Privacy Policy

This Privacy Policy explains how MeloAI (operated by Lotusdio) ("MeloAI", "we", "us") collects, uses, and shares information when you use the MeloAI service (the "Service"). We aim to collect only what we need to run the Service and to be clear about how we use it.

Information you provide

• Account details such as your name or handle, email or phone number, and password or sign-in identifiers (including third-party sign-in such as Google).
• Content you create or upload, including prompts, lyrics, titles, descriptions, and reference audio. Audio you upload may contain your voice; we process it to provide the feature you asked for, not to identify you.
• Payment information you provide when buying credits or a subscription (processed by our payment partners — we do not store full card or wallet credentials).
• Entries, votes, and appeals you submit in events and contests.
• Messages you send us, for example support requests or reports.

Information we collect automatically

• Usage data such as the tracks you play, generate, like, or follow, playback events used to power recommendations and daily mixes, and your interactions with ads (impressions and clicks).
• Device and technical data such as device type, operating system, app version, IP address, and general location derived from it.
• Cookies and similar technologies (see our Cookie Policy).

• To provide the Service — generate music, host your library, stream playback, and sync across devices (performance of our contract with you).
• To personalise your experience, including recommendations, trending, and daily mixes — automated ranking and moderation systems are part of how the Service works.
• To select, deliver, cap, and measure advertising on the Service.
• To process payments, manage credits and subscriptions, run events and prizes, and prevent fraud.
• To keep the Service safe — enforce our Terms and Guidelines and detect abuse.
• To improve the Service and develop new features, using aggregated or de-identified data where possible.
• To communicate with you about updates, security, and (where permitted) offers you can opt out of.
• To comply with legal obligations and respond to lawful requests.

Where the law where you live distinguishes legal bases, we rely on performance of contract, your consent (which you can withdraw), our legitimate interests (such as security, improvement, and marketing our own service), and legal obligations.

When you generate music, your prompts, lyrics, and selections are processed by our music-generation systems and the third-party AI providers that power them, to produce your output, to enforce safety rules, and to operate the Service; providers may retain limited data for abuse monitoring under their contracts with us. We do not sell your prompts, and we do not permit providers to use your identifiable private content to train their general-purpose models without telling you first.

We may use prompts, outputs, and generation telemetry in de-identified or aggregated form to improve quality, safety, and pricing of the Service. Treat any personal or sensitive information you put into a prompt as something you are choosing to share for processing — and avoid putting other people's personal data into prompts without their permission.

We do not sell your personal information. We share it only as needed:

• Service providers — AI/model providers, cloud hosting and content-delivery, payment processors, analytics, and communications partners that process data on our behalf under contract.
• Other users and the public — content you choose to make public (tracks, playlists, profile, event entries) is visible to others together with its public metadata, and public pages may be indexed by search engines.
• Advertisers and event partners — reporting in aggregate only (for example, impression and click counts); we do not give advertisers your identity or contact details.
• Legal and safety — when required by law, to enforce our Terms, or to protect the rights, safety, and property of users, the public, or MeloAI.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Ads on MeloAI are served by us, not by third-party ad networks placing cross-site trackers. We use your in-app activity and general location to choose which of our advertisers' campaigns to show, to cap how often you see them, and to report aggregate performance to the advertiser. If this model changes materially (for example, adding an external ad network), we will update this Policy and, where required, ask for consent.

We keep information for as long as your account is active or as needed to provide the Service, and afterwards only as required to meet legal, accounting, security, or dispute-resolution obligations. As a guide: content you delete leaves routine backups within a limited period; payment and tax records are kept for the period the law requires; safety and enforcement records are kept as long as needed to prevent abuse. When you delete your account, we remove or anonymise your personal data within a reasonable period, subject to those exceptions.

Depending on where you live — including under data-protection laws applicable in the markets we serve — you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can manage much of your data in the app (profile, content visibility, deleting tracks or your account), and you can contact [email protected] to make a request; we may need to verify your identity first. We will respond as required by applicable law, and you may also complain to your local data-protection authority where one exists. Where a decision based solely on automated processing significantly affects you, you may ask us for a human review of it.

We use technical and organisational measures designed to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you and the authorities of incidents where required.

The Service is not directed to children below the minimum age stated in our Terms. We do not knowingly collect personal information from children below that age. If you believe a child has provided us information, contact [email protected] and we will take appropriate steps.

We operate across South-East Asia and may process and store information in countries other than your own, including where our cloud, AI, and payment providers operate. Where we transfer data internationally, we take steps to protect it consistent with this Policy and applicable law, including contractual safeguards with our providers.

We may update this Policy from time to time. If we make material changes, we will provide notice in the app or by email. The "Last updated" date above reflects the latest revision.

For privacy questions or requests, contact [email protected].