Privacy Policy

Privacy policy for HeartMuLa AI Music Generator
Jan 18, 2026

Introduction

Welcome to HeartMuLa, an open-source AI music foundation model designed to generate professional, studio-quality music from text descriptions. At HeartMuLa, your privacy is of utmost importance to us. This privacy policy outlines how we collect, use, protect, and share your personal information when you use our AI music generation service.

Effective Date: January 18, 2026

Information We Collect

We collect different types of information to provide and improve our AI music generation service:

1. Account Information

What We Collect:

  • Email address
  • Username or display name
  • Profile information (optional)
  • Account creation date

Purpose:

  • To create and manage your account
  • To provide customer support
  • To send important service updates and notifications
  • To authenticate your access to the service

2. Music Generation Data

What We Collect:

  • Text prompts and descriptions you provide
  • Language preferences
  • Duration settings
  • Custom lyrics (if provided)
  • Reference audio files (if uploaded)
  • Generated music files (temporarily)
  • Generation timestamps and frequency

Purpose:

  • To generate music based on your specifications
  • To improve our AI models and service quality
  • To analyze usage patterns and optimize performance
  • To provide personalized recommendations (future feature)

3. Usage and Analytics Data

What We Collect:

  • Pages visited and features accessed
  • Time spent on the service
  • Generation success and failure rates
  • Error logs and debugging information
  • User preferences and settings
  • Interaction patterns with the interface

Purpose:

  • To understand how users interact with HeartMuLa
  • To identify and fix bugs and technical issues
  • To improve user experience and interface design
  • To analyze feature adoption and usage trends

4. Device and Technical Information

What We Collect:

  • IP address
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Screen resolution
  • Language settings
  • Referrer URL

Purpose:

  • To optimize the service for different devices and browsers
  • To ensure compatibility and performance
  • To detect and prevent abuse or fraudulent activity
  • To provide technical support

5. Cookies and Similar Technologies

What We Use:

  • Essential Cookies: Required for basic functionality (authentication, session management)
  • Analytics Cookies: To understand user behavior and improve the service
  • Preference Cookies: To remember your settings and preferences

Purpose:

  • To maintain your logged-in state
  • To remember your preferences (language, theme, etc.)
  • To analyze traffic and usage patterns
  • To enhance user experience

You can control cookie preferences through your browser settings, but disabling certain cookies may affect service functionality.

6. Communication Data

What We Collect:

  • Support inquiries and correspondence
  • Feedback and survey responses
  • Email interaction data (opens, clicks)

Purpose:

  • To respond to your questions and provide support
  • To improve our service based on feedback
  • To communicate important updates

How We Use Your Information

We use the collected information for the following purposes:

Service Provision

  • Generate music based on your text descriptions
  • Authenticate and manage your account
  • Process and store your music generation requests
  • Provide access to generated music files

Service Improvement

  • Train and improve our AI models
  • Analyze usage patterns to optimize performance
  • Identify and fix technical issues
  • Develop new features and capabilities

Communication

  • Send service updates and announcements
  • Provide customer support
  • Notify you of important changes to the service
  • Respond to your inquiries (future feature)

Research and Development

  • Conduct research to advance AI music generation
  • Publish anonymized, aggregated statistics
  • Contribute to academic research (with anonymized data)
  • Comply with legal obligations
  • Protect against fraud and abuse
  • Enforce our Terms of Service
  • Protect the rights and safety of our users

Data Storage and Security

Storage Location

  • Your data is stored on secure cloud servers
  • Generated music files are temporarily stored for processing
  • Account and usage data may be stored in multiple geographic locations for redundancy

Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
  • Access Controls: Strict access controls limit who can access user data
  • Authentication: Secure authentication mechanisms protect your account
  • Monitoring: Continuous monitoring for suspicious activity and security threats
  • Regular Audits: Regular security assessments and updates

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

  • Account Data: Retained as long as your account is active
  • Generated Music: Temporarily stored (typically 30 days) unless you download it
  • Usage Analytics: Aggregated and anonymized data may be retained indefinitely
  • Deleted Accounts: Data is permanently deleted within 90 days of account deletion

Information Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information only in the following limited circumstances:

We may share your information when you explicitly give us permission to do so.

Service Providers

We may share data with trusted third-party service providers who assist us in:

  • Cloud hosting and infrastructure
  • Analytics and monitoring
  • Email delivery
  • Customer support tools

These providers are bound by confidentiality agreements and may only use your data to provide services to us.

We may disclose your information if required to:

  • Comply with legal obligations or lawful requests
  • Protect our rights, property, or safety
  • Protect the rights, property, or safety of our users or others
  • Investigate and prevent fraud, security, or technical issues

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to this privacy policy.

Open Source Community

As an open-source project, we may share:

  • Anonymized and aggregated usage statistics
  • Anonymized training data for model improvement (with appropriate safeguards)
  • Bug reports and technical issues (without personal information)

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

  • Request a copy of your personal data
  • Export your generated music and account information
  • Request information about how we process your data

Correction and Update

  • Update your account information
  • Correct inaccurate personal data
  • Modify your preferences and settings

Deletion

  • Request deletion of your account and associated data
  • Delete specific generated music files
  • Withdraw consent for data processing (where applicable)

Opt-Out

  • Unsubscribe from marketing emails
  • Disable non-essential cookies
  • Opt out of analytics tracking (where possible)

To exercise these rights, please contact us at heartmula.ai@gmail.com.

Children's Privacy

HeartMuLa is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete that information promptly.

International Data Transfers

HeartMuLa is an international service. Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

Our service may contain links to third-party websites or services (e.g., GitHub, Hugging Face). This privacy policy does not apply to those third-party services. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in:

  • Our practices and services
  • Legal or regulatory requirements
  • Technology and industry standards

We will notify you of significant changes by:

  • Posting a prominent notice on our website
  • Sending an email notification to registered users
  • Updating the "Effective Date" at the top of this policy

Your continued use of HeartMuLa after changes indicates your acceptance of the updated policy.

Open Source Transparency

As an open-source project, we are committed to transparency:

  • Our source code is publicly available on GitHub
  • You can review how data is processed by examining the code
  • Community members can contribute to privacy improvements
  • We welcome feedback and suggestions from our users

Data Processing for AI Training

Model Training

  • We may use generated music and prompts to improve our AI models
  • All training data is carefully reviewed and filtered
  • Personal identifying information is removed before training
  • Users can opt out of having their data used for training (contact us)

Research Use

  • Anonymized data may be used for academic research
  • Research findings may be published with aggregated, non-identifiable data
  • We encourage citation of our research paper (arXiv:2601.10547)

Contact Information

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

For privacy-related inquiries, please use the subject line "Privacy Policy Question" in your email.

Specific Regional Privacy Rights

European Economic Area (EEA) Users

If you are in the EEA, you have additional rights under GDPR:

  • Right to data portability
  • Right to restrict processing
  • Right to object to processing
  • Right to lodge a complaint with a supervisory authority

California Residents

If you are a California resident, you have rights under CCPA:

  • Right to know what personal information is collected
  • Right to know whether personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (Note: We do not sell personal information)
  • Right to deletion
  • Right to non-discrimination

Last Updated: January 18, 2026

By using HeartMuLa, you consent to this privacy policy and agree to its terms. We are committed to protecting your privacy while providing an innovative AI music generation service. Thank you for trusting us with your information and being part of the HeartMuLa community!