Privacy Policy

Information the App processes

• Account data. When you sign in with Apple, Google or an emailed link we receive a user identifier and, if you share it, your email address. It keeps your credits, purchases and songs linked to you.
• Song requests you submit. The description, style and any lyrics you type are sent to Google’s Lyria and Gemini models on Vertex AI to compose the track and its cover. They are used solely to fulfil your request and are not used to train AI models.
• Generated songs and library. Finished tracks, covers, titles and lyrics are stored in your account so you can play, rename, share and delete them. Deleting a song removes its files; deleting the account removes everything.
• Onboarding answers. The short questionnaire shown before sign-in (what you want to create, how often) is saved to your profile to tailor suggestions.
• Purchase data. Subscription status and credit balance, received from Apple or Google Play via Adapty. Card details never reach us.
• Diagnostics, usage and attribution. Crash reports, device model and OS version, a push-notification token, in-app events such as “song created” (Google Analytics), and — only if you allow tracking — install-attribution data linked to the advertising identifier.

Device permissions

The App asks for access only when a feature needs it. You can change these permissions at any time in iOS Settings; related features will stop working without them.

• Notifications — to tell you when a song is ready.
• Background audio — so a song keeps playing with the screen off. Nothing is recorded.
• Tracking (App Tracking Transparency) — optional; used only to measure which campaigns bring people to the App.

How we use information

• Provide the App’s features you request
• Keep the App reliable: diagnose crashes and fix bugs
• Understand, in aggregate, how features are used so we can improve them
• Process purchases and restore subscriptions
• Reply to your support requests

We do not sell your personal information and do not use it for purposes unrelated to the App.

Third-party services

We rely on the following providers. They process data on our behalf under their own privacy policies:

• Google Firebase (Authentication, Firestore, Storage, Cloud Functions, Cloud Messaging, Crashlytics, Analytics, App Check) — sign-in, storing your account and songs, push notifications, crash reports, usage analytics and abuse protection. Policy
• Google Vertex AI (Lyria, Gemini) — composing songs and cover art from your requests. Policy
• Adapty — managing subscriptions, credit packs and paywalls. Policy
• AppsFlyer — install attribution, only with your tracking permission for the advertising identifier. Policy
• Sign in with Apple / Google Sign-In — signing in to your account. Policy

Tracking and advertising

The App asks for permission via Apple’s App Tracking Transparency prompt before using your device’s advertising identifier (IDFA) for attribution. If you decline, the IDFA is not accessed. You can change this at any time in Settings → Privacy & Security → Tracking.

Purchases and subscriptions

Payments are processed by Apple through the App Store. We never see or store your payment card details. We receive only the information needed to confirm your purchase or subscription status. Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current period; manage or cancel them in Settings → [your name] → Subscriptions.

Account and deletion

If you create an account, we store the identifier provided by your sign-in method (Apple, Google or email) to keep your content and purchases linked to you. You can delete your account and associated data from within the App or by emailing us; we will complete the deletion within 30 days.

Data retention

Data stored on your device stays there until you delete it or remove the App. Data processed on servers is kept only as long as needed for the purpose described above, then deleted or anonymized; diagnostic and analytics data is retained according to the providers’ standard retention periods.

Children

The App is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Your rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, delete or export your personal information, to object to or restrict its processing, and to withdraw consent. To exercise any of these rights, email us — we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Security

We use industry-standard measures, including encryption in transit (HTTPS), to protect information. No method of transmission or storage is 100% secure, but we work to protect your data and limit access to it.

International transfers

Our service providers may process data in countries other than yours, including the United States. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it was last changed. Significant changes will be communicated in the App or on this page.

Contact

Questions about this policy or your data: hanna.musicai.box@gmail.com
Hanna Freitag