# Adaivo Music Privacy Policy **Document status:** OPERATOR REVIEWED — APPROVED FOR PUBLICATION BY OPERATOR — NO LEGAL OR NATIVE-LANGUAGE REVIEW CLAIM **Release:** 2026-09-25.1 **Effective date:** 2026-09-25 ## Operator and contact Adaivo, a sole proprietorship in Ontario, Canada, operates from Toronto. Privacy contact: info@music.adaivo.ai. ## Information we collect - **Without an account:** an installation identifier, device platform and session/security tokens enable access and protect the service. An installation identifier can link activity on that installation; “without an account” does not mean all information is anonymous. - **Apple or Google sign-in:** we verify provider credentials and process the provider's account identifier and available profile information. Our profile may contain a display name, a Google profile-image URL and a masked verified-email hint. The sign-in provider may supply an email address during verification. If you contact support, we receive the contact email you provide separately. - **Service and purchase records:** we process favourites, access and offline-download licences, store and product identifiers, transaction references, purchase-verification results and subscription status to provide account-specific access and restore purchases. Apple or Google handles store payment details; this purchase flow does not provide us with your full payment-card number. - **Support:** when you submit in-app feedback, we receive its subject, your contact email, description, app version, platform and language. The message and a feedback reference are delivered through Google Workspace/Gmail. Our service also stores delivery status, timestamps and keyed identifiers derived from the request, account/installation and network address to prevent duplicate delivery and abuse. These derived identifiers are not treated as inherently anonymous. Do not send passwords, verification codes or payment-card details. - **Operations:** infrastructure processes network addresses and request/security information to deliver and protect the service. The retained log fields and periods are described in our retention information. - **On your device:** playback position, preferences, cached content, encrypted offline downloads and related keys may be held locally. Local storage is distinct from server favourites, purchase records and download licences. Data included in a support message is transmitted when you submit it. The app’s optional first-party analytics is not currently enabled. Its preference is stored on your device. Google Sign-In separately processes account and device identifiers, other usage data and other data for analytics, linked to identity, as described in its privacy disclosures. The app’s local analytics preference does not control Google Sign-In’s processing. Service delivery, purchase verification and security processing are separate from optional first-party analytics. ## Purposes and legal bases We use information to provide and secure accounts, playback, downloads and entitlements; verify purchases; remember preferences; respond to feedback; prevent abuse; diagnose failures; comply with law; and support the provider processing described below. Depending on context, we rely on contract performance, consent, legitimate operational and security interests, and legal obligations. You may withdraw consent prospectively where consent applies. ## Providers and disclosures We use Cloudflare for application infrastructure, databases, content storage and delivery; Apple for Apple sign-in and App Store purchases; and Google for Google sign-in, Google Play purchases and Google Workspace/Gmail customer-support processing, where used. Displaying a Google profile image may request that image from Google. Google Sign-In’s disclosed collection includes name, email address, phone number, approximate location, account and device identifiers, and other usage and data categories. Its purposes include authentication and app functionality, and analytics for certain categories. See [Google’s Privacy Policy](https://policies.google.com/privacy). Providers receive information needed for these services and may also process it under their own policies. The music catalog includes AI-generated music. Our backend sends prepared music instructions to MiniMax to generate catalog music. We do not offer listener prompt submission, voice recording or voice cloning. Account credentials, purchase records and support messages are not inputs to this music-generation workflow. We may disclose information when required by law, to protect users or the service, or in a business reorganization subject to lawful safeguards. We do not sell personal information. ## Cross-border processing Providers may process information outside Ontario or Canada, where foreign laws may permit access by authorities. We use contractual, access, and security safeguards appropriate to the service. ## Retention - Feedback: no longer than 24 months. - Request, error, and security logs: no longer than 90 days. - Our first-party opt-in anonymous analytics, if enabled: no longer than 13 months. It is not currently enabled. Google Sign-In’s own processing and retention are governed by Google’s privacy policy; the app’s local analytics preference does not control them. - Account records: while the account is active, except purchase, subscription, fraud, tax, or security audit records retained only as legally or reasonably needed. - Local data: until cleared, uninstalled, or removed by the operating system. Signing out locks preserved encrypted account-local data; it does not necessarily delete it. We delete or de-identify information when its retention period ends unless law requires preservation. ## Security We use encryption, scoped access controls, security tokens, monitoring, and data minimization appropriate to the risks. No system is completely secure; report concerns to info@music.adaivo.ai. ## Access, correction, deletion and complaints You may request access to or correction of personal information, account deletion, withdrawal of consent, or information about our practices by emailing info@music.adaivo.ai. We may verify identity and retain limited records where law or legitimate audit needs require. You may complain to Adaivo and, where applicable, the Office of the Privacy Commissioner of Canada or another competent regulator. You can request account deletion in the app or contact our privacy address. When the service completes account deletion, it disables the account, removes linked sign-in profiles and favourites, removes purchase-to-account bindings, and revokes its active sessions and offline licences. Limited records remain, including the disabled-account/deletion record, installation and revocation records, and purchase/subscription history used for recovery, refunds, disputes, fraud prevention and audit. Their scope and retention must be limited to the applicable purpose; deleting an account is not a promise that every transaction record is immediately erased or anonymised. The app clears the affected account's local data through its deletion flow; interrupted cleanup may complete after the app resumes. Data on another device or in a support-email thread is not automatically erased by that device cleanup. Signing out locks preserved account-local data and is different from deleting an account. Account deletion does not cancel an App Store or Google Play subscription. Manage cancellation through the store used for purchase. ## Children Adaivo Music is not directed to children under 13. We do not knowingly collect their personal information. Contact us if you believe a child under 13 provided information. ## Changes We may update this policy. The release and effective date identify the version, and we will provide notice or seek consent when required. ## Contact Adaivo, Toronto, Ontario, Canada. Email: info@music.adaivo.ai. Product support: support@music.adaivo.ai. Privacy, access, correction, deletion and security requests: info@music.adaivo.ai. Please identify the request and provide enough information for us to locate the relevant account or support conversation; do not send passwords or verification codes. We may ask for proportionate information to verify your identity.