Privacy Policy

MUSICA (“we,” “our” or “the platform”) is an AI-powered Latin music creation platform available at app.musica.dev and as a mobile app. The controller of your personal data is Musica AI LLC, 260 Crandon Blvd, Ste 32, Key Biscayne, FL 33149, United States (“Musica AI”). You can contact us about privacy at [email protected].

This Privacy Policy explains how we process your personal data when you use the Service. Please read it together with our Terms of Service.

Account information

• Name and display name
• Email address
• Profile photo (optional)
• Password (stored as a secure hash, never in plain text)
• OAuth authentication tokens (if you sign in with Google, Apple or Facebook)
• Phone number and the one-time verification codes we send by SMS, if you add or verify a phone number

Usage data

• Songs you create, including the lyrics and style prompts you submit
• The plan your account was on when each song was created, to determine ownership and usage rights
• Listening history and playback behavior
• Songs you like, share or add to playlists
• Users you follow and social interactions (comments, likes)
• Creation settings and preferences

Video content (Video Creator)

• Media you upload to the Video Creator (images and video clips) and the video projects you create
• Videos you export or publish, and the song or songs associated with each video
• Project metadata: duration, format, number of clips and media source (your own or third-party stock libraries)
• The storage space your projects and videos use (to apply your plan’s limits)
• The plan you were on when each video was created, to determine usage rights (including commercial use)

Stock media you add comes from third-party content providers and is subject to their licenses. The exported video file is stored with a third-party cloud storage provider.

Payment information

Payments are processed by Stripe on the web, and by Apple (App Store) or Google (Google Play) in the mobile apps. We do not store your card number, CVV or full card details. We receive and keep a customer or transaction identifier, subscription status and billing history to manage your account.

Device data

• Device push notification tokens (third-party push service)
• IP address and approximate location (country/city level)
• Browser type and version
• Operating system

Social sign-in

If you sign up or sign in with Google, Apple or Facebook, we receive basic profile information from those services, including your name and email address, as permitted by your privacy settings on those platforms.

Audio and messages you send us

• Recordings you make and audio files you upload in Studio
• Audio you upload to use as a reference for a new song
• Song reports, feedback, comments and messages you send to support

Voice data

• Recordings of your singing voice that you upload to create a Voice Model
• The Voice Model created from those recordings
• A record of your consent (the date and the version of the consent text you accepted)

Voice recordings and Voice Models may be considered biometric data in some jurisdictions. We collect them only with your explicit consent, use them only to provide the voice feature to you, never make them available to other users and do not use them to train our general AI models. You can delete your Voice Model at any time in the app; this permanently deletes your recordings and your model, including any earlier version we kept as a backup.

We use the information we collect to:

• Provide the Service: process AI music creation requests, manage your library and deliver the platform’s core features.
• Personalize your experience: recommend songs based on your listening and creation history.
• Process payments: manage subscriptions and billing and allocate credits.
• Communicate with you: send account notices, service updates and transactional emails (subscription confirmation, song ready, etc.).
• Send push notifications: let you know when your songs are ready or about other relevant updates, if you have given permission.
• Improve the Service: analyze usage patterns to improve AI quality, fix bugs and develop new features.
• Keep the Service secure: detect and prevent fraud, abuse and unauthorized access.
• Comply with legal obligations: respond to lawful requests from authorities and meet our legal obligations.
• Label AI-generated content: add metadata to songs created with Musica identifying them as AI-generated and created with Musica, as required by applicable AI transparency rules.

Personalization: we use your listening and creation activity to rank and recommend songs in your feed. This does not produce legal or similarly significant effects on you, and we do not make decisions about you based solely on automated processing that have such effects.

The app may send push notifications to your device. These include transactional notifications (for example, when your song is ready or when a creation fails) and, optionally, announcements or service news.

Push notifications are delivered through a third-party push notification service. We share only your device’s notification token, the identifier needed to deliver the message. We do not share the content of your songs or your account data with this service.

You can turn off push notifications at any time in the app settings or in your operating system settings. Turning them off does not affect the core functionality of the Service.

If you are in the European Economic Area, the United Kingdom or Brazil, we process your personal data on the following legal bases (GDPR Articles 6 and 9; LGPD Articles 7 and 11):

• Performance of our contract with you: creating and managing your account, creating music, storing your library, processing purchases, providing Studio and the Video Creator, and sending service notices.
• Consent: push notifications, creating your Voice Model from your voice recordings (explicit consent, because voice data may be biometric), and any optional feature for which we ask. You can withdraw your consent at any time without affecting processing carried out before.
• Legitimate interests: keeping the Service secure, preventing fraud and abuse, personalizing recommendations, improving the Service and protecting our legal rights. You can object to this processing (see “Your Privacy Rights”).
• Legal obligation: keeping financial records for tax and accounting purposes and responding to lawful requests from authorities.

We do not sell your personal data. We share your information in a limited way with the following trusted service providers:

We may also share information in these circumstances:

• Public content: songs and content you mark as public are visible to all users. Your name and profile are visible to other users.
• Legal requirements: we may disclose information when required by applicable law, subpoena or court order.
• Business transfers: in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction.

Your data is processed and stored in the following locations:

• Backend and database: cloud hosting provider (United States)
• AI processing: AI compute provider (United States)
• Audio storage: cloud storage provider (globally distributed)
• Email: email delivery provider (United States)
• Payments: Stripe (United States); Apple and Google for in-app purchases

When we transfer personal data from the European Economic Area, the United Kingdom or Brazil to other countries, including the United States, we use the transfer mechanisms permitted by applicable law, such as adequacy decisions or standard contractual clauses.

We keep your personal data while your account is active or as needed to provide the Service:

• Active account data is kept for the life of your account.
• Songs you delete are removed from your library and from every public surface of the Service immediately. They are kept for up to 30 days so our team can review them (for example, against pending reports or legal claims) and are then permanently erased, including their audio files.
• When you delete your account (available in Settings → Danger Zone), we delete or anonymize your personal data within 30 days, except where the law requires us to keep it.
• Backups may persist for up to 90 days after deletion.
• Aggregated, anonymized data (which cannot identify you) may be kept indefinitely for analytics.
• Financial transaction records may be kept for up to 7 years to comply with tax and accounting regulations.
• Voice data is kept until you delete your Voice Model or your account. When you replace your voice with a new recording, we keep only your most recent previous version as a backup until you delete your voice.

You can also request deletion of specific data by writing to [email protected]. Ownership of songs created on the Free plan is described in our Terms of Service; deleting them still removes them from the Service as described above.

Depending on where you live, you may have the following rights over your personal data under the GDPR (EU General Data Protection Regulation), Brazil’s LGPD (General Data Protection Law), the CCPA (California Consumer Privacy Act) or other applicable privacy laws:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data (the “right to be forgotten”). You can delete your account directly from Settings.
• Portability: request your data in a structured, machine-readable format.
• Restriction: ask us to limit the processing of your data in certain circumstances.
• Objection: object to processing of your data based on legitimate interests.
• No sale (CCPA): California residents have the right to opt out of the sale of personal information. We do not sell personal information.
• Withdraw consent: where we rely on your consent, you can withdraw it at any time, without affecting processing carried out before.
• Complaint: you have the right to lodge a complaint with a data protection supervisory authority, such as the AEPD (Spain), the CNIL (France), the Garante per la protezione dei dati personali (Italy), the CNPD (Portugal), the ANPD (Brazil) or the authority in your country of residence.

We use cookies and similar technologies to operate the Service:

• Essential cookies and local storage: required for authentication, session management and core functionality (your session is kept in your browser’s local storage). They cannot be disabled without breaking the Service.
• Preference cookies: remember your settings, such as language and playback preferences.

We do not use advertising cookies, third-party trackers, tracking pixels or IDFA (Identifier for Advertisers). We do not do advertising tracking of any kind.

The Service is not directed to children under 13, or under the minimum age of digital consent in their country if that is higher (for example, 14 in Spain and Italy and 15 in France). We do not knowingly collect personal information from children under that age without the consent of a parent or guardian. If we learn that we have done so, we will delete it as soon as possible.

If you believe a child under 13 has given us personal information, please contact us at [email protected].

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit using TLS/HTTPS
• Secure password storage with hashing (never in plain text)
• Access controls that limit data access to authorized personnel only
• Secure payment processing through Stripe’s PCI-compliant infrastructure and the Apple and Google app stores
• Revocable sessions with token blocklisting
• SSRF protection and rate limiting on sensitive endpoints

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will notify you in the app or by email before they take effect and update the “Last updated” date. If you do not agree with the changes, you can stop using the Service and delete your account.

If you have any questions, concerns or requests about this Privacy Policy or our data practices, contact us: