Privacy Policy

Last updated: July 2026

1. Who We Are

Heart to Melody, operating at hearttomelody.com, is responsible for the processing of your personal data as described in this policy.

Privacy contact: privacy@hearttomelody.com

2. Personal Data We Collect

We collect the following categories of personal data:

  • Identification data: Name, email address, and profile image (provided through your Google account or when you sign up with email).
  • Guest data: You can create a song without an account. In that case we store a device identifier and, if you choose to be notified, the contact email you provide. If you later create an account with the same email, your guest songs are linked to it.
  • User content — stories: The stories, names, memories, and personal details you write for song generation. These often include information about other people (the song's recipient); see Section 5.
  • User content — photos: If you use video features, the photos you upload to appear in the video. Photos may depict you or third parties, including children; see Section 5.
  • Usage data: How you interact with the Service (pages visited, genres selected, songs generated, device and browser information, approximate location derived from IP for currency/market selection).
  • Payment data: Processed directly by our payment processors (such as Stripe and PayPal). Heart to Melody does NOT store credit or debit card numbers or sensitive financial data. We keep transaction records (amount, date, product, last purchase state) for accounting and support.

We do not collect sensitive personal data (health data, ethnic origin, religious beliefs, sexual orientation, biometric identifiers, or genetic data). If we ever offer features that process voice recordings, we will update this policy and ask for your explicit consent first.

3. How We Use Your Data

Primary purposes (necessary for the service):

  • Creating and managing your account or guest session.
  • Generating personalized songs, lyrics, cover art, and videos from the content you provide.
  • Processing payments and managing your purchases.
  • Sending transactional emails (song ready, purchase receipts).
  • Providing support and responding to your requests.
  • Preventing fraud and abuse of the Service.

Secondary purposes (optional):

  • Sending promotional emails and product updates.
  • Measuring advertising campaigns (see Sections 6 and 7).
  • Improving our services and user experience.

You can opt out of promotional email at any time using the unsubscribe link in our emails or by writing to privacy@hearttomelody.com.

4. Use of Artificial Intelligence

  • Lyric generation: The stories and context you provide are sent to third-party AI text-generation providers to write your song's lyrics.
  • Music generation: The generated lyrics and your selected style are sent to third-party AI audio-generation providers to produce the song.
  • Video generation: If you purchase a video, your photos and the song are processed by our rendering infrastructure to produce it.

The content you share is used to create your song and video — not to build advertising profiles. Heart to Melody may change or replace AI providers without prior notice, provided the functionality of the Service is maintained.

5. Information About Other People (Including Children)

The Service is built for gifting: stories and photos usually describe or depict someone other than you, sometimes a child (for example, a song for your daughter's birthday).

  • By submitting information or images of another person, you confirm you have the right — and, where that person is a minor, the parental or guardian authority or permission — to share it for the purpose of creating the song or video.
  • We use that information solely to generate the requested content and never to contact, profile, or advertise to the person described.
  • The person described in a song (or their parent/guardian) may request deletion of content about them by writing to privacy@hearttomelody.com.

6. Sharing Your Data

To provide the Service, your personal data is shared with service providers in these categories:

  • Authentication and identity: Account and session management.
  • Payment processing: Certified payment platforms (Stripe, PayPal) that handle transactions.
  • Cloud infrastructure and hosting: Application hosting, databases, and file storage for your songs, covers, and videos.
  • Artificial intelligence: Text- and audio-generation providers (they receive the story content needed to create your song).
  • Email delivery: Providers that send our transactional and (if you opted in) promotional emails.
  • Analytics and error monitoring: Product analytics and crash-reporting tools that help us understand usage and fix problems.
  • Advertising platforms: If you arrive through or interact with our ads, we and our advertising partners (such as Meta and TikTok) may exchange identifiers and event data (for example, that a purchase happened) to measure and improve campaigns. Under some state laws this measurement activity is considered "sharing" of personal information for cross-context behavioral advertising — you can opt out; see Section 8.

We do not sell your personal information for money. All providers are bound by their own privacy commitments, and we may change or add providers without prior notice, provided an adequate level of data protection is maintained. Our providers process data in the United States.

7. Cookies and Tracking Technologies

  • Strictly necessary: Session cookies from our authentication provider, and local storage that saves your song-creation progress on your device.
  • Analytics: Product analytics that measure how the Service is used (page views, funnel steps).
  • Advertising pixels: When active, Meta and TikTok pixels measure ad performance and conversions and may set their own cookies.

Your choice: the cookie banner lets you pick "Accept all" or "Necessary only". Choosing "Necessary only" disables advertising pixels and analytics on your device. You can change your choice at any time in Section 8 below.

Global Privacy Control (GPC) and Do Not Track: We treat an enabled GPC browser signal as an opt-out of advertising pixels — when your browser sends it, our ad pixels do not load. We do not currently respond to legacy "Do Not Track" headers beyond this.

8. Your Privacy Rights (US State Laws)

Depending on your state (including California, Colorado, Connecticut, Texas, and Virginia), you may have the right to:

  • Know / access the personal information we have about you, including the categories collected, the sources, the purposes, and the categories of third parties it is disclosed to.
  • Delete your personal information (see also our Data Deletion page).
  • Correct inaccurate personal information.
  • Opt out of the "sharing" of personal information for cross-context behavioral advertising. You can do this by (a) choosing "Necessary only" below or in the cookie banner, (b) enabling Global Privacy Control in your browser (honored automatically), or (c) emailing privacy@hearttomelody.com with the subject "Do Not Sell or Share".
  • Receive a portable copy of your data.

How to exercise these rights

Email privacy@hearttomelody.com from the address associated with your account, describing the right you want to exercise. To protect your data we will verify your identity (normally by confirming control of that email address). You may use an authorized agent; we will ask for proof of authorization. We respond within 45 days (extendable once by 45 more days where the law allows, in which case we will tell you). If we deny a request, you may appeal by replying to our decision, and we will answer the appeal within the timeframe your state requires. We will never discriminate against you for exercising your privacy rights.

Categories disclosed (last 12 months)

Identifiers, customer records (transactions), internet activity, approximate geolocation, and user content — collected from you directly and from your device, used for the purposes in Section 3, and disclosed to the provider categories in Section 6. The only category "shared" for cross-context behavioral advertising is identifiers/internet activity with advertising platforms. We do not use or disclose sensitive personal information, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.

9. Security Measures

  • Encrypted communications via HTTPS/TLS.
  • Secure authentication through specialized providers (OAuth and email verification).
  • Payment processing following PCI-DSS standards through certified processors.
  • Access to personal data restricted to authorized personnel only.

10. Data Retention

  • Account data: Kept while your account is active. You can request deletion at any time.
  • Songs, covers, and videos: Kept in your account until you delete them or request account deletion.
  • Stories and photos: Kept associated with the generated content. You can request their deletion.
  • Guest sessions: Kept so your songs remain accessible from your device; deleted on request.
  • Payment records: Retained as required by tax and accounting obligations.

11. Children

The Service is intended for users 18 or older, and we do not knowingly allow children under 13 to use it or collect personal data from them. Information about children that an adult includes in a story or photo is processed only as described in Section 5. If you believe a child has used the Service directly, contact us and we will delete the associated data.

12. Changes to This Policy

Heart to Melody may modify this Privacy Policy at any time. Changes will be posted on this page with the updated date, and material changes will be highlighted or notified by email. We recommend reviewing this policy periodically.

13. Contact

For questions, comments, or requests related to this Privacy Policy or your personal data: