Privacy policy

Who is responsible

The controller of your personal data is Shramish Kafle, Gutenbergstraße 5, 67227 Frankenthal (Pfalz), Germany (“Midhull”, “we”, “us”).

For anything about your data, write to privacy@midhull.com. We have not appointed a data protection officer, because the law does not require one for a business of our size; privacy@midhull.com reaches the person who is responsible.

What we collect, why, and on what legal basis

The legal bases below refer to the EU General Data Protection Regulation (GDPR). “Contract” means the data is needed to provide Midhull to you (art. 6(1)(b)); “legitimate interest” means we weighed our interest against yours (art. 6(1)(f)); “consent” means you agreed and can withdraw at any time (art. 6(1)(a)); “legal obligation” means the law requires it (art. 6(1)(c)).

• Account: your email address, the name you choose, the account identifier Apple or Google sends when you sign in with them, your birth year, language and settings. To create and run your account and to apply age rules. Contract.
• What you create: prompts, lyrics, hums, recordings, photos you add, and the songs, covers and lyric videos made from them, plus your profile, comments, likes, follows, votes and challenge entries. To make your songs and run the features you use. Contract.
• Dedications: the recipient’s name you enter, your note and any voice note, and whether the song was opened, played and reacted to, so we can tell you. Contract with you; for the recipient’s name and reactions, our legitimate interest in delivering the dedication you sent.
• Your sound (Pro): the songs you pick to train a small style model that only you can use. Contract.
• My Voice: covered in its own section below, because voice data is sensitive.
• Plan and purchases: your plan, trial and renewal dates, store transaction identifiers, songs left this month, coin balance and tips. To give you what you paid for. Contract, and legal obligation for records that tax and commercial law require us to keep. Apple or Google take the payment; we never see your card number.
• Creator earnings (18+): if you set up payouts, Stripe collects your identity and bank details. We receive your payout status, country and earnings. Contract and legal obligation.
• Shop orders: your name, shipping address, email, the item and its artwork. To print and deliver your order. Contract.
• Device checks: Apple App Attest and DeviceCheck, or Google Play Integrity, confirm that the app is genuine and whether a device has already made its free first song. They do not tell us who you are. Our legitimate interest in preventing abuse; reading this device information is strictly necessary for the service you ask for.
• Usage data: device type, operating system, app version, language and events such as “song kept” or “song shared”, linked to a random identifier. To fix problems and understand which features help people. In the EU, EEA, UK and Switzerland this rests on your consent: we ask once and send nothing until you allow it. Elsewhere it rests on legitimate interest. Everywhere you can change your choice in Privacy and safety, Share usage data.
• Listening data: when a song is played for more than 10 seconds, we store the play with the country and city worked out from your IP address at that moment, to show creators and listeners where songs are heard and to build city charts. We do not store the IP address with the play; for listeners who are not signed in, a one way scrambled form of it and the browser details is used only to count them once. Legitimate interest. After 24 months the play no longer points to you: only the song and the place remain.
• Notifications and email: your push token, sign in codes, receipts and messages about your account (contract), and offers or news only if you agreed (consent). You can turn marketing off in Settings or with the link in every email. Marketing is for people 16 or older.
• Safety: reports, blocks, moderation decisions and appeals, and the results of automatic checks. To keep Midhull safe and meet our duties under the EU Digital Services Act. Legitimate interest and legal obligation.
• Support: what you write to us and our answers. To help you. Contract or legitimate interest.
• Security logs: IP address, browser or app details and request times on our servers, to stop attacks, spam and fraud. Legitimate interest.
• App errors: when the app or the web player hits an error, the error message, a technical trace with links and email addresses removed, the app version, the platform and the screen. It carries no account or device identifier. To find and fix faults. Legitimate interest.
• midhull.com: the website sets no cookies and runs no analytics. If you join the waitlist, we keep your email address and language to tell you about launch (consent) and a daily changing, one way scrambled form of your IP address to limit sign ups (legitimate interest).
• to.midhull.com: the web player for shared songs uses only what is strictly needed for the page to work, such as your theme choice. It sets no advertising or tracking cookies.

You do not have to give us any of this, but without the data marked “contract” we cannot provide that part of Midhull.

AI and your content

Midhull uses AI models to write lyrics, make music, sing, match lyrics to the vocal and check songs for problems. We send these models only what they need to make your song: your prompt or lyrics, the language and style you chose and, when you use them, your hum, recording or photo.

Every song, cover and lyric video made with Midhull is AI generated. When you share a song, the people who hear it can see that it was made with Midhull, an AI music studio. Songs sung with My Voice also carry metadata that marks them as AI generated, an inaudible watermark and the label “Sung with My Voice (AI)”.

Before a song is made, we automatically check prompts and lyrics against our community guidelines, and we check recordings used for sampling against copyrighted music. These checks can stop a song from being made or a recording from being used. They have no legal effect on you beyond that, and you can always ask for a person on our team to review the decision.

AI can make similar music for different people, so a song may sound like another song made on Midhull or elsewhere.

My Voice: your voice data

My Voice lets an adult sing their own songs in their own voice. It is optional, only for people 18 and older, and it starts only after you agree on a separate consent screen and read a consent phrase out loud. Your voice data counts as biometric data, which the GDPR treats as special category data. We process it only on the basis of your explicit consent (art. 9(2)(a) and art. 6(1)(a) GDPR).

• What we collect: the recording of you reading the consent phrase and its transcript, the short samples you sing, the voice model trained from them, and a voice match score that checks that the samples come from the same person who read the phrase.
• What we use it for: only to sing songs you make, for you, and to check that the voice is yours. Nobody else can use your voice model, and we never use your voice data to train our general models or give it to anyone else.
• Where it is kept: in private storage, processed on the servers we rent to train and run the model.
• If the check fails: if the samples do not match the person who read the phrase, nothing is trained and the samples are deleted.
• Songs you share: a song sung with My Voice that you publish or send is labelled “Sung with My Voice (AI)” and carries an inaudible watermark.

Retention and destruction: we delete your consent recording, samples and voice model at the earliest of these moments: when you tap Delete my voice; when you delete your account; when the voice model has not been used for 12 months (we warn you in the app 30 days before); or when the purpose of collecting it is otherwise fulfilled, and in any case within 3 years of your last interaction with Midhull. We keep only a short text record that you consented (the date, the phrase you read, the version and language of the consent text and a scrambled form of your IP address, no audio) for as long as your account exists, so we can show that you agreed.

Withdrawing consent: you can withdraw at any time in the app under Your voice, Delete my voice, or by writing to privacy@midhull.com. This deletes your voice data as described above. Songs you already made stay as they are. Withdrawing does not affect the lawfulness of what happened before.

If you live in the United States: this section is our public retention and destruction schedule for biometric identifiers and information, including under the Illinois Biometric Information Privacy Act, Texas and Washington law. We collect voice data only after your written consent on the consent screen. We do not sell, lease, trade or otherwise profit from it, and we disclose it only to the service providers that store and process it for us or where the law requires it. We protect it with at least the care we use for our other confidential data.

If someone used your voice without permission, report it from the song (Report, Uses my voice without my consent), send a claim with the form for the person whose voice it is (https://api.midhull.com/v1/legal/voice-claim?lang=en), or write to copyright@midhull.com. A song sung with My Voice stays up after one report: we flag it for review and automatically run the speaker check again, comparing the owner's voice model with their consent recording and samples. We hide the song and pause the owner's My Voice only if that check fails, if three independent accounts report the song, or if the person whose voice it is confirms a named claim from their email. The owner is told and can appeal in one tap. A pause caused only by the number of reports ends after 72 hours if the check passes and no moderator has confirmed it; any other pause stays until a moderator decides. Reports from people whose reports are repeatedly found to be unfounded no longer count, and reports per account are limited per day. We keep a claimant's name, email and statement with the moderation record. A song not sung with My Voice also stays up after one report and is flagged: we hide it only if three independent accounts report it or the person whose voice it is confirms a named claim.

Microphone and photos

Midhull uses your microphone only while you record: a hum, a sung line, a voice note, a duet part or your voice samples. It uses photos only when you pick one for a song or a cover. You can turn either permission off in your phone’s settings at any time; the rest of the app keeps working.

Who we share it with

We do not sell your personal data. Midhull shows no ads today: an advertising component is built into the app, but it stays switched off, and we will update this policy before that ever changes. We share data only with the providers below. They act on our behalf under data processing agreements, except where this list says otherwise.

• Cloudflare, Inc. (USA): hosting, databases, file storage, security and sending email.
• Runpod, Inc. (USA): the computers that run our music, voice and speech models. We run these models ourselves; no other company receives your audio to make music.
• Anthropic, PBC (USA): lyrics, song planning and text checks. Anthropic does not use this data to train its models.
• Your permission for AI: before your first song the app names Anthropic and Runpod and asks your permission to send them your words, names, lines, hums and recordings to make songs. We record your answer, and you can withdraw it at any time in Privacy and safety, AI providers for songs; new songs then stop until you allow it again.
• RevenueCat, Inc. (USA): subscription and purchase records.
• PostHog, Inc.: usage analytics, stored in its EU region (Germany).
• 650 Industries, Inc. (Expo, USA): delivering push notifications, through Apple and Google. Expo receives your push token and the notification text under its own terms; we have no separate data processing agreement with it. We rely on our legitimate interest in delivering the notifications you turned on (art. 6(1)(f) GDPR).
• Apple and Google: sign in, in-app payments and device checks. They act on their own responsibility under their own privacy policies.
• Stripe (Stripe Payments Europe, Ltd., Ireland, and its affiliates): shop payments and creator payouts. For identity checks and payouts Stripe acts on its own responsibility.
• Printful, Inc. (USA) and its affiliates: printing and shipping shop orders. Transfers rely on the standard contractual clauses in Printful’s data processing terms.
• Other people on Midhull: what you choose to publish or send (see below).
• Authorities, courts and advisers: when the law requires it, to protect rights and safety, or to defend legal claims.

If we add a provider that receives personal data, we update this list before it does.

What other people can see

Songs you publish appear on your profile, in Discover, in charts and in challenges, with your name. Drafts stay private. You choose who can see your profile, comment on, remix or send you songs in Privacy and safety.

A dedication link is unlisted: anyone who has the link can open the song, your note and your voice note. Share it with the people you mean it for.

International transfers

Some providers above are based in the USA or process data outside the European Economic Area. Where the provider is certified under the EU-U.S. Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision for it (art. 45 GDPR). Otherwise we use the European Commission’s standard contractual clauses (art. 46(2)(c) GDPR) with additional safeguards where needed. You can ask privacy@midhull.com for a copy of the safeguards. For transfers from the UK we use the UK equivalents of these safeguards.

How long we keep it

• Account data and your content: while your account is open. Content you delete is removed at once from the app, its files from our storage within 24 hours, and from backups within 90 days.
• Voice models and Your sound models: deleted after 12 months without use, with a warning 30 days before, or earlier when you delete them.
• Purchase and payout records: 6 to 10 years, as German commercial and tax law requires.
• Moderation records: as long as needed to handle appeals, repeated abuse and legal claims, normally no longer than 12 months after the decision, and longer only for serious cases that we have to report.
• Security logs: normally up to 30 days, longer only when we investigate an incident.
• App errors: up to 30 days.
• Usage data: up to 24 months, then deleted or made anonymous.
• Waitlist: until we tell you about launch, or until you unsubscribe, and at most 12 months after launch.

Deleting your account

In the app, go to Settings and choose Delete account. Without the app, email privacy@midhull.com from the address on your account and ask us to delete it; we confirm the request and delete the account within 30 days.

Deleting your account removes your profile, your songs, covers and lyric videos, your recordings and hums, your voice data, your dedications and your settings. Songs you sent stop opening for the people who received them. We clear backups within 90 days. We keep only what the law asks us to keep, such as purchase records, for as long as it asks.

Deleting your account does not cancel a subscription bought through the App Store or Google Play. Cancel it there first.

Your rights

Under the GDPR you have the right to:

• access your data and get a copy (art. 15);
• have wrong data corrected (art. 16);
• have your data deleted (art. 17);
• restrict how we use it (art. 18);
• receive it in a common machine readable format, or have it sent to someone else (art. 20);
• object at any time, for reasons relating to your situation, to processing based on legitimate interest (art. 21), and to object to direct marketing at any time without giving a reason;
• withdraw any consent at any time, with effect for the future (art. 7(3)).

Much of this is in the app: Settings lets you download or delete your data and change your choices. For everything else, write to privacy@midhull.com and a person on our team answers within one month.

You can also complain to a data protection supervisory authority, in particular in the country where you live or work or where you think a breach happened. The authority responsible for us is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de.

If you live in the United States

In the last 12 months we collected the categories described above: identifiers, commercial information, internet activity, audio and other user content, inferences we draw only to run your account, and, for My Voice, biometric information. We collect them for the purposes described above. We do not sell personal information or share it for cross-context behavioural advertising, and we do not use sensitive personal information for anything other than providing the features you asked for.

Depending on your state, including under the California Consumer Privacy Act, you can ask to know, access, correct and delete your personal information, and to limit the use of sensitive personal information. Write to privacy@midhull.com; we verify the request by email and will not treat you differently for using your rights. An authorised agent can ask for you with your written permission. If we refuse, you can appeal by replying to our answer.

If you live in the UK, Japan or Korea

The rights above also apply under the UK GDPR, the Japanese Act on the Protection of Personal Information and the Korean Personal Information Protection Act. The recipients, countries, purposes and retention periods for transfers abroad are those listed in this policy. You can ask privacy@midhull.com to stop a transfer that is not needed to provide the service to you.

Age

You need to be at least 13 to use Midhull, or older where your local law requires it. People under 16 get an age-appropriate mode with a private profile by default. My Voice, payouts and fan clubs are only for people 18 and older. If you believe a child has given us data without permission, write to privacy@midhull.com and we will delete it.

Security

We encrypt data in transit and at rest, keep access to a small team, and store secrets in managed vaults. If a breach puts your rights at high risk, we tell you without undue delay.

Changes

When we change this policy we tell you in the app before the change takes effect, and we show the date of the latest version at the top. If a change needs your consent, we ask for it.