Privacy Policy

Introduction

Your story is yours. Your songs belong to you. aiponge is a musical memory system for your inner life, and the thoughts and songs you keep here are some of the most personal things you own. No ads. No data selling. No dark patterns. Your inner life should never become someone else's product.

Welcome to aiponge ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.

This Privacy Policy explains how aiponge collects, uses, stores, and shares information when you use our mobile application (the "App") and related services (collectively, the "Services").

By using aiponge, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

• Email address (for account creation and authentication)
• Name (first name, last name, display name)
• Password (encrypted and securely stored)

Profile Information:

• Personal development goals and preferences
• Reflection and music preferences
• Music preferences and listening history
• Onboarding questionnaire responses

User-Generated Content:

• Music playlists and favorites
• Reflections, affirmations, and songs you create
• Custom music tracks you generate
• Personal notes and reflections
• Images attached to book entries

1.2 Automatically Collected Information

Usage Data:

• App features you use and how often
• Time spent in the app
• Content generation requests (music, insights, affirmations)
• Error logs and crash reports

Device Information:

• Device type and operating system version
• Unique device identifiers
• App version and build number
• Network connection type

2. How We Use Your Information

2.1 Provide and Improve Services

• Create and manage your account
• Deliver personalized AI-generated content (music, insights, affirmations)
• Recommend content based on your preferences and reflection history
• Improve our AI models and content generation algorithms
• Develop new features and enhance existing ones

2.2 Communication

• Send you service-related notifications
• Respond to your support requests
• Provide updates about new features (if you opt-in)

2.3 Security and Compliance

• Detect and prevent fraud or abuse
• Ensure compliance with legal obligations
• Protect the security and integrity of our Services

3. How We Share Your Information

We do not sell your personal information to third parties.

We share your information only in the following limited circumstances:

3.1 Service Providers

We work with trusted third-party service providers who help us operate our Services. When you ask aiponge to generate content, we may send the journal entry text, prompts, titles, mood, genre, style tags, relevant journal passages, chat history, conversation summaries, lyrics, narration, and similar content needed to complete your request to the providers below.

We do not include your account identifiers in these provider requests. Provider requests use service credentials and template headers; your user ID remains internal to aiponge for service operation and attribution.

• AI Content Generation: OpenAI and, when enabled, Anthropic (for generating personalized reflections, affirmations, images, transcripts, and other AI-assisted content from the text and context you provide)
• Virtual Mentor Chat: OpenAI and, when enabled, Anthropic (for responding to messages using your chat history, conversation summaries, and relevant journal passages matched for context)
• Voice Generation: ElevenLabs (for generating spoken audio from lyrics, narration, and other text derived from your content)
• Music Generation: MusicAPI.ai (for AI-powered music creation using prompts, titles, mood, genre, and style tags derived from your content)
• Cloud Infrastructure: Amazon Web Services (AWS) for secure data storage
• In-App Purchases: RevenueCat for subscription management

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests.

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored securely in cloud infrastructure located in the United States.

4.2 How We Protect Your Data

• Password encryption using industry-standard bcrypt hashing
• HTTPS/TLS encryption for all data transmission
• AES-256-GCM encryption for sensitive content
• Secure API authentication with JWT tokens
• Regular security audits and updates

4.3 Backups and Account Deletion

Backup snapshots are retained for no more than 30 days. If we restore from a backup created before an account deletion request was completed, we re-apply deletion cleanup before restored data is used in production.

5. Your Privacy Rights

5.1 Access and Control

You have the right to:

• Access Your Data: View all personal information we have about you
• Modify Your Data: Update your profile information at any time
• Delete Your Data: Request deletion of your entire account and associated data
• Export Your Data: Request a copy of your data in a portable format

5.2 How to Exercise Your Rights

Use in-app controls in Profile settings, or contact us at privacy@aiponge.com.

6. Children's Privacy

aiponge is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights including the right to know, delete, and opt-out. We do not sell personal information.

8. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under GDPR including access, correction, deletion, data portability, and the right to withdraw consent.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through in-app notification or email.

10. Contact Us

If you have questions about this Privacy Policy:

• Email: privacy@aiponge.com
• Support: support@aiponge.com