Privacy Policy

1. Introduction

WishingTunes ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

2. Data We Collect

We collect the following types of personal information:

• Account Information: Email address, name, and authentication credentials when you create an account.
• Photos: Portrait images you upload for AI-generated artwork. These are processed securely and stored only as long as needed to generate your artwork.
• Audio: Voice samples uploaded for voice cloning features (Premium plan only), processed with your explicit consent.
• Usage Data: Information about how you interact with our Service, including wishes created, occasions selected, and sharing activity.
• Device Information: Device type, operating system, and app version for troubleshooting and optimization.
• Payment Data: Purchase and billing information processed securely through Stripe. We do not store your full credit card number.

3. How We Use Your Data

• Personalization: To create personalized wishes and artwork tailored to your chosen occasions and recipients.
• AI Generation: Your inputs (names, occasion, language preferences) are used by our AI systems to create unique musical compositions and visual artwork.
• Service Improvement: To analyze usage patterns and improve our offerings.
• Communication: To send service-related notifications, festival reminders, and important updates.

4. Data Storage and Security

Your data is stored on encrypted, cloud-hosted infrastructure. We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, and regular security audits. Access to personal data is restricted to authorized personnel only.

5. Data Sharing

We do not sell your personal information to third parties. We may share data with:

• Service Providers: Third-party providers who assist in operating our Service (cloud hosting, payment processing, AI model providers).
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request deletion of your account and associated data.
• Export: Request a portable copy of your data in a standard format.
• Correction: Update or correct inaccurate personal information.
• Opt-out: Opt out of non-essential communications at any time.

7. GDPR Compliance

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to object to processing. Our legal basis for processing your data includes consent, contract performance, and legitimate interests.

8. CCPA Compliance

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information, including the right to know what data we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

9. Cookies and Tracking

Our website uses essential cookies for authentication and session management. We use analytics cookies to understand how visitors interact with our site. You can control cookie preferences through your browser settings. Our mobile app does not use cookies but may use device identifiers for analytics purposes.

10. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected data from a child under 13, we will promptly delete it. If you believe a child has provided us with personal information, please contact us immediately.

11. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Uploaded photos are retained only for the duration of artwork generation and are automatically deleted within 30 days. You may request deletion of your account and data at any time.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: [email protected]
Website: wishingtunes.com