Verse Privacy Policy
Effective date: October 5, 2026
Verse is a private music communication app built around one-to-one Connections. A Verse is exactly three intentionally selected songs used as one communication object.
The current Verse private beta is invite-only, available only in the United States, intended for people age 18 or older, and designed for iPhone. Apple Music is the first supported music provider.
This Privacy Policy explains how Verse collects, uses, stores, protects, and retains information when you use the Verse app, participate through TestFlight, visit speakverse.app, or contact us.
1. Account and identity information
Verse uses Clerk to provide authentication and identity services.
Depending on how you sign in, Clerk may process information associated with Sign in with Apple or email authentication.
Verse maintains the account identifiers and profile information needed to associate your authenticated identity with your Verse account and operate the service. The Verse backend controls authorization to private Verse resources.
Authentication providers may separately process information under their own terms and privacy practices.
2. Connections, Spaces, and Verse information
Verse uses private one-to-one Connections. Each active Connection has a private Space.
To provide these features, Verse processes structural information such as:
- Connection membership and status;
- invitations and blocking state;
- Space and relationship state;
- sender and recipient relationships;
- timestamps and lifecycle state;
- send, receive, reveal, reply, and Archive state.
A Verse always consists of exactly three selected songs.
Verse stores the track information needed to identify and present those three songs and preserves their order because the selection and ordering are part of the Verse.
This may include provider catalog identifiers and track metadata such as title, artist, artwork, duration, and related catalog information.
Verse does not provide a public feed, public followers, public Connections, public discovery, or popularity metrics.
3. Meaning and Reflection
A sender may optionally add a written Meaning to a Verse.
Verse also supports Reflection as part of the receive experience. Reflection may be private to its author or intentionally shared with the other participant, depending on the user's choice and the feature involved.
Meaning and genuinely shared Reflection are processed by Verse's backend when necessary to validate, transmit, protect, and store that content.
Private Reflection is not used as moderation or safety-report evidence.
Verse does not use Meaning or Reflection to infer your emotional state, build emotional profiles, perform behavioral advertising, or measure engagement with private content.
4. Private content and security
Verse is designed as a private one-to-one service, but Verse is not end-to-end encrypted.
Verse uses authorization controls and application-level encryption for private content at persistence where implemented.
Some shared private content must be processed by Verse's backend before it is encrypted for storage. For example, Meaning and genuinely shared Reflection may be processed for validation and the narrow send-time safety filtering described below.
No method of electronic storage or transmission can guarantee absolute security.
5. Apple Music and MusicKit
Verse integrates with Apple Music using Apple's MusicKit technologies.
Verse uses Apple Music catalog information and playback functionality so participants can find, select, send, display, and experience songs in a Verse.
When a Verse is created, Verse stores the catalog information needed to identify and present the three selected tracks and their order.
Verse account membership does not include or sell Apple Music access. Apple Music playback availability depends on Apple's services, the participant's Apple Music access, catalog availability, and other Apple requirements.
Verse does not currently send your Apple Music listening history or personal music-library contents to the Verse backend, and Verse does not currently persist a Music User Token.
Apple separately processes information associated with Apple Music, MusicKit, Sign in with Apple, TestFlight, Apple Push Notification service, and other Apple services under Apple's own terms and privacy practices.
6. Notifications
If you enable notifications, Verse processes an Apple Push Notification service device token and limited device/environment information needed to register and manage notifications.
Notifications are used for awareness only.
Verse notification payloads do not include Meaning, Reflection, song metadata, or the private content of a Verse.
You may decline notification permission without losing access to the core Verse experience.
7. Safety reporting and filtering
Verse provides in-app controls to report a Connection or report a specific Verse.
A safety report may include:
- the reporter and reported-account identifiers;
- the relevant Connection or Verse;
- the selected report reason;
- structural information needed to understand the reported interaction;
- information the reporter intentionally provides.
Meaning is not automatically included as report evidence. It may be submitted for safety review only when the reporter expressly chooses to include it.
Genuinely shared Reflection may likewise be included only through the approved evidence flow. Private Reflection is never report evidence.
Verse applies a narrow deterministic safety filter when genuinely shared free text is submitted. This filtering is limited to shared-text surfaces such as Meaning and genuinely shared Reflection.
Verse does not use AI moderation, sentiment analysis, emotional classification, historical private-content scanning, or analysis of songs, lyrics, song metadata, or song ordering for moderation.
Safety reports are reviewed manually during the private beta.
8. Safety-record retention
Ordinary closed safety cases are retained for up to 90 days after closure and are then eligible for purge.
A valid legal-preservation requirement may extend retention for information subject to that requirement.
Safety evidence is separate from ordinary Verse product content. Where private shared text is intentionally submitted as safety evidence, it remains restricted and protected according to Verse's private-content security controls.
Verse does not maintain a public or user-facing reputation score or permanent safety history.
9. Operational and security information
Verse processes limited technical and operational information needed to:
- authenticate requests;
- operate and secure the service;
- diagnose failures;
- prevent abuse;
- enforce blocks and safety controls;
- maintain infrastructure and lifecycle integrity;
- support backup, recovery, and reconciliation.
Verse does not currently use a standalone behavioral-advertising network, third-party private-content moderation service, or AI moderation system in the private-beta app.
10. Account deletion and recovery
You may request account deletion from inside the Verse app.
When you request deletion:
- normal Verse product access is deactivated immediately;
- a recovery period of exactly seven elapsed days begins;
- the account and relationship state necessary to support genuine recovery remains retained but unavailable for normal use during that period;
- active Connections and Spaces are unavailable through ordinary product use;
- outstanding invitations associated with the deleting account are revoked.
During the seven-day recovery period, you may cancel the deletion request and restore the recoverable account and relationship state. Invitation tokens already revoked by the deletion request remain revoked, and notification registration may need to occur again through the ordinary app flow.
After the seven-day recovery period ends, account recovery is no longer available. Permanent deletion is then completed through Verse's deletion process. Completion may require additional processing time after the recovery deadline.
When permanent deletion is completed:
- the deleting user's active Verse account and profile data are removed;
- active Connections and Spaces involving that account end;
- Verses authored by the deleting user are removed from surviving product state, including their three-song composition and order;
- sender-written Meaning authored by the deleting user is removed;
- Reflection authored by the deleting user is removed;
- a surviving user's Reflection does not remain as a standalone object when the Verse it referred to is removed;
- provider and identity cleanup associated with the deleted account is completed;
- independently authored content belonging to a surviving participant may remain where permitted by Verse's deletion model without preserving the deleted user's active account or relationship identity.
Verse provides confirmation when permanent deletion has completed.
Limited deletion-status information may remain available for up to 30 days after completion so the former participant can confirm that deletion was completed. This does not permit account recovery, restore product access, or extend the seven-day recovery period.
For help with deletion or recovery, contact:
For privacy questions about deletion, contact:
11. Backups, disaster recovery, and lifecycle records
Verse uses restricted backup and disaster-recovery systems to protect service availability and integrity.
Information removed from active product systems may remain temporarily in restricted backup or recovery copies until those copies expire or are no longer restorable. These copies are not used as ordinary Verse product data.
If an older database copy is restored, Verse applies lifecycle reconciliation before that restored environment can return to normal service. This is intended to prevent older backup data from reversing account-deletion, safety-purge, legal-retention, or other lifecycle decisions.
Verse may retain minimal pseudonymous lifecycle and reconciliation records for longer than ordinary product data when necessary to ensure that account-deletion choices, completed deletions, and applicable safety lifecycle states remain correct if older backup or recovery data is restored.
These records:
- do not contain ordinary private Verse content such as Meaning, Reflection, songs, or Verse history;
- are not used for advertising;
- are not used for behavioral analytics or profiling;
- are not used as ordinary product history;
- are retained only for deletion integrity, safety-retention, legal-preservation, security, and disaster-recovery purposes.
12. TestFlight private beta
Verse is currently distributed to private-beta participants through Apple's TestFlight service.
Apple may collect and provide Verse with TestFlight-related information such as crash information, usage and diagnostic information, device information, and feedback you intentionally submit through TestFlight.
Verse may use this information to operate, troubleshoot, secure, and improve the private beta.
Apple handles TestFlight information under Apple's own privacy practices.
13. Website information
When you visit speakverse.app, our website provider, Framer, processes limited technical and usage information needed to operate the site and provide built-in website analytics.
This may include information such as:
- the page or route you visit;
- URL information;
- referring page;
- hostname;
- locale and timezone;
- site and page identifiers;
- page-load and performance information.
Verse uses this limited website information to understand basic website usage, maintain the site, and monitor performance and reliability.
The current Verse website uses Framer's built-in telemetry and does not use Google Analytics.
Website telemetry is separate from Verse app structural information and is not used to analyze Meaning, Reflection, song choices, or private Verse communications.
14. Service providers
Verse uses a limited number of service providers to operate the private beta.
These currently include:
Clerk — authentication and identity services.
Railway — API hosting, database, backup, and related infrastructure services.
Apple — services including Sign in with Apple, Apple Music/MusicKit, Apple Push Notification service, and TestFlight.
Framer — hosting and delivery of the public Verse website and built-in website analytics.
Fastmail — email services used for Verse support, feedback, and privacy communications.
These providers may process information as necessary to provide their services and are also subject to their own applicable terms and privacy practices.
15. Data retention
Verse aims to retain personal information only for as long as reasonably necessary for the purpose for which it is processed.
Retention differs according to the type and purpose of the information.
Current examples include:
- active account and product information retained while needed to provide Verse;
- recoverable account state retained during the seven-day deletion-recovery period;
- limited deletion-status information retained for up to 30 days after completed deletion;
- ordinary closed safety cases retained for up to 90 days after closure;
- restricted backup remnants retained according to applicable disaster-recovery lifecycles;
- minimal pseudonymous lifecycle and reconciliation records retained for as long as necessary to prevent older restorable data from reversing lifecycle decisions;
- information subject to a valid legal-preservation requirement retained for the applicable preservation period.
Retention of limited operational, security, legal, backup, or lifecycle information does not authorize Verse to return deleted private content to ordinary product use.
16. Your choices and privacy requests
Depending on the feature involved, you may:
- update certain profile information through Verse;
- decline or change notification permission through iOS settings;
- control Apple Music permissions through Apple's system controls;
- remove or block a Connection;
- choose whether Meaning or shared Reflection is submitted as safety evidence;
- request account deletion from inside Verse;
- cancel a pending deletion request during the seven-day recovery period.
For privacy questions or requests:
For general product support:
Verse may need to verify a request where necessary to protect account security or another person's privacy.
17. Age and geographic scope
The current Verse private beta is intended only for people age 18 or older in the United States.
Verse does not currently offer the private beta to children or minors and is not generally available to the public.
If you believe an ineligible minor is participating in the private beta, contact:
18. Changes to this Policy
Verse may update this Privacy Policy as the private beta evolves, including when product functionality, service providers, legal requirements, or information practices materially change.
When this Policy changes, the effective date at the top of the page will be updated. Where appropriate, Verse may provide additional notice of a material change.
19. Contact
Privacy questions:
General support:
Website:
speakverse.app