Privacy Policy Effective Date: October 01, 2024 Last Updated: July 21, 2026 This Privacy Policy explains how AIR Music (the "Services") collects, uses, shares, stores, and protects information about you, and the choices you have. The Services are operated and owned by ExploreApps sp. z o.o. ("ExploreApps", "we", "our", and "us"). Web-based subscriptions are sold and processed by EL Software Services LLC. This Policy applies to all of our AI-powered music creation and related generative features. By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. Overview This Policy explains: - what information we collect; - how we use it; - how we use cookies and similar technologies; - how and with whom we share it; - how we store, secure, and retain it; - how our AI-powered features handle your data; - your choices and privacy rights; - payment processing; - rights of California and other U.S. residents; - rights of EEA and UK residents, and other jurisdictions; - international data transfers; - automated processing and AI; - children's privacy; - how to contact us. Our Services may contain links to third-party websites or services. Information you provide to third parties is governed by their own privacy policies, which we encourage you to review. What Information We Collect We collect information when you provide it to us, when you use the Services, and from other sources. Information You Provide - Contact information (e.g., name, email address). - Account information (e.g., login credentials, subscription tier, credit balance, transactions). - Prompts and preferences you provide to create content (e.g., text descriptions of a mood, style, or idea, and settings you choose). - Content inputs you submit, including text prompts and, for certain features, voice recordings, uploaded audio, and photos or images. Voice, Photo, and Content Inputs Some features let you generate content from additional inputs. When you use these features, we process: - Voice recordings and audio captured through your device microphone or uploaded by you, so a model of your voice can be created and used in the songs you generate; - Photos and images you select or capture, so artwork or other outputs can be generated; - The content you generate and related metadata, so you can browse, replay, and manage it. See "AI-Powered Features and How They Handle Your Data" below for how these inputs are handled. Information We Collect Automatically - Features used, access times, device type, operating system, app version, and similar identifiers. - IP address, session activity, and analytics data, which may be processed in anonymized or pseudonymized form. - Advertising and device identifiers (such as the Identifier for Advertisers (IDFA) on iOS, or the equivalent on other platforms), together with attribution and campaign data used to understand how you found the Services. On iOS, we access the IDFA only where you permit tracking through Apple's App Tracking Transparency prompt. - We use cookies and similar technologies as described below, and we honor "Do Not Track" (DNT) signals where required by law. Information From Other Sources - Login partners (e.g., Google or Apple), where you choose to sign in through them. - Publicly available or commercial sources, and our affiliates, where permitted. Sensitive Information We do not intentionally collect special categories of personal data (such as health or sensitive demographic information). We process any voice input and photos you provide only to generate content at your request, as described under "AI-Powered Features and How They Handle Your Data," and not to identify you. Please do not submit sensitive information unless it is necessary and you understand the implications. Where you voluntarily provide it, we process it only with your explicit, informed consent and as permitted by law. How We Use Your Information We use your information to: - provide, maintain, and secure the Services; - generate the songs, images, and other content you request, including creating a model of your voice where you use voice features; - personalize and adapt the Services to your preferences; - process transactions, manage subscriptions, and administer credits; - communicate with you and respond to inquiries; - send marketing messages where legally permitted, with opt-out options; - measure attribution and analyze usage in anonymized or aggregated form; - improve the Services and test quality in non-identifiable form; - comply with legal obligations and enforce our Terms of Use. AI-Powered Features and How They Handle Your Data Where the Services generate content using artificial intelligence, the following applies in addition to the rest of this Policy: - Processing to deliver the feature. Your prompts, voice inputs, photos, and related content are transmitted securely and processed to generate the outputs you request. We use trusted third-party service providers for music generation, voice modeling, image generation, and related AI processing, acting on our behalf under contract. - Processing scope. This content is processed to deliver the feature you requested and to support the Services, consistent with the "How Long We Retain Your Information" section. Content you generate is stored so you can access, replay, and manage it. - Voice and facial data. We process your voice only to model and reproduce it in the content you create, and any photos only to generate the outputs you request. We do not use your voice or images to identify or authenticate you, and we do not build a voice- or face-recognition profile. Because a model of your voice, or an image of a face, may be treated as biometric information under some laws (for example, certain U.S. state biometric statutes), we ask for your consent before you use these features, and we may make them unavailable or limited where we cannot offer them in compliance with local law. See our Terms of Use. - No model training without consent. We do not use your voice inputs, photos, or prompts to train generalized AI models without your separate, informed, and explicit consent. - No sale, no advertising. We do not sell this content and do not use it for advertising. How We Use Cookies and Similar Technologies We use cookies, pixels, SDKs, and web beacons for authentication and security, preferences and settings, usage analytics, and attribution. We obtain your consent for non-essential cookies where required by ePrivacy and GDPR. You can manage cookies through your browser or our cookie settings. How We Share Your Information We may share your information: - with service providers under contract (e.g., hosting, storage, analytics, attribution, support, payment processing, and AI generation); - with EL Software Services LLC, to process web-based subscription payments; - with your consent; - with affiliates and subsidiaries for internal purposes; - in connection with a merger, acquisition, or sale of assets; - when required to comply with law or to protect rights and safety. We do not sell your personal data, and we do not share your personal information for cross-contextual behavioral advertising without your consent. Third-Party Processing Providers Third-party providers that process data on our behalf act as processors (or sub-processors) under Data Processing Agreements (DPAs), with appropriate contractual and technical safeguards, and process your data only for the tasks we instruct. How We Store and Secure Your Information We maintain physical, administrative, and technical safeguards, including: - encryption in transit and at rest using industry standards (e.g., TLS 1.2+, AES-256); - regular audits, vulnerability scans, and access controls; - staff training in privacy and data security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. How Long We Retain Your Information We retain information as follows: - Account data (e.g., name, email, login): while the account is active, plus up to 12 months. - Billing and transaction data: 6 years, or longer where required by law. - Session logs and usage data: up to 6 months. - Voice inputs and photos submitted to generate content: retained only as long as needed to provide the feature and support the Services, and in any event deleted or de-identified within 12 months of your last use of the relevant feature, or upon closure of your account, whichever comes first. - Content you generate: retained so you can access and manage it, until you delete it or your account is closed. - Support communications: up to 2 years. Your Choices - Marketing: opt out via the unsubscribe link in our emails. - Microphone and photos: grant or revoke microphone and photo permissions in your device settings; the corresponding features require them. - Your content: delete the content you have generated within the App. - Access, correction, deletion: contact support@exploreapps.co. Payment Processing Payments are handled by third-party providers that may collect billing details and transaction records. Web-based subscriptions are processed through EL Software Services LLC; in-app purchases are processed by the relevant app store. Your full payment card data is not stored by us and is processed securely via PCI-DSS compliant providers. Rights of U.S. Residents If you reside in California, Colorado, or a similar state, you have the right to: - know and access the personal information we collect, including categories such as identifiers, usage data, audio, images, and content you provide; - correct or delete your personal information; - opt out of the sale or sharing of personal information (note: we do not sell or share for cross-context behavioral advertising); - limit the use of sensitive personal information; - not be discriminated against for exercising your rights. You may designate an authorized agent to submit requests on your behalf, and we will verify your identity before responding. We do not sell the personal information of consumers, including minors under 16. To exercise these rights, contact support@exploreapps.co. Rights of EEA and UK Residents If you are in the European Economic Area or the UK, you have the right to access, rectify, erase ("right to be forgotten"), restrict or object to processing, data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority. Legal Basis for Processing We process personal data based on one or more of: your consent (e.g., marketing, non-essential cookies, or voice modeling); performance of a contract (to deliver Services you request); our legitimate interests (e.g., service improvement and analytics), provided these do not override your rights; and legal obligations. Where we rely on consent, you may withdraw it at any time. Rights of Other Jurisdictions You may have rights under other privacy laws (e.g., Brazil LGPD, Canada PIPEDA). We honor these rights in accordance with applicable law. International Data Transfers We may transfer your personal information to countries outside your jurisdiction (e.g., the United States, where EL Software Services LLC is established). Where we do, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, the UK International Data Transfer Agreement (IDTA), adequacy decisions, or your explicit consent, supplemented where appropriate by transfer impact assessments. Automated Processing and AI We use AI to power the core features of the Services, which involves automated processing of the content you provide (for example, generating songs from your prompts or modeling your voice). We do not use AI to make decisions producing legal or similarly significant effects without human oversight. We do not use your personal data to train generalized AI models unless you have provided separate, informed, and explicit consent. Where training is performed, it is limited to de-identified or synthetic data. We conduct Data Protection Impact Assessments (DPIAs) where required and apply data minimization, transparency measures, and periodic review of AI outputs. Children's Privacy The Services are intended for users 13 years or older. Users under 18 must have verifiable consent from a parent or legal guardian, which we may verify, before using the Services. We do not knowingly collect personal information — including voice recordings or photos — from children under 13 (or under 16 where applicable under local law) without verifiable parental consent, in accordance with laws such as COPPA and GDPR. We do not sell the personal information of minors. If we become aware that we have collected information from a child without the required consent, we will delete it promptly. If you believe we may have done so, contact support@exploreapps.co. Changes to This Policy We may update this Policy from time to time. If we make material changes, we may notify you by email or through a prominent notice in the Services. Contact For questions about this Policy or to exercise your rights, contact us at support@exploreapps.co.