Privacy Policy

Effective: June 1, 2026

This Privacy Policy ("Policy") describes how user information is handled in Song for you. ("Service"). The operator ("we", "us") respects your privacy and protects it appropriately.

1. Information we collect

We may collect and store the following to provide and improve the Service:

• Identifiers: user IDs via Firebase Authentication, etc.
• Profile: display name and similar fields you provide
• Created content: lyrics, song metadata, cover art, notes, stories, etc.
• Gift information: gift messages, unlock passwords (stored hashed), gift link expiry, etc.
• Usage: song generation counts, free-tier usage, and similar data needed to operate the Service
• Device and logs: device type, OS, app version, access logs, crash logs, etc.
• Permissions: photo library, etc. (when you grant permission)

We do not currently collect data for third-party advertising or tracking. If we introduce such practices, we will update this Policy and App Store privacy labels.

2. Purposes of use

• Providing, operating, authenticating, and managing accounts
• Generating, storing, playing, and listing original songs and lyrics
• Providing gift link web pages (password unlock, listening, download)
• Improving the Service, development, and fraud prevention
• Responding to inquiries
• Legal compliance

3. Disclosure to third parties

We do not provide personal information to third parties except when:

• You have consented
• Required by law
• Necessary to protect life, body, or property
• Cooperation with public authorities is required
• Processing is entrusted to external providers as described below

4. External services

We use the following external services. Please also review their privacy policies:

• Firebase (Google): authentication, database, storage, hosting, etc.
• OpenAI API: lyrics generation (see below)
• Mureka API: music generation (see below)

5. AI generation (OpenAI · Mureka)

We use OpenAI, LLC's API for lyrics and cover image generation, and Mureka or OpenAI's API for music generation and gift story backgrounds, via our servers (Firebase Cloud Functions). The app does not connect directly to these APIs with secret keys.

Information that may be sent (examples)

• Lyrics: stories, notes, existing drafts, revision instructions, etc.
• Music: finalized lyrics, style settings, etc.
• Cover art: selected photos, lyrics, editing instructions, etc.
• Gift story background: gift message, lyrics, etc.

Submitted data is used only to provide the relevant feature. Under OpenAI API policy, submitted data is generally not used for model training (we have not opted in to training-related sharing). Retention periods and international processing by API providers are subject to their current policies.

In-app consent: Before you first use AI features (lyrics, music, jacket art, etc.), the app shows what data is sent and which third parties receive it, and we send data to external AI services only after you explicitly agree.

6. Gift link web

Recipients can open gift links created by users in a web browser. Unlock passwords they enter are used to verify access and provide content (message, lyrics, listening, download). Gift links expire 3 days after creation.

7. Security

We take reasonable measures such as encrypted communication, access controls, and Firebase security features to prevent leakage, loss, or damage of user information.

8. Retention, deletion, and requests

We retain user information for as long as needed to provide the Service. Gift links cannot be opened or downloaded after their 3-day expiry.

Deletion in the app

When account deletion is available, users should generally request deletion of their account and related data from within the app.

Requests by email

For access, correction, suspension of use, or deletion of your personal information, contact us after we verify your identity. We will respond within a reasonable scope as required by law. We may be unable to fulfill all or part of a request when:

• We cannot verify your identity
• Retention is required by law
• Fulfilling the request could harm third-party rights
• Information is the minimum necessary to provide the Service or prevent abuse

After deletion, some data may remain temporarily in backups or logs for technical reasons. Anonymized or aggregated information may be used in non-identifying form.

9. Age limit

The Service is intended for users aged 13 and over. If you are under 13, please do not use the Service. We do not knowingly collect personal information from children under 13. If we learn that we have, we will take appropriate steps including deletion.

10. Changes to this Policy

We may update this Policy as needed. For material changes, we will notify you appropriately, such as through in-app notices.

11. Contact

For questions about this Policy, see our Contact page or email:

app.fumixroom@gmail.com

※ This document is a general explanation and not legal advice. Consult a professional if needed.