medusaPrivacy Policy
Last updated 27 July 2026
Draft — review before publishing. This describes how Medusa handles data today. If any of it stops being true, fix the page rather than leaving it. Not reviewed by a lawyer.
Medusa is operated by Maryann Clark, a sole proprietor in Alberta, Canada. This page explains what we collect, why, and who else sees it. It is written to be read, not to cover us.
What we collect
- Your email address — the only thing needed to sign in. There is no password, because sign-in works by emailed link.
- The audio you upload, and anything derived from it: measurements, transcribed lyrics, the written analysis, your one-sheet.
- Things you type — artist name, corrections to lyrics, notes, worksheet entries, preferences.
- Basic technical logs — errors and timings, used to keep the thing working.
What we don't collect
No card numbers — Stripe handles payment and we never see them. No advertising trackers, no third-party analytics pixels, no selling anything to anyone. Ever.
Who else processes your data
Medusa is small and stands on a few services. Each sees only what it needs:
- Google (Gemini API) — your audio and lyrics are sent to Google to produce the analysis. This is unavoidable; it is how the analysis is generated.
- Supabase — stores your account and your analysis data.
- Stripe — processes payments and holds the billing record.
- Vercel — serves the site and the app.
Worth being clear about: if you are not comfortable with your unreleased recordings being sent to Google for processing, Medusa is not the right tool for you. There is no mode that avoids it, and we would rather tell you now than bury it in a clause.
Training
We do not use your music, lyrics, or analyses to train models. We do not grant anyone else the right to do so on our behalf.
How long we keep things
Your uploads and analyses stay until you delete them or ask us to close your account. Billing records are kept as long as tax law requires.
Your choices
You can ask for a copy of your data, ask for it to be corrected, or ask for all of it to be deleted. Email info@knowmymusic.app and we will action it within 30 days. Deleting your account removes your uploads and analyses; it does not remove billing records we are required to keep.
Security
Data is encrypted in transit. Access to the database is restricted to the application and the owner. No service can promise perfect security, and we will not pretend otherwise — if there is ever a breach affecting your data, we will tell you.
Children
Medusa is not intended for anyone under 16.
Changes
Material changes will be announced by email or in the app before they take effect.
Contact
Any privacy question, including a deletion request: info@knowmymusic.app.