Hi everyone, I'm building Sidetick, a concert ticketing and cultural discovery platform. I have an active Apple Developer Program account with MusicKit access. I want to implement the following flow and need to know if it complies with the MusicKit License Agreement:
- User authenticates via MusicKit (explicit OAuth consent)
- We read their heavy-rotation and library/artists in memory
- We calculate a fan affinity score per artist (e.g. "480 XP with Angèle") — entirely in-memory, never written to our DB
- We show the user: "We found these artists — which ones do you want to follow on Sidetick?"
- User explicitly picks their favorites
- ALL Apple Music API data is immediately deleted from our systems
- What we store is only the user's Sidetick declaration: {artist: "Angèle", xp: 480} — no Apple Music raw data retained
After this, ALL gamification (fan ranking, ticket priority, rewards) is based exclusively on Sidetick first-party actions (ticket purchases, attended concerts, referrals) — zero Apple Music data involved. The intent: MusicKit is used as a one-time discovery bootstrap to help users identify which artists to follow on Sidetick. Apple Music data is never stored, never shared with third parties, never used for advertising. My questions:
- Is this use case compatible with the MusicKit License Agreement?
- Is storing the calculated XP score (after deleting the source Apple Music data) considered retaining Apple Music data?
- Is there a specific clause we should be careful about?
Thanks in advance — any Apple engineer or experienced MusicKit dev input is very welcome. =D