Privacy Policy (MoshiFled)

Effective Date: January 2025Developer & Data Controller: Kaan Ceylan (individual)

1) Personal Data We Collect

We collect data you provide (account information, music creation data, lyrics, preferences), data collected automatically (device information, usage analytics, app performance), payment data (token purchase history, subscription status), and data from third parties when you interact with their services.When you create music through the Service, we collect the music title, lyrics, style preferences, vocal type, cover art, and other content you submit. This data is stored in Firebase.

2) How We Use Data

We use your data to:

• Provide and operate the Service (AI music generation, lyrics creation, cover art generation, music playback)

• Process your music generation requests through third-party AI services

• Improve and secure the Service

• Personalize your experience (recommendations, collections, favorites)

• Communicate with you (notifications, support)

• Comply with legal obligations

• Enforce our Terms of Service and content policies

3) AI Processing & Third-Party Providers

To provide AI music generation features, we send your prompts, lyrics requests, and music parameters to third-party AI providers:

• ChatGPT (OpenAI): For generating song lyrics and music metadata

• ElevenLabs: For generating music audio from lyrics and parameters

• Google Gemini: For generating cover art images

We also use Firebase (Firestore, Authentication, Storage, Functions) for hosting, authentication, data storage, and server-side processing. RevenueCat is used for managing in-app purchases and subscriptions.When you generate music, your lyrics, prompts, and music parameters are processed by these AI services. All music content you create is stored in Firebase.

4) Data Sharing

We share data with:

• Service providers: Firebase, ChatGPT (OpenAI), ElevenLabs, Google Gemini, RevenueCat

• Payment platforms: Apple (App Store) and Google (Google Play) for in-app purchases

• Authorities: When required by law or to protect rights and safety

We do not sell your personal information for money. We may share aggregated, anonymized data for analytics and service improvement purposes.

5) Music Content & Public Sharing

When you create music and mark it as "public," your music (including title, lyrics, cover art, and audio) becomes visible to other users of the Service. Public music may appear in:

• Discovery feeds and recommendations

• User profiles and collections

• Search results (if search features are available)

• Public playlists and collections

You can change the privacy setting of your music at any time. Private music is only visible to you. We are not responsible for how other users may use, share, or interact with your public music content.

6) Your Rights

You have the right to:

• Access your personal data and music content

• Correct inaccurate data

• Delete your account and associated data

• Port your data (export your music)

• Withdraw consent for data processing

Contact us at kcey9714@gmail.com to exercise these rights. We will respond within 30 days.

7) Account Deletion

You can delete your account at any time through Settings > Account > Delete Account or by contacting us. Account deletion will:

• Remove your profile and account information

• Delete your private music content

• Remove your public music from active display (though backups may persist for a limited time)

• Cancel any active subscriptions

• Delete your token balance and purchase history

Note: Some data may be retained for legal compliance purposes or in encrypted backups for a limited period (typically 30-90 days).

8) Children's Privacy

The Service is intended for users aged 13 or older. If you are under 18, you must have a parent or legal guardian's permission to use the Service.If you are under a certain age (as determined by applicable laws in your jurisdiction), you may not use the Service without verifiable parental consent. We collect data from all users who use the Service, regardless of age, as long as they meet the minimum age requirement and have necessary parental consent where required.If you are a parent or guardian and believe your child has used the Service without your consent, please contact us immediately at kcey9714@gmail.com.

9) International Transfers

We may transfer your data to countries outside your own, including the United States (for Firebase, OpenAI, ElevenLabs, Google services) and other countries where our service providers operate.We use appropriate safeguards to protect your data during international transfers, including:

• Standard Contractual Clauses (SCCs) where required by law

• Adequacy decisions by relevant authorities

• Service provider compliance with applicable data protection laws

By using the Service, you consent to the transfer of your data to these countries.

10) Data Retention

We retain your data for the following periods:

• Music content: Until you delete it or delete your account

• Account information: While your account is active and up to 6 years after deletion for legal obligations

• Usage analytics: Typically up to 24 months

• Payment records: As required by law (typically 7 years)

• Logs and error reports: Typically up to 12 months

• Backups: Limited-time encrypted backups (30-90 days)

After these periods, we will securely delete or anonymize your data, except where we are required to retain it by law.

11) GDPR & CCPA Rights

If you are in the European Economic Area (EEA), United Kingdom, or California, you have additional rights:GDPR/UK GDPR Rights:

• Right to access your personal data

• Right to rectify inaccurate data

• Right to erasure ("right to be forgotten")

• Right to restrict processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent

California (CCPA/CPRA) Rights:

• Right to know what personal information is collected

• Right to access your personal information

• Right to delete your personal information

• Right to correct inaccurate information

• Right to opt-out of sale/sharing of personal information

• Right to non-discrimination

Contact us at kcey9714@gmail.com to exercise these rights.

12) Security

We implement technical and organizational measures to protect your data:

• Encryption in transit (HTTPS/TLS)

• Encryption at rest for sensitive data

• Access controls and authentication

• Regular security assessments

• Monitoring for suspicious activity

However, no system is 100% secure. We cannot guarantee absolute security. You are responsible for keeping your account credentials secure. If you suspect a security breach, please notify us immediately at kcey9714@gmail.com.

13) AI-Generated Content & Privacy

When you use AI features to generate music, lyrics, or cover art:

• Your prompts and inputs are sent to third-party AI providers (ChatGPT, ElevenLabs, Google Gemini)

• AI providers may use your data to train their models (subject to their privacy policies)

• Generated content is stored in our systems and may be used to improve the Service

• Similar prompts may yield similar outputs for other users

• You retain ownership of AI-generated content you create, subject to applicable law and third-party rights

14) Cookies & Tracking

We use cookies and similar technologies to:

• Authenticate your account

• Remember your preferences

• Analyze usage patterns

• Improve service performance

We use Firebase Analytics, which may use cookies and tracking technologies. You can control cookie preferences through your device settings, though this may affect Service functionality.

15) Do Not Track & Global Privacy Control

We honor platform-level privacy choices:

• iOS: App Tracking Transparency (ATT)

• Android: Privacy settings and controls

• Global Privacy Control signals (where implemented)

You can control tracking preferences in your device settings. We will respect your choices to the extent technically feasible.

16) Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• In-app notification

• Email (if you have provided an email address)

• Posting the updated policy with a new effective date

Continued use of the Service after the effective date of changes means you accept the updated Privacy Policy. If you do not agree with the changes, you should stop using the Service and delete your account.

17) Contact

For questions, concerns, or to exercise your privacy rights:Email: kcey9714@gmail.comPostal Address: 07010 Antalya, TurkeyDeveloper: Kaan Ceylan We will respond to your inquiries within 30 days.