Privacy Policy
Version 2.0 · effective 2026-10-08
Shenzhen Xin Wei Xin Technology Co., Ltd. (深圳心为心科技有限公司) (“we”, “us”, “our”) provides Melunox (the “Service”). This Privacy Policy explains what personal information we collect when you use the Service, how we use, store and share it, and the rights you have. Please read it before using the Service. We will tell you about material changes as described under “Changes to this Policy”.
1. Data controller
The controller of personal information processed through the Service is:
- Company: Shenzhen Xin Wei Xin Technology Co., Ltd. (深圳心为心科技有限公司)
- Registered address: Rm 315, No. 2-46 Minsheng Avenue, Shangcun Community, Gongming Subdistrict, Guangming District, Shenzhen, Guangdong 518107, China
- Unified Social Credit Code 91440300MA5HUYFJ9R
- Privacy email: privacy@melunox.com
- Data protection officer: not appointed
The Service is not offered in mainland China.
2. Information we collect
Information you give us:
- Account: email address, password (stored only as a salted hash), display name and how you sign in. If you sign in with Google, we receive your name, email address and profile picture as Google shares them.
- Content: prompts, lyrics, files you upload (audio, video, images, sheet music), settings, the songs, images and videos generated for you, and collaboration data.
- Payments: plan, amount, currency, status, order ID and billing country. Card details are entered on Waffo Pancake’s checkout and never reach us.
- Communications: emails, support requests, reports and appeals you send us.
Information collected automatically: device and network data (IP address, device type, operating system, browser, language, time zone); usage data (pages visited, features used, generation history and credit use); and logs (request times, errors, performance). Error reports from your browser are sent only if you allow analytics cookies.
Public works: when you make a song public, its title, lyrics, audio and cover can be seen by anyone, credited to your display name unless you choose to publish anonymously. The display name is read from your profile each time the page is shown, so renaming or deleting your account updates or removes it on every song.
3. How we use it, and our legal bases
- Providing and maintaining the Service, including generating what you ask for — performance of our contract with you.
- Billing, payments and credits — performance of contract.
- Customer support — performance of contract and our legitimate interests.
- Service notices (billing, security, policy changes) — legitimate interests.
- Content moderation, security and fraud prevention — legitimate interests and legal obligations.
- Understanding and improving the Service from aggregated data — legitimate interests.
- Complying with the law — legal obligation.
- Marketing emails, such as the app-launch notice you ask for — your consent.
We may aggregate or anonymise data for statistics; such data cannot identify you. We never use your content to train AI models, and we never sell your personal information.
6. Data security
- Encryption in transit (TLS/HTTPS) for all traffic.
- Passwords stored only as salted hashes.
- Least-privilege access controls; staff with access are bound by confidentiality.
- Vulnerabilities reported to security@melunox.com are investigated and fixed.
If a security incident affects your personal information, we will notify you and the relevant authorities within 72 hours of becoming aware of it, where the law requires. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Data retention
- Account information: while your account is active; deleted or anonymised within 90 days after you delete your account.
- Your content: until you delete it or your account; then deleted within 90 days.
- Transaction records: for the period required by applicable tax and accounting law.
- Support, report and appeal records: 3 years after the matter is closed.
- Moderation records: up to 3 years.
- Security and access logs: up to 12 months.
8. Your rights
Depending on where you live, you have the right to:
- be informed about what we collect and how we use it;
- access a copy of your personal information;
- correct inaccurate or incomplete data;
- have your data erased;
- restrict processing in certain cases;
- receive your data in a machine-readable format (portability);
- object to processing based on legitimate interests, or to marketing;
- withdraw consent where processing is based on consent.
Residents of the EEA and UK have these rights under the GDPR and UK GDPR; California residents have rights under the CCPA/CPRA, including to know, delete and correct, and to opt out of “sale” or “sharing” (we do neither).
You can do most of this in your account settings — edit your profile, or delete your account — or by emailing privacy@melunox.com. We respond within 30 days. You may also complain to your local data protection authority.
9. Marketing and opting out
We send marketing messages only with your consent — for example, the one email announcing our mobile apps if you ask for it. Every marketing email has an unsubscribe link, or you can email privacy@melunox.com. Service notices (billing, security, policy changes) are not marketing and continue while you have an account.
10. International transfers
Our servers are in the United States, our providers operate in several countries, and our team works from China. Your information may therefore be processed in, and accessed from, countries other than your own. Where the law requires, we protect such transfers with appropriate safeguards — such as the European Commission’s Standard Contractual Clauses and the UK Addendum — and transfer data only to recipients who protect it to an equivalent standard.
11. Children
The Service is for people aged 14 and over. Users under 18 need the consent of a parent or guardian, and purchases require being 18 or over. We do not knowingly collect personal information from children under 14. If you believe a child has given us information, contact privacy@melunox.com and we will delete it promptly.
12. Third-party links and services
The Service may link to or integrate with third-party services. This Policy covers only the information we collect; please read the privacy policies of third-party services before using them.
13. Changes to this Policy
For material changes we give at least 15 days’ notice by email or an announcement in the product, and update the date at the top. Continuing to use the Service after a change takes effect means you accept the updated Policy.
14. Contact
- Privacy: privacy@melunox.com
- Support: support@melunox.com
- Company: Shenzhen Xin Wei Xin Technology Co., Ltd. (深圳心为心科技有限公司)
- Mail: Rm 315, No. 2-46 Minsheng Avenue, Shangcun Community, Gongming Subdistrict, Guangming District, Shenzhen, Guangdong 518107, China
- Hours: Monday to Friday, 09:00–18:00 China Standard Time (UTC+8)