Privacy Policy

Effective date: May 9, 2026 · Last updated: May 14, 2026

This Privacy Policy explains how Music AI ("we", "our", "us", or "the app"), an iOS application published by Alperen Çiftlikçi (the "Developer"), collects, processes, stores, shares, and protects your information when you download, install, and use the app on Apple devices distributed through the Apple App Store.

We have designed Music AI to be privacy-first: usage is fully anonymous by default, no email or phone number is required, and we do not run third-party advertising. The sections below describe in detail what is collected, why, where it lives, who else may see it, and how to exercise your rights.

1. Information We Collect

1.1 Anonymous Account Identifier

The first time you launch Music AI, Firebase Authentication automatically issues an anonymous user identifier (a 28-character opaque string). This identifier is stored on your device and on our backend (Firestore) so that:

• Your generated songs survive across app launches.
• Your favorites and playlists are not lost when the app restarts.
• Your subscription state is recognized so paid features unlock automatically.

The anonymous identifier is not linked to your name, email address, phone number, Apple ID, IP address (we do not log it), or any other personal identifier.

1.2 Generation Inputs (Prompts, Genre, Mood)

When you create a song, the following fields are sent from your device to our Cloud Functions backend (Google Cloud, US region) and from there to our music model provider TemPolor:

• The text prompt you typed.
• The selected genre, mood, language, and vocal-gender preference (Auto / Male / Female).
• If applicable, custom lyrics or style tags you entered in Custom mode.
• The "Instrumental" toggle state.

These fields are forwarded to TemPolor as part of the API request that generates your audio. TemPolor returns the resulting audio file to our backend, which delivers it to your device. We retain the request payload only for the duration needed to deliver the result and to associate it with the resulting song record in your library.

1.3 Generated Content (Songs, Favorites, Playlists)

Songs you generate are stored in Google Cloud Firestore under your anonymous identifier and contain: title, lyrics (if any), genre, mood, language, duration, audio URL (hosted by TemPolor's CDN), cover image URL, creation date, play count, and favorite status. Playlists you create store a name, description, and an ordered list of song IDs. This content is private to your anonymous ID; nothing is publicly browsable.

1.4 Subscription & Purchase Data

Subscriptions (Weekly Premium $7.99, Yearly Premium $39.99) are processed by Apple via StoreKit and the Apple ID associated with your device. We never see your payment card, billing address, or Apple ID credentials.

Purchase status is mirrored to RevenueCat, which acts as our subscription state-of-record. RevenueCat sends server-to-server webhook events (purchase, renewal, cancellation, refund, expiration) to our Cloud Functions backend, which updates a single boolean field isPro in your user record so the app and our backend can recognize your subscription. Stored fields include: subscription status (active / inactive), the active product identifier (weekly / yearly), and the timestamp of the most recent event.

1.5 Notifications

Music AI may request permission to send local push notifications when a song you generated has finished processing (generation can take 60-120 seconds and you may leave the app in the meantime). Notifications are scheduled and delivered locally by iOS — we do not operate a push notification server, and we do not collect a device token.

1.6 Diagnostics & Crash Reports

Firebase Crashlytics may collect anonymous crash stack traces and basic performance metrics (app cold-start time, screen render time). These reports do not contain personally identifying information and are used solely to diagnose bugs.

1.7 Local-Device Storage

The app stores the following locally on your device (not on our servers): your onboarding completion flag, your selected app appearance, the IDs of seed songs you favorited, and downloaded seed-song audio caches. This data is removed when you delete the app from your device.

2. Information We Do NOT Collect

• Your name, email address, phone number, mailing address, or contacts list.
• Your precise or approximate location (we do not request location permission).
• Photos, videos, or files from your photo library.
• Microphone audio. The app never requests microphone permission.
• Your IP address (not stored or logged on our backend).
• Browsing or activity data from outside the app.
• Health, fitness, financial, or biometric data of any kind.
• Information about other apps installed on your device.
• Advertising identifiers (IDFA, AAID).

3. How We Use Your Information

• Service delivery — to generate the songs you request and deliver them back to your device.
• Library persistence — to save your generated songs, favorites, and playlists so they survive across app launches and reinstalls (when restored via the same Firebase identifier).
• Subscription verification — to recognize that you have a valid Pro subscription so paid features (unlimited generations, all genres & moods, priority generation, commercial use rights) unlock automatically.
• Abuse prevention — to enforce per-account rate limits (e.g. 100 song generations / hour, 200 lyric generations / hour) and detect fraud.
• Quality improvements — to diagnose crashes and performance issues so we can fix them.

4. Legal Basis for Processing (EEA / UK Users)

If you are located in the European Economic Area or the United Kingdom, our legal bases under the GDPR are:

• Performance of a contract — for processing necessary to deliver the song-generation service you requested (Articles 6(1)(b)).
• Legitimate interest — for crash diagnostics and abuse prevention (Article 6(1)(f)). You may object to processing on this basis at any time.
• Consent — for sending notifications (Article 6(1)(a)) and for the AI-generation disclosure presented before your first generation. You can withdraw notification consent at any time in iOS Settings → Music AI.

5. Third-Party Service Providers

The app relies on the following providers to function. Each is a separate data controller for the data described:

• Apple Inc. — App Store distribution, in-app purchase processing, push notifications. apple.com/legal/privacy
• Google LLC (Firebase) — Authentication, Firestore, Cloud Functions, Crashlytics, App Check. Data centers in the United States. firebase.google.com/support/privacy
• RevenueCat, Inc. — Subscription state synchronization. United States. revenuecat.com/privacy
• TemPolor — AI music generation engine that produces the audio for your text prompts. No audio uploads are sent. platform.tempolor.com

We have engaged each of these providers under their standard data-processing terms. We do not sell or rent your data to any third party for advertising or marketing purposes.

6. International Data Transfers

Our backend (Google Cloud Functions, Firestore) and our subprocessors (RevenueCat, TemPolor) operate primarily in the United States. By using Music AI from outside the United States, you acknowledge that your information will be transferred to and processed in the United States, which may have different data-protection laws than your jurisdiction. Where required, we rely on Standard Contractual Clauses approved by the European Commission to legitimize these transfers.

7. Data Retention

• Anonymous account & library content. Retained for as long as the account is in active use. Inactive accounts (no app launch for 24 months) are flagged for deletion.
• Subscription state. Retained while your subscription is active and for up to 7 years afterward to comply with tax and accounting obligations.
• Generation request payloads. Deleted from our backend within 24 hours of a successful response.
• Crash reports. Retained for 90 days.
• Cloud Functions logs. Retained for 30 days for debugging purposes.

8. Children's Privacy

Music AI is rated 4+ on the App Store and is not directed at children under the age of 13. We do not knowingly collect personal information from children. Because the app uses anonymous identifiers and does not request name, email, location, or any direct personal identifier from any user, no targeted collection from minors occurs.

If you are a parent or guardian and believe your child has used the app and you wish to delete their data, contact us at aimusicgenerator.app@gmail.com and we will erase the relevant anonymous record.

9. Security

• All network traffic between the app and our backend is encrypted using HTTPS / TLS 1.3.
• Firebase App Check with App Attest verifies that requests originate from a genuine, unmodified instance of Music AI on a real Apple device, blocking abuse from emulators and tampered builds.
• Subscription verification uses Apple's signed App Store receipts (server-to-server) via RevenueCat — your subscription state cannot be spoofed from a jailbroken device.
• Cloud Functions run inside Google's hardened production environment with secrets stored in Google Secret Manager.
• Firestore security rules restrict every user's reads and writes to their own anonymous-ID document; no cross-user access is possible.

While we apply industry-standard safeguards, no system is perfectly secure. If you suspect a security vulnerability, please report it to aimusicgenerator.app@gmail.com.

10. Your Rights

10.1 Universal Rights

Regardless of where you live, you can:

• Delete your data at any time via Settings → Delete All Data in the app, or by emailing us with the subject "Delete my data".
• Stop generating new data at any time by uninstalling the app.
• Cancel your subscription at any time via iOS Settings → [Your Name] → Subscriptions.

10.2 EEA / UK (GDPR) Rights

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to restrict processing.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object to processing based on legitimate interest.
• Right to lodge a complaint with your local supervisory authority.

10.3 California (CCPA / CPRA) Rights

California residents have the right to know what personal information is collected, the right to delete it, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.

10.4 How to Exercise Your Rights

For any of the rights above, email aimusicgenerator.app@gmail.com. We will respond within 30 days. Because we operate on anonymous identifiers, we may ask you to install the app and tap an in-app button so we can correlate your request with the correct record.

11. Cookies & Local Storage

This is a mobile application — it does not use HTTP cookies. The app stores small preference values locally using iOS UserDefaults (e.g., onboarding completion flag, selected sort order, downloaded seed-song favorites). These never leave your device.

12. Do Not Track

Because Music AI does not perform behavioral tracking and does not show advertising, "Do Not Track" browser signals are not applicable. We honor them in spirit by not tracking in the first place.

13. Changes to This Policy

We may update this Privacy Policy occasionally. The "Last updated" date at the top reflects the most recent revision. Material changes (a meaningful expansion of what we collect or how we use it) will be highlighted with an in-app banner the next time you launch Music AI. Continued use of the app after a change becomes effective constitutes acceptance of the revised policy.

14. Governing Law

This Policy is governed by the laws of the Republic of Türkiye, where the Developer is based. Disputes that cannot be resolved informally will be subject to the exclusive jurisdiction of the courts of Istanbul, Türkiye, except where applicable consumer-protection law gives you the right to bring proceedings in your country of residence.

15. Contact

For all privacy-related questions, complaints, requests, or concerns:

• Email: aimusicgenerator.app@gmail.com
• Subject lines we recognize: "Delete my data", "Access my data", "Privacy question"
• Response time: within 5 business days for general questions, within 30 days for formal data-subject requests.