Privacy policy

Who we are

Midhull is operated by [Company legal name], [registered address] (“Midhull”, “we”). We are the controller of the personal data described here. You can reach us at privacy@midhull.com.

What we collect

• Account details: your email address, the name you choose, and the account identifier Apple or Google sends when you sign in with them.
• What you create: prompts, lyrics, hums, recordings, photos you add, and the songs, covers and videos made from them.
• Your voice, only if you set up a personal voice: the consent phrase you read aloud and the recordings used to build your voice. We use it only for your songs.
• Dedications: the recipient’s name you enter, your note and any voice note, plus whether the song was opened, played and reacted to, so we can tell you.
• Purchases: your plan, renewal dates and song balance. Payments are handled by Apple or Google, and RevenueCat keeps our subscription records. We never see your card number.
• Device and usage: device type, app version, language, push token, and events such as “song kept” or “song shared”, used to keep the app working and to make it better.
• On to.midhull.com: your IP address and browser details for security and rate limiting. The web player sets no advertising cookies.

How we use it

We rely on our contract with you to provide the service, on our legitimate interest in keeping it safe and improving it, and on your consent for things like your personal voice and push notifications. You can withdraw consent at any time.

• To make your songs: we turn your prompts, lyrics and hums into music, covers and videos.
• To run your account, your plan and your song balance, including automatic refunds for songs that did not come out right.
• To keep Midhull safe: we screen uploads against copyrighted recordings, review lyrics and reports, and stop spam and abuse.
• To improve Midhull: we look at how features are used, mostly in aggregate.
• To talk to you: sign in codes, receipts, renewal reminders and the notifications you turned on.

AI and your content

Midhull uses AI models to write lyrics and make music. We send these models only what they need to make your song.

Who we share it with

We do not sell your personal data and we do not run ads. We share data only with providers who help us run Midhull, under contracts that limit what they can do with it:

• Cloudflare, for hosting, storage and email delivery.
• AI model providers, including Anthropic, for lyrics and song planning, and the music generation providers named in our provider list at [link].
• RevenueCat, Apple and Google, for subscriptions and purchases.
• PostHog, for product analytics.
• Expo, for push notifications.

What other people can see

Songs you publish appear on your profile, in Discover and in charts. Drafts stay private.

A dedication link is unlisted: anyone who has the link can open the song, your note and your voice note. Share it with the people you mean it for.

How long we keep it

We keep your data while your account is open. When you delete your account in Settings, we delete your data within 30 days and clear it from backups within 90 days, except what the law asks us to keep, such as purchase records.

Your choices and rights

You can see, download, correct and delete your data, and object to or limit how we use it. Most of this lives in Settings; for anything else, write to privacy@midhull.com and a person on our team will answer within 30 days. Depending on where you live, these rights come from the GDPR, the UK GDPR, the California Consumer Privacy Act, the Japanese APPI or the Korean PIPA. You can also complain to your local data protection authority.

International transfers

Our providers may process data outside your country. When data leaves the EEA, the UK or Korea, we use safeguards such as the European Commission’s standard contractual clauses.

Age

You need to be at least 13 to use Midhull, or older where your local law requires it. If you believe a child has given us data, write to us and we will delete it.

Security

We encrypt data in transit and at rest, keep access to a small team, and store secrets in managed vaults. If something goes wrong that affects you, we will tell you promptly.

Changes

When we change this policy we tell you in the app before the change takes effect, and we keep a list of what changed and when.