YOUR PRIVACY

The Full Score

How we handle your personal data on Pash — composed so everyone can follow along

Think of your personal data like a song you wrote.

This notice tells you who gets to play it, how, and when.

You stay the composer. Always.

MUSE SOCIAL NETWORK LTD

Last updated: 18th May 2026

This notice satisfies Article 13 UK GDPR and Article 13 EU GDPR (Regulation 2016/679).

Tracklist

Track 1 — Meet the Band (Who We Are)

Every song needs a band, and every platform needs someone responsible for your data. That's us. In legal language, we're the “data controller” — the ones who decide how your personal information is used.

Sheet music reference: Art. 13(1)(a) — The controller must identify themselves and provide contact details, including any representative.

RoleDetails
Band name (company)Muse Social Network Ltd
Studio address1 COLDBATH SQUARE, LONDON, ENGLAND EC1R 5HL
Company number166880335
Drop us a linehello@pash-app.com

Track 2 — The Sound Engineer (Our Data Protection Officer)

Every good studio has a sound engineer making sure everything runs cleanly. Our Data Protection Officer (DPO) does the same for your data. If something sounds off, reach out to them.

Sheet music reference: Art. 13(1)(b) — Contact details of the DPO.

DPO nameGiuseppe Matteo Miroddi
Emailprivacy@downloadmuse.com

Track 3 — The Setlist (What We Do With Your Data and Why)

A setlist tells you which songs will be played and in what order. Here's our setlist — every way we use your data, and the legal reason (called a “lawful basis”) behind each one.

Sheet music reference: Art. 13(1)(c) — Purposes and lawful basis for each processing activity.

3.1 Opening Act — Your Account

Legal reason: Contract — we need this to give you the service you signed up for.

When you join, we use your username, email, and profile info to set up your stage — your account. This lets you post, message, follow, and use all the features.

3.2 The DJ Set — Your Personalised Feed

Legal reason: Legitimate interest — we have a real, fair reason for doing this.

Like a DJ reading the room, we look at what you listen to (interact with) and tune your feed so you see more of what you enjoy. We think this makes the experience better for you.

Not feeling the mix? You can switch to a chronological feed any time — see Track 8.

3.3 The Sponsors — Advertising

Legal reason: Consent — only if you give us permission.

If you say yes, we use things like what you browse, your device type, and your rough location to show ads that might actually interest you (instead of random noise). We also check if those ads worked.

You can pull the plug any time — go to settings or our cookie tool. Changing your mind doesn't undo anything that already happened legally.

3.4 The Bouncers — Platform Safety

Legal reason: Legitimate interest + legal obligation.

Nobody wants a bad act ruining the show. We check reports to spot rule-breaking, illegal material, spam, and bullying. We follow the Online Safety Act 2023 (UK) and Digital Services Act (EU) — think of them as venue safety regulations.

3.5 The Mixing Desk — Analytics

Legal reason: Legitimate interest.

We look at overall patterns — which features are hits, which are flops — so we can improve the platform. This data is grouped together or disguised; we're reading the crowd, not tracking one person.

3.6 Backstage Pass — Messages From Us

Legal reason: Contract (essential alerts) or consent (marketing).

We send you need-to-know messages (security alerts, rule changes). If you opt in, we may also send marketing. You can mute marketing any time.

Legal reason: Legal obligation.

Sometimes the law requires us to keep or share data — like when a court or regulator asks. Think of it as the venue's licence conditions: non-negotiable.

3.8 Hidden Tracks — Sensitive Information

We don't ask for sensitive info (race, religion, health, sexuality). But sometimes what you post or do on the app might reveal these things — like hidden tracks on an album you didn't expect.

If that happens, we only use it with your clear agreement, or because you chose to put it on your public profile for everyone to hear.

Sheet music reference: Art. 9 — Special category data. DPIAs conducted where sensitive inferences affect profiling or advertising.

Track 4 — Our Reasons to Play (Legitimate Interests)

When we say we have a "legitimate interest," it means we have a real, honest reason — and we've checked it doesn't drown out your rights. Here's what we're playing for:

Sheet music reference: Art. 13(1)(d) — Where the controller relies on legitimate interests, they must tell you what those interests are.

We've written these reasons down in detail (a Legitimate Interests Assessment). Ask our DPO for a copy.

Track 5 — The Guest List (Who Hears Your Data)

Your data isn't broadcast to everyone. Here's who's on the guest list and why:

Sheet music reference: Art. 13(1)(e) — Recipients or categories of recipients.

Everyone on this list has signed an agreement to protect your data.

Track 6 — World Tour (International Data Transfers)

Sometimes your data travels outside the UK or Europe — for example, some companies helping us are based in the US. When your data goes on tour, we make sure it travels with protection.

Sheet music reference: Art. 13(1)(f) — Transfers to third countries, safeguards, and how to get copies.

6.1 Leaving the UK

6.2 Leaving the EU

Track 7 — How Long the Record Plays (Retention)

We don't keep your data on repeat forever. Here's how long each track plays:

Sheet music reference: Art. 13(2)(a) — Retention periods or criteria for determining them.

Your dataHow long it playsWhy
Account detailsWhile your account is open + 30 days after you close itNeeded to run your account
Your posts and contentUntil you delete them or leaveYou control the tracklist
Private messagesUntil you delete them or leavePart of the service
What you interact withmonthsPowers your feed; then deleted
Ad data14 monthsOnly while you've given permission
Moderation records5 years after resolvedSafety and legal reasons
Technical logs12 monthsSecurity
Rough locationUntil you delete them or leaveOnly with your permission

When the track ends, we securely erase it or make it completely anonymous — like wiping the master tape.

Track 8 — Your Remix Rights

This is your music. The law gives you powerful rights over it. Use them any time by emailing privacy@downloadmuse.com or through your in-app privacy settings.

Sheet music reference: Art. 13(2)(b) — Rights of access, rectification, erasure, restriction, objection, and portability.

8.1 The basics

8.2 Stop the music

Whenever we use your data on a "legitimate interest" basis (Track 4), you can object at any time. We'll stop unless we have a very strong reason that outweighs your rights.

Sheet music reference: Art. 13(2)(b) — Right to object (Art. 21), including to profiling.

8.3 Revoke the licence

If we asked your permission (consent), you can take it back any time. This doesn't make anything we did before illegal — it just stops the music going forward.

Sheet music reference: Art. 13(2)(c) — Right to withdraw consent (Art. 7(3)).

Response time: We'll get back to you within one month. Complex requests may take up to three months total — we'll tell you.

Track 9 — Feedback to the Critics (Complaints)

If you think we hit a wrong note with your data, you can complain to a data protection authority.

Sheet music reference: Art. 13(2)(d) — Right to lodge a complaint with the supervisory authority.

9.1 UK — The ICO

9.2 EU — Your local authority

Complain to the data protection authority where you live, work, or where the problem happened.

Track 10 — Must-Play vs Freestyle (What Data Is Required)

Sheet music reference: Art. 13(2)(e) — Whether providing data is obligatory, and consequences of not providing it.

10.1 Must-play (required)

To create an account, we need your email, a username, and your date of birth. No ticket, no entry. This is part of our contract with you.

10.2 Freestyle (optional)

Profile photos, bios, posts — all optional. You can enjoy the show without them, but some features work better with them.

Sometimes the law says we must collect specific data (e.g. age checks). We'll tell you at the door.

Track 11 — The Algorithm (Automated Decisions and Profiling)

Sheet music reference: Art. 13(2)(f) — Automated decision-making including profiling: logic involved, significance, and consequences.

11.1 The playlist algorithm

Like a streaming service building you a playlist, our system looks at what you read, like, share, and how long you linger on posts. It then ranks other content by how likely you are to enjoy it. This is profiling — but it doesn't produce legal effects. It just shapes your feed.

11.2 Automated moderation

We might use automated tools to spot rule-breaking content (spam, illegal material). Think of it as an auto-tune filter — it catches obvious problems. But a real person reviews before we take serious action on your account.

If an automated decision significantly affects you, you can:

Sheet music reference: Art. 22 UK GDPR (with Art. 22C per DUAA 2025) and Art. 22 EU GDPR — safeguards for significant automated decisions.

11.3 How it works — plain version

Our algorithm scores posts based on: what you've interacted with, who you follow, what you liked, how much time you spent, and when the posts happened in chronological order. Higher-scoring posts appear first. No single signal controls everything — it's a full mix, not a solo.

Track 12 — Bonus Tracks (Extra Things to Know)

12.1 Young musicians (under 18)

We know younger people use this platform. Extra protections apply:

If you're under the age of digital consent (13 in the UK; 13–16 across EU countries), a parent or guardian needs to agree before we use your data based on consent.

Sheet music reference: ICO Age Appropriate Design Code; EDPB guidance on children's data; European Commission DSA guidelines on minors.

12.2 Safety checks (DPIAs)

For our riskiest processing, we've done detailed impact assessments (DPIAs) covering:

Ask our DPO for summaries.

12.3 Setlist changes

If we change this notice significantly, we'll notify you through the app or email before changes kick in.

12.4 New songs (further processing)

If we ever want to use your data for a brand-new purpose — a track we haven't announced yet — we'll tell you first and explain it before we press record.

Sheet music reference: Art. 13(3) — Prior notice required before further processing for a new purpose.

Track 13 — Encore (Contact Us)

Questions? Concerns? Want to use your rights? Here's how to reach us:

Remember: it's your data, your music, your rights. Don't be shy about using them.