← Back to Murmur

Murmur Privacy Policy

Last updated: September 17, 2026

Borough AI, Inc. ("we," "us," or "our") operates the Murmur mobile application ("the App" or "Murmur"). Murmur helps you discover live music events, follow artists and organizers, and coordinate plans with friends. We take your privacy seriously, and this policy explains what we collect, how we use it, who we share it with, and the choices you have.

By using Murmur, you agree to this Privacy Policy. We may update it from time to time and will post the latest version here with a new "Last updated" date.

Account Deletion

You can delete your account at any time from within the App (Settings → Account), or by emailing hello@murmur.fm. When you delete your account, we remove your profile and personal data, subject to limited retention required by law or for legitimate business purposes such as security and fraud prevention.

Information We Collect

Account & Identity

  • You can create an account using your email address, Apple, or Google. You can also browse parts of the App anonymously before signing in.
  • We store the profile information you provide, such as your display name, username (handle), avatar photo, bio, date of birth, and home city or the cities you spend time in.
  • If you sign in with Apple or Google, we receive basic identity information (such as your name and email) from those providers to create and secure your account. Apple lets you hide your email address; we honor that choice.

Music Taste & Preferences

  • During onboarding and as you use the App, you tell us your favorite artists and genres, the venues you like, and optionally choose a "profile song" from the Apple Music catalog. We use this to personalize event recommendations.
  • We don't connect to your streaming accounts to read your listening history. We use the artists, genres, and preferences you select in the App, plus the profile song you optionally choose.

Contacts (Friend-Finding)

  • If you grant contacts permission, the App reads your device contacts and sends the phone numbers and email addresses to our servers to find which of your contacts already use Murmur. We request only the fields needed for matching, not contact names.
  • We match contacts using one-way hashing. Raw phone numbers and email addresses are processed only briefly to perform the match and are not stored in our long-term contact cache, which keeps only hashed (non-reversible) values.
  • Contacts sync is optional. You can use Murmur without it, and you can change the permission at any time in your device settings.

Social Connections

  • Murmur is social. We store the connections you make: who you follow (artists, organizers, curators, and people), who follows you, your friends, friend requests you send or receive, and your "close friends."
  • You control who can see your activity through visibility settings (for example: public, followers, close friends, or private). We store these settings and apply them across the App.

Your Activity & Content

  • We store what you do in the App: events you mark as going, interested, or saved; RSVPs; shortlists; "moments" and memories you add; share cards you create; and profile customizations.
  • If you RSVP to an event and attend, an event organizer may check you in at the door. We record check-in and attendance information so organizers can manage entry and capacity.
  • We compute "vibe" and "squad" scores that estimate how much your taste and plans overlap with friends, to power social discovery features.

Location

  • With your permission, we use your device location (only while you're using the App) to show events happening near you and personalize discovery.
  • We work primarily at the city level. We don't continuously track your location in the background.

Device Permissions

With your permission, the App may access:

  • Camera — to take photos for your profile and to capture event moments.
  • Photo Library — to update your profile picture and share event experiences.
  • Calendar & Reminders — to add events you're going to your calendar and manage related alerts so you don't miss shows.
  • Notifications — to send you reminders and updates (see "Notifications & Marketing").

You can grant or revoke each of these in your device settings.

Usage, Analytics & Diagnostics

  • We collect information about how you use the App — screens you view, features you use, and which events are popular — to improve Murmur.
  • We use analytics and product-experimentation tools that may include session-replay technology, which records interactions with the App (such as taps and screen views) to help us understand and improve the experience.
  • We collect crash reports and diagnostic data to find and fix problems.

Automatically Collected Information

  • We automatically receive certain technical information, such as your IP address, device type, operating system, app version, language, and time zone, for security and to keep the App working.
  • We and our partners may use device identifiers and advertising identifiers to measure app installs and the performance of marketing campaigns (attribution).

How We Use Your Information

We use your information to:

  • Provide and personalize event recommendations, including with AI.
  • Power social features — following, friends, close friends, invites, and coordinating plans.
  • Help you find friends through contacts sync, when you enable it.
  • Send you notifications and reminders you ask for (you can opt out).
  • Connect you to ticketing and venue partners when you choose to buy tickets — we don't process the payment.
  • Measure and improve the App through analytics, experimentation, and feedback.
  • Keep Murmur safe by preventing fraud, abuse, and violations of our Terms.
  • Comply with legal obligations.

Legal Basis for Processing

Where applicable (for example, in the EEA and UK), we rely on:

  • Performing our contract with you (providing the App).
  • Your consent (for example, contacts, location, notifications, and marketing).
  • Our legitimate interests (improving and securing the App, and analytics).
  • Compliance with legal requirements.

How We Share Your Information

We share information in these ways:

  • Other users, according to your visibility settings — for example, your profile, follows, and activity are shown to the audiences you choose (public, followers, or close friends).
  • Event organizers, when you RSVP to or are checked in at their events, so they can manage attendance.
  • Service providers (sub-processors) who help us run the App — see "Third-Party Services & SDKs" below.
  • Ticketing and venue partners, when you choose to view or buy tickets (you complete purchases on their platforms).
  • Legal authorities, when required by law or to protect our rights, our users, or the public.
  • Business transfers, if we're involved in a merger, acquisition, or sale of assets.

We may also share anonymized or aggregated information (for example, event-popularity trends) that doesn't identify you.

We don't sell your personal information for money. Some privacy laws (such as California's) treat sharing identifiers with advertising or attribution partners as a "sale" or "sharing"; you can opt out — see "Your Rights."

Third-Party Services & SDKs

We use trusted third parties to operate Murmur. They process data on our behalf or as independent controllers under their own privacy policies:

  • Supabase — backend database, authentication, storage, and edge functions.
  • Apple & Google — sign-in, app distribution, push delivery (APNs/FCM), and maps/places.
  • Expo (EAS) — app delivery, over-the-air updates, and push notifications.
  • Amplitude — product analytics, experimentation, and session replay.
  • Sentry — crash and error reporting (may include session replay).
  • Singular — install attribution and deep-link measurement (device and advertising identifiers).
  • Statsig — feature flags and gradual rollouts.
  • Cloudinary — image hosting and optimization.
  • Giphy — GIF search (your search terms are sent to Giphy).

This list may change as the App evolves; we'll keep it current here.

Notifications & Marketing

  • We send transactional notifications (such as event reminders and friend activity) and, with your consent where required, occasional marketing messages.
  • You can control push notifications by category in the App and in your device settings, and you can unsubscribe from marketing emails at any time.

Data Retention

We keep your information for as long as your account is active or as needed to provide the App. We delete or de-identify your data after you request deletion, subject to limited retention required by law or for security and fraud prevention.

Your Rights

Depending on where you live, you may have the right to:

  • Access, correct, or delete your personal information.
  • Object to or restrict certain processing.
  • Request a portable copy of your data.
  • Withdraw consent.
  • Opt out of marketing and of the "sale" or "sharing" of personal information for targeted advertising and attribution.
  • Not be discriminated against for exercising your rights.

To exercise any of these, email hello@murmur.fm. We'll respond as required by applicable law.

International Transfers

We're based in the United States, and your information may be processed in the U.S. and other countries. Where required, we use appropriate safeguards for international transfers.

Security

We use industry-standard measures to protect your information, but no system is 100% secure. Please keep your account credentials safe.

Children's Privacy

Murmur is intended for adults 18 and older. We don't knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact hello@murmur.fm.

Changes to This Policy

We'll post the updated policy here and update the "Last updated" date. For significant changes, we'll provide additional notice, such as in the App or by email. Continued use after changes means you accept the updated policy.

Contact Us

Questions about this Privacy Policy? Email us at hello@murmur.fm.

Borough AI, Inc.