Privacy Policy

Information the App processes

• Messages and images you send. Your prompts, and any photo you choose to attach, are sent through our server to OpenAI to generate a response or an image. Don’t include sensitive personal information in prompts. OpenAI does not use API data to train its models.
• Chat history. Conversations are stored only on your device and removed when you delete them or the App.
• Voice input. When you dictate, audio is converted to text by Apple’s speech recognition. We do not record or store your audio.
• Diagnostics, analytics and attribution. Crash reports and usage events, device model and OS version, Apple Search Ads attribution, and — only if you allow tracking — install-attribution data linked to the advertising identifier. They don’t include your chat content.

The App does not require an account and does not collect your name, email address or other directly identifying information.

Device permissions

The App asks for access only when a feature needs it. You can change these permissions at any time in iOS Settings; related features will stop working without them.

• Microphone — to talk to the assistant by voice.
• Speech recognition — to turn your voice into text (processed by Apple).
• Photos — to attach images for analysis and to save generated images.
• Tracking (App Tracking Transparency) — optional; used to measure advertising campaigns.

How we use information

• Provide the App’s features you request
• Keep the App reliable: diagnose crashes and fix bugs
• Understand, in aggregate, how features are used so we can improve them
• Process purchases and restore subscriptions
• Reply to your support requests

We do not sell your personal information and do not use it for purposes unrelated to the App.

Third-party services

We rely on the following providers. They process data on our behalf under their own privacy policies:

• Google Firebase Cloud Functions — our server that relays requests to the AI. Policy
• OpenAI — generating answers and images. Policy
• Google Firebase Analytics & Crashlytics — usage analytics and crash reports (app instance ID, device model, OS version). Policy
• Google Firebase Remote Config — delivering app configuration. Policy
• Amplitude — product analytics (which features are used). Policy
• AppsFlyer — install attribution; uses the advertising identifier (IDFA) only if you allow tracking. Policy
• Apphud — processing and validating subscriptions; receives purchase receipts and an app-specific device identifier (IDFV). Policy

Tracking and advertising

The App asks for permission via Apple’s App Tracking Transparency prompt before using your device’s advertising identifier (IDFA) for attribution. If you decline, the IDFA is not accessed. You can change this at any time in Settings → Privacy & Security → Tracking.

Purchases and subscriptions

Payments are processed by Apple through the App Store. We never see or store your payment card details. We receive only the information needed to confirm your purchase or subscription status. Subscriptions renew automatically unless cancelled at least 24 hours before the end of the current period; manage or cancel them in Settings → [your name] → Subscriptions.

Data retention

Data stored on your device stays there until you delete it or remove the App. Data processed on servers is kept only as long as needed for the purpose described above, then deleted or anonymized; diagnostic and analytics data is retained according to the providers’ standard retention periods.

Children

The App is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

Your rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, delete or export your personal information, to object to or restrict its processing, and to withdraw consent. To exercise any of these rights, email us — we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Security

We use industry-standard measures, including encryption in transit (HTTPS), to protect information. No method of transmission or storage is 100% secure, but we work to protect your data and limit access to it.

International transfers

Our service providers may process data in countries other than yours, including the United States. Where required, such transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it was last changed. Significant changes will be communicated in the App or on this page.

Contact

Questions about this policy or your data: hanna.musicai.box@gmail.com
Polina Basova