to which the controller is subject; and/or
d. Processing is necessary for the purposes of a legitimate interest.
2. LOCATION INFORMATION
This Section 2 describes how we collect, use, retain and share location information. It applies in addition to, and where inconsistent prevails over, the rest of this Privacy Policy.
2.1. What location information we collect.
We may collect or infer location information when you use the Services. This may include:
approximate location, such as your country, state, region or city, inferred from your Internet Protocol address, network information or similar technical information; and
where you grant permission through your device, location information obtained through your device’s location services. Depending on the permission granted and the feature being used, this may be approximate or precise location.
2.2. When we collect location information.
We may collect or associate location information when you access or use the Services, interact with features of the App, participate in application sessions or generate application and analytics events. We may also associate location information with music listening and playback activity, including the location from which a song was played.
2.3. Why we use location information.
We use location information to:
determine the country or region from which the Services and music content are accessed;
provide geographically relevant features, content and recommendations;
comply with territorial content availability, music licensing requirements and contractual obligations;
understand how the Services and music content are used across different countries, regions and cities;
measure, analyze and improve the performance, reliability and availability of the Services;
protect accounts and detect fraudulent activity, unauthorized access, license circumvention, account sharing or other misuse of the Services; and
comply with applicable legal, regulatory and reporting obligations.
2.4. Your choices.
Where location information is collected through your device’s location services, the App will request your permission. You may decline the request or withdraw permission at any time through your device settings. Certain location-dependent features may not function correctly if permission is withdrawn.
Disabling device location access does not necessarily prevent us from determining an approximate country or region from your Internet Protocol address.
2.5. Background location.
We do not continuously collect or track your device location while the App is not in use unless we separately describe the relevant feature and obtain any permission required by applicable law and your device platform.
2.6. Sharing location information.
We may disclose location information to service providers that help us host, operate, secure and analyze the Services or process location information on our behalf.
We may also provide location-based usage information to content licensors, rights holders and reporting partners where required for territorial compliance, content licensing, royalty calculation or reporting. Where appropriate, such reporting will use aggregated, de-identified or approximate location information.
2.7. Retention.
Location information is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy. Where detailed location information is no longer required, we may convert it into approximate location, aggregate it or remove information that directly identifies you.
2.8. Advertising and location.
We may use or share approximate location, such as country, state, region or city, for advertising and measurement purposes as described in Section 10. We do not provide precise device location to advertising partners unless we separately disclose that practice and obtain any consent required by applicable law.
2.9. Privacy.
Except as described in this Privacy Policy, we do not sell your location information. We use reasonable technical and organizational measures to protect location information from unauthorized access, disclosure, alteration or destruction.
3. HEALTH AND FITNESS DATA (HEALTH CONNECT AND APPLE HEALTH)
This Section 3 describes how we handle health and fitness information. It applies in addition to, and where inconsistent prevails over, the rest of this Privacy Policy.
3.1. An optional feature.
The App includes an optional step-tracking feature. We do not read any health or fitness information unless you turn that feature on and grant permission. If you decline, the rest of the Services work normally.
3.2. What we read.
Your daily step totals, and nothing else. We do not read any other health or fitness information — including heart rate, sleep, workouts, exercise sessions, weight or body measurements, nutrition, reproductive health or medical records. Our access is read-only: we never write any information back to Health Connect or the Health app.
3.3. Why we read it.
Solely to provide the step-tracking feature inside the App: to show you your step count for the current day, to show you your step history for the previous seven days, and to show your progress towards a daily goal of 10,000 steps. Reaching the daily goal awards in-app coins. In-app coins have no cash value and cannot be withdrawn, transferred or exchanged for money or any other financial asset.
3.4. What we store.
Only a daily total for each day (for example, "14 March: 11,240 steps"). We do not store individual step records, the times at which you were active, or which device or application recorded the steps. These daily totals are stored on your device and on our servers, associated with your account.
3.5. Who we share it with.
No one. We do not sell your health and fitness information, and we do not share, transfer or otherwise disclose it to advertisers, advertising networks, data brokers, analytics providers, artificial intelligence tools, broadcasters or any other third party. We do not use it for advertising, marketing, interest-based advertising, profiling or market research, and we do not use it to make or inform any decision about creditworthiness, lending, insurance or employment.
For the avoidance of doubt, Sections 1(ii)(d) (Marketing our Services), 1(ii)(f) (De-identified and Aggregated Information Use), 5 (How We Share Your Personal Information), and 10 (Analytics Tools and Cookies) do not apply to health and fitness information. The only exceptions to this Section 3.5 are:
i. disclosure to our cloud hosting provider, strictly for the purpose of storing the information on our behalf under a written agreement that prohibits any other use;
ii. disclosure where required by law or in response to valid legal process, as described in Section 5.3; and
iii. transfer in connection with a merger, acquisition or sale of assets, in which case we will notify you before your health and fitness information is transferred, and it will remain subject to this Section 3.
3.6. Who can see it.
Only you. Your step count is never shown to other users of the App.
3.7. How long we keep it.
Daily step totals are retained for 13 months and are then deleted automatically. All of your step data is deleted when you delete your account.
3.8. How to turn it off and how to delete it.
You can switch off "Step tracking" at any time in the App under Settings > Health. We then immediately stop reading and uploading your steps. You can also revoke our access at any time in Health Connect (Android) or in the Health app (iOS). To have step data already stored on our servers deleted, delete your account or email us at support@boombap.co.
3.9. Children.
The step-tracking feature is not directed at, and is not made available to, users under the age of 13. See Section 8.
4. HOW WE PROTECT AND RETAIN YOUR PERSONAL INFORMATION
4.1. Security.
We have implemented and maintain reasonable technical, organizational and security measures designed to protect your information. Personal information is encrypted in transit between the App and our servers. However, please note that we cannot guarantee that the information will not be compromised as a result of unauthorized penetration to our servers. As the security of information depends in part on the security of the computer, device or network you use to communicate with us and the security you use to protect your user IDs and passwords, please make sure to take appropriate measures to protect this information.
4.2. Retention of your information.
Your information will be stored until we delete our records, proactively delete it, or receive a valid deletion request. Please note that in some circumstances we store your information for longer periods of time, for example: (i) where we are required to do so in accordance with legal, regulatory, tax or accounting requirements; (ii) for us to have an accurate record of your dealings with us in the event of complaints or challenges; and/or (iii) if we reasonably believe there is a prospect of litigation relating to your information or dealings. Specific retention terms apply to location information and health and fitness information — see Sections 2.7 and 3.7.
5. HOW WE SHARE YOUR PERSONAL INFORMATION
This Section 5 does not apply to health and fitness information, which we do not share with third parties except as described in Section 3.5.
We share your information as follows:
5.1. The information we gather is shared with our partners, including broadcasters and other third parties, excluding health and fitness information.
5.2. We use third-party service providers to process your information for the purposes outlined above, including, without limitation:
5.2.1. With cloud service providers for hosting purposes;
5.2.2. With websites and web content creation platforms to help us manage our Website;
5.2.3. With email providers, marketing, CRM and other similar tool providers;
5.2.4. With artificial intelligence tools and features;
5.2.5. With analytics companies to help us understand and analyze information we collect in accordance with this Privacy Policy;
5.2.6. With location, geocoding or mapping service providers where necessary to process location or translate device location into an approximate geographic area;
5.2.7. With content licensors, rights holders and reporting partners where location-based usage information is required for territorial compliance, royalty calculation, content licensing or reporting. Where appropriate, this information will be aggregated or de-identified; and
5.2.8. With security and fraud-prevention providers where location information is relevant to detecting or preventing fraudulent, unauthorized or unlawful activity.
5.3. To the extent necessary, with regulators, courts, banks or competent authorities, to comply with applicable laws, regulations and rules, including federal, state or local laws, and requests of law enforcement, regulatory and other governmental agencies or if required to do so by court order, as well as for internal compliance procedures and to protect the safety, security and integrity of our business, the Services, users, employees, property and the public.
5.4. If, in the future, we sell or transfer, or consider selling or transferring, some or all of our business, shares or assets to a third party, we will disclose your information to such third party, whether actual or potential, in connection with the foregoing events, including to current or potential investors. In the event that we are acquired by or merged with a third-party entity, or in the event of bankruptcy or a comparable event, we reserve the right to transfer, disclose or assign your information in connection with the foregoing events. Health and fitness information is transferred in these circumstances only on the terms set out in Section 3.5(iii).
5.5. Where you have otherwise provided your consent to us for sharing or transferring your information.
6. YOUR PRIVACY RIGHTS
6.1. The following rights, which may be subject to certain exemptions or derogations, shall apply to certain individuals, some of which only apply to individuals protected by specific laws:
i. You have the right to withdraw consent to the processing, where consent is the basis of processing.
ii. You have the right to access the personal information that we hold and request further details about how we process it, under certain conditions.
iii. You have the right to demand rectification of inaccurate personal information about you. We will promptly correct any information found to be incorrect.
iv. You have the right to object to unlawful data processing under certain conditions.
v. You have the right to the erasure of past data about you, your "right to be forgotten", under certain conditions.
vi. You have the right to demand that we restrict the processing of your personal information, under certain conditions, if you believe we have exceeded the legitimate basis for processing, the processing is no longer necessary, or you believe your personal information is inaccurate.
vii. You have the right to data portability of personal information concerning you that you provided to us in a structured, commonly used and machine-readable format, subject to certain conditions.
viii. The personal information we collect is not used for automated decision-making and profiling, except for automated processes in the context of marketing. As stated above, you can opt out of direct marketing from us by contacting us directly or following the unsubscribe instructions in our email messages.
6.2. You can exercise your rights by contacting us at support@boombap.co. You may use an authorized agent to submit a request on your behalf if you provide the authorized agent with written permission signed by you. To protect your privacy, we may take steps to verify your identity before fulfillling your request. Subject to legal and other permissible considerations, we will make every reasonable effort to honor your request promptly in accordance with applicable law or inform you if we require further information to fulfill your request. When processing your request, we may ask for additional information to confirm or verify your identity and for security purposes before processing and/or honoring your request. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. If your request would adversely affect the rights and freedoms of others, or if we are legally entitled to deal with your request differently from how it was initially requested, we will address your request to the maximum extent possible in accordance with applicable law.
6.3. Deleting your account. Should you decide to delete your account, you may do so by emailing support@boombap.co. If you terminate your account, any association between your account and personal data we store will no longer be accessible through your account. However, given the nature of sharing on certain services, public activity on your account prior to deletion may remain stored on our servers and accessible to the public. Health and fitness information is deleted in full when you delete your account, as described in Section 3.7.
6.4. Marketing emails — opt-out. You may choose not to receive marketing emails by clicking the unsubscribe link at the bottom of the email, and we will process your request within a reasonable time after receipt.
6.5. Location choices. You can enable or disable access to device location through your device settings. Where supported by your device, you may choose to provide approximate rather than precise location. Disabling device-location access does not necessarily prevent us from determining an approximate country or region from your Internet Protocol address. You may contact us at support@boombap.co to exercise applicable privacy rights concerning location information associated with your account.
7. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
7.1. In order to run our business and provide our Services to you, we may transfer personal data to certain countries around the world, including to our affiliates and service providers, many of whom are located outside your jurisdiction. Therefore, your personal data may be processed in countries with privacy laws that are different from the privacy laws in your country. Whenever we make such transfers, we will use commercially reasonable efforts to implement an appropriate level of protection for your personal data by implementing at least one of the following safeguards:
i. making sure the destination country has been deemed to provide an adequate level of protection for personal data; and/or
ii. executing appropriate data onward-transfer instruments, such as a data processing agreement.
8. USE BY CHILDREN
We understand the importance of protecting children’s privacy, especially in an online environment. The App and Services are not designed for or directed at minors under 13 years of age ("Minors"). We do not knowingly collect personal information from Minors. If a parent or guardian becomes aware that their child has provided us with personal information, he or she should contact us using the details provided above. You must also be old enough to consent to the processing of your personal data in your country. If we become aware that a Minor has provided us with personal information, we take steps to remove such information and terminate the Minor’s account.
9. INTERACTION WITH THIRD-PARTY PRODUCTS
We enable you to interact with third-party websites, mobile software applications and products or services that are not owned or controlled by us (each, a "Third-Party Service"). We are not responsible for the privacy practices or content of such Third-Party Services. Please be aware that Third-Party Services can collect information from you. Accordingly, we encourage you to read the terms and conditions and privacy policies of each Third-Party Service.
10. ANALYTIC TOOLS AND COOKIES
10.1. Through our Services we allow third-party advertising partners to set Technologies and other tracking tools to collect information regarding your activities and your device, for example your IP address, mobile identifiers, pages visited, approximate location such as country, state, region or city, and time of day. We may also combine and share such information and other information, such as demographic information and past purchase history, with third-party advertising partners. These advertising partners may use this information, and similar information collected from other websites, for purposes of delivering targeted advertisements to you when you visit third-party websites within their networks. This practice is commonly referred to as "interest-based advertising" or "online behavioral advertising". We may allow access to other data collected by the Services to share information that may be useful, relevant, valuable or otherwise of interest to you. We do not provide precise device location to advertising partners unless we separately disclose that practice and obtain any consent required by applicable law.
10.2. The Website may use a tool called "Google Analytics" to collect information about use of the Website. Google Analytics collects information such as the frequency of visits, pages visited and websites used before entering the Website. We use information obtained from Google Analytics to maintain and improve the Website and our products. We do not combine information collected through Google Analytics with personally identifiable information. Google’s ability to use and share information collected through Google Analytics is governed by the Google Analytics Terms of Service and Google’s Privacy Policy. You can read about how Google collects and processes data within Google Analytics and use the Google Analytics Opt-out Browser Add-on where available.
10.3. We reserve the right to remove or add new analytic tools, cookies, pixels and other tracking technologies.
10.4. Health and fitness information is never collected by, combined with or shared with any advertising partner, analytics tool, cookie, pixel or other tracking technology described in this Section 10. See Section 3.5.
11. SPECIFIC PROVISIONS APPLICABLE UNDER CALIFORNIA PRIVACY LAW
11.1. California Privacy Rights. California Civil Code Section 1798.83 permits our customers who are California residents to request certain information regarding our disclosure of information to third parties for their direct marketing purposes. To make such a request, please send an email to support@boombap.co. Please note that we are only required to respond to one request per customer each year.
11.2. Our California Do Not Track Notice. Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
11.3. Deletion of Content from California Residents. If you are a California resident under the age of 18 and a registered user, California Business and Professions Code Section 22581 permits you to remove content or personal information you have publicly posted. To request removal, please send an email to support@boombap.co. Please be aware that after removal you will not be able to restore removed content. In addition, such removal does not ensure complete or comprehensive removal of the content or personal information you have posted, and there may be circumstances in which the law does not require us to enable removal of content.
12. CONTACT US
If you have any questions, concerns or complaints regarding our compliance with this notice and data protection laws, or if you wish to exercise your rights, we encourage you to first contact us at support@boombap.co.
***