Privacy at a Glance
We only collect what's necessary for the service
Your data is encrypted and secure
We never share data with third parties without consent
1. Information We Collect
Account Information
- Name and email address
- Profile preferences and settings
- Family member profiles (names and ages)
- Payment information (processed securely by our payment processor)
Usage Information
- Songs listened to and playlists created
- Stories generated and customization preferences
- Achievement progress and activity logs
- Device information and IP address
Content You Create
- Custom stories and characters
- Playlists and favorites
- Profile customizations
2. How We Use Your Information
- To provide and improve our music streaming service
- To generate personalized stories and recommendations
- To track achievements and progress
- To process payments and manage subscriptions
- To communicate with you about your account and service updates
- To ensure content remains family-appropriate
- To prevent fraud and abuse
3. AI-Generated Content
Important Disclosure: All music on Psalmix is generated using artificial intelligence technology. We want to be transparent about how this works and what data is involved.
AI Music Generation Process
Our music is created using AI models, including OpenAI's API and other AI music generation services. The AI generates original music based on:
- Musical themes and genre preferences
- Lyrical concepts and topics
- Style and mood parameters
- Content safety and values-alignment guidelines
Data Sent to AI Services
We do NOT send any personal user data to AI services. Only song generation parameters are processed:
- What IS sent: Musical themes, genre specifications, lyrical concepts, style parameters
- What is NOT sent: Your name, email, listening history, personal information, or any data that identifies you
The AI services we use (including OpenAI) process only the creative parameters needed to generate music. They do not receive or store any information about individual users.
AI Service Providers
We use the following AI services for content generation:
- OpenAI API: For lyric generation, theme development, and content safety analysis
- Suno AI: For music production and audio generation
These services operate under their own privacy policies and terms of service. However, they only receive anonymized creative parameters from us, never your personal information.
4. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Service Providers: With trusted partners who help us operate our service (payment processing, cloud hosting)
- AI Content Generation: Anonymous song generation parameters (themes, genres, styles) are sent to OpenAI and Suno AI for music creation. No personal user data is shared with these services.
- Analytics Services: Usage analytics data (with your consent) is shared with Mixpanel and Google Analytics to improve our service. You can manage analytics consent through our consent settings.
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger or acquisition (with notice to users)
- With Your Consent: When you explicitly agree to share information
Third-Party AI Services: We want to be crystal clear: your personal information (name, email, listening history, etc.) is NEVER sent to AI services like OpenAI or Suno. Only anonymized creative parameters are processed to generate music content.
5. Children's Privacy & Age Requirements
We take children's privacy seriously and implement strict protections for young users in compliance with the Children's Online Privacy Protection Act (COPPA).
Age Requirement
Psalmix requires users to be at least 13 years old to create an individual account. Age verification is required during the signup process.
Children Under 13
Children under 13 may access Psalmix only through a parent-managed family account, where parents maintain control over the child's experience and data.
COPPA Compliance
In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13 without verifiable parental consent.
Discovery of Under-13 Data
If we discover that we have collected personal information from a child under 13 without proper parental consent, we will delete that information immediately.
Parental Rights
Parents can review, modify, or request deletion of their child's information at any time through their family account settings.
6. Data Security
We implement industry-standard security measures to protect your information:
- Encryption of data in transit and at rest
- Regular security audits and monitoring
- Limited access to personal information on a need-to-know basis
- Secure data centers with 24/7 monitoring
- Regular software updates and security patches
7. Your Privacy Rights
You have the right to:
- Access: Request a copy of your personal information
- Correct: Update or correct inaccurate information
- Delete: Request deletion of your personal information
- Portability: Export your data in a machine-readable format
- Opt-out: Unsubscribe from marketing communications
- Restrict: Limit how we use your information
Account Deletion
You can delete your Psalmix account at any time. Here's how:
- 1. Log in to your Psalmix account
- 2. Go to Settings → Account Settings
- 3. Click "Delete Account" at the bottom of the page
- 4. Confirm your decision
When you delete your account, all your personal information, playlists, preferences, and activity history will be permanently removed from our systems within 30 days. This action cannot be undone. If you have an active subscription, it will be cancelled immediately.
To exercise other privacy rights or for assistance with account deletion, contact us at privacy@wholesomebeats.com
8. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze how you use our service
- Provide personalized recommendations
Analytics and Your Consent
We use analytics services (Mixpanel and Google Analytics) to understand how users interact with Psalmix and improve our service. These analytics tools require your consent before activation.
When you first visit Psalmix, you'll see a consent modal where you can choose to:
- Accept all analytics and tracking
- Accept essential cookies only (required for the service to function)
- Customize your preferences
Consent is logged and stored for compliance audit purposes. We retain consent records for 7 years for legal compliance.
You can change your analytics consent preferences at any time through Settings → Privacy or through your account settings. Essential cookies (required for login and core functionality) cannot be disabled.
You can also manage cookie preferences in your browser settings.
9. International Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your privacy rights.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the updated policy on our website.
11. European Union Privacy Rights (GDPR)
Applicability: This section applies to users in the European Economic Area (EEA), United Kingdom, and Switzerland.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: Analytics and marketing communications
- Contract: Providing account services, subscription billing, music streaming
- Legitimate Interest: Security, fraud prevention, service improvement
Your GDPR Rights
- Right to Access: View all personal data we hold about you
- Right to Rectification: Correct inaccurate or incomplete information
- Right to Erasure: Request deletion of your data (30-day grace period applies)
- Right to Data Portability: Download your data in machine-readable JSON format
- Right to Restrict Processing: Limit how we use your data
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Change your consent preferences anytime in Settings → Privacy
- Right to Lodge Complaint: File a complaint with your local Data Protection Authority
How to Exercise Your Rights
Visit Settings → Privacy in your account or email privacy@wholesomebeats.com
Response Time
We will respond to your request within 30 days.
12. California Privacy Rights (CCPA/CPRA)
Applicability: This section applies to California residents under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
Categories of Personal Information Collected
- Identifiers: Name, email address
- Commercial Information: Subscription history, payment records
- Internet Activity: Listening history, playlists, app usage
- Device Information: IP address, browser type, device type
We Do NOT Sell Your Personal Information
Psalmix does not sell, rent, or trade your personal information to third parties for monetary consideration.
Your CCPA Rights
- Right to Know: What personal information is collected and how it's used
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Even though we don't sell data, you can opt-out of sharing
- Right to Non-Discrimination: No penalty for exercising your privacy rights
Do Not Sell My Personal Information
California residents can exercise their rights at Settings → Privacy or by emailing privacy@wholesomebeats.com
13. Data Retention
We retain your information only as long as necessary to provide our services and comply with legal obligations:
- Account data: Retained until account deletion, then permanently removed within 30 days
- Consent records: Retained for 7 years for legal compliance
- Payment records: Retained for 7 years for tax and legal requirements
- Analytics data: Retained for 13 months or until consent is withdrawn
- Listening history: Retained until account deletion
- Audit logs: Retained for 90 days
Deletion Process
When you request account deletion, your data enters a 30-day grace period during which you can cancel. After this period, all personal data is permanently deleted from our systems.
14. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Privacy Team
Email: privacy@wholesomebeats.com
Phone: 1-800-WHOLESOME
Address: 123 Family Music Lane, Harmony City, HC 12345