Meloriqo Privacy Policy
Effective date: 9 October 2026
Last updated: 9 October 2026
1. Introduction
1.1. This Privacy Policy describes how personal data is collected, used, disclosed and retained in connection with the Meloriqo mobile application and the related websites and services (together, the "Service"), and the rights available to you in respect of that data.
1.2. The controller of your personal data is Individual Entrepreneur Renat Shakirov, an individual entrepreneur registered in Georgia under identification number 305811501, with the registered address Ferdinand Tavadze Street 3, Building 5, Vake District, Tbilisi, Georgia ("we", "us", "our"). You may contact us about any matter relating to this Privacy Policy at shelbulab@gmail.com.
1.3. This Privacy Policy should be read together with our Terms of Use. Capitalised terms not defined in this Privacy Policy have the meaning given to them in the Terms of Use.
1.4. The Service is intended for persons aged 13 and over. Persons aged 13 to 17 may use the Service only with the consent of a parent or legal guardian, as described in section 10.
2. Personal data we collect
2.1. Data provided by you or by Apple. We collect the following categories of personal data when you create an account and use the Service:
| Category | Description |
|---|---|
| Account identifier | The unique, app-specific user identifier issued by Apple when you use Sign in with Apple. |
| Name | Your name, if you elect to share it through Sign in with Apple. |
| Email address | Your email address or an Apple private relay address, if you elect to share it through Sign in with Apple. |
| Age range | Whether you are aged 13 to 17 or 18 and over, obtained from Apple's Declared Age Range feature or from your answer to an in-app age question. Where you enter a year of birth, it is evaluated on your device; we receive and store only the resulting age range, and never your date or year of birth. |
| Parental consent record | For users aged 13 to 17, a record that a parent or guardian confirmed consent in the application, and the time of that confirmation. We do not collect the name or contact details of the parent or guardian. |
| Consent record | A record that you consented to the processing of your Input by third-party AI model providers, the version of the terms to which you consented, and the time of consent. |
| Sign in with Apple token | A token issued by Apple at sign-in, retained solely in order to revoke your Sign in with Apple authorization when you delete your account. |
| Input | The text you submit to the Service, including topics, prompts, lyrics you write or edit, and style descriptions. |
| Output | The lyrics, titles, pronunciation marks and audio generated for you. |
| Library activity | Actions you take in your library, such as liking, renaming or deleting a song. |
| Correspondence | The content of messages you send us, including reports about songs made through the Report function and support requests, together with the email address from which you write. |
2.2. Purchase data. Subscriptions and credit packs are sold through the Apple App Store. Apple provides us with transaction information, including the product purchased, the transaction identifier, the date of purchase, the subscription status, and renewal, cancellation and refund events. We do not receive or store payment card or bank account details. We also maintain a record of your credit balance and of the credits you have used.
2.3. Diagnostic and technical data.
(a) Application diagnostics. When the application crashes or becomes unresponsive, iOS prepares a diagnostic report through Apple's MetricKit framework, which the application transmits to us on its next launch. A report contains the location in the application's code at which the fault occurred, the versions of the application and of iOS, and the device model, and is associated with your account identifier so that the fault can be investigated. Diagnostic reports do not contain your Input, your Output, your location or any advertising identifier.
(b) Server data. Our servers process the technical data necessary to operate and secure the Service, including the IP address and time of each request, error reports and internal logs of requests made to AI model providers. Access logs, which record IP addresses, are used only to operate and secure the Service and are overwritten automatically as new entries are written. Error reports exclude request contents and IP addresses.
2.4. Websites. The websites on which this Privacy Policy, the Terms of Use and our support pages are published do not use cookies, analytics or tracking technologies, and our web server does not log visits.
2.5. Data we do not collect. We do not collect precise or approximate location data, do not access your contacts, photos, microphone or camera, do not use advertising identifiers, and do not incorporate third-party analytics or advertising software in the application.
2.6. Whether you must provide data. An Apple account is required in order to sign in, and your Input is required in order to generate songs; without them we cannot provide the Service. Providing your name and email address is optional.
3. Purposes and legal bases of processing
3.1. We process personal data for the purposes set out below. Where the EU General Data Protection Regulation or the UK General Data Protection Regulation applies, we rely on the legal bases indicated.
| Purpose | Categories of data | Legal basis |
|---|---|---|
| Creating and administering your account and providing the Service | Account identifier, name, email address, library activity | Performance of a contract (Art. 6(1)(b)) |
| Generating songs and storing them in your library | Input, Output | Performance of a contract (Art. 6(1)(b)) |
| Transmitting your Input to third-party AI model providers | Input | Consent (Art. 6(1)(a)), obtained in the application before your first generation |
| Processing purchases and administering credits | Purchase data, credit records | Performance of a contract (Art. 6(1)(b)) |
| Determining age range, recording parental consent and applying age-appropriate content filtering | Age range, parental consent record | Legal obligation (Art. 6(1)(c)) and our legitimate interest in protecting minors (Art. 6(1)(f)) |
| Preventing fraud, abuse and repeated claims of free credits | Server data, hashed identifier, correspondence | Our legitimate interest in the security and fair operation of the Service (Art. 6(1)(f)) |
| Diagnosing and correcting faults | Application diagnostics, error reports | Our legitimate interest in the reliability of the Service (Art. 6(1)(f)) |
| Reviewing reports and enforcing the Terms of Use | Correspondence, Input, Output, account status | Our legitimate interest in enforcing our terms (Art. 6(1)(f)) |
| Responding to enquiries and requests | Correspondence | Our legitimate interest in responding to you (Art. 6(1)(f)) and, where a request concerns your rights, legal obligation (Art. 6(1)(c)) |
| Retaining transaction records for tax and accounting purposes | Purchase data | Legal obligation (Art. 6(1)(c)) |
3.2. You may withdraw your consent to the processing of your Input by AI model providers at any time by deleting your account or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before it. Because the generation of songs depends on that processing, you will be unable to generate songs after withdrawing consent.
3.3. We do not use personal data for advertising, we do not sell personal data, and we do not create profiles of users for marketing purposes.
3.4. We do not make decisions that produce legal or similarly significant effects concerning you based solely on automated processing. Automated content filters may decline a generation request, and you may ask us to review any such refusal.
4. Processing by third-party AI model providers
4.1. The Service uses third-party providers of generative AI models, acting as our processors, to produce Output.
4.2. We transmit to those providers only your Input, for the purpose of generating lyrics, titles, pronunciation marks and audio. We do not transmit your name, email address or account identifier.
4.3. No Input is transmitted before you have given your consent in the application.
4.4. Under the terms on which we engage those providers:
(a) they may not use your Input or Output to train or improve their models;
(b) they may retain Input and Output for up to 55 days, solely in order to detect and prevent abuse of their services; and
(c) the audio they generate carries an imperceptible watermark identifying it as generated by AI.
4.5. You should not include special categories of personal data, such as information about health, or the personal data of other persons in your Input. The Service does not require such information.
4.6. A list of the processors we engage is available on request at shelbulab@gmail.com.
5. Disclosure of personal data
5.1. We disclose personal data only to the following recipients:
(a) third-party AI model providers, as described in section 4;
(b) hosting and infrastructure providers that operate our servers and store data on our behalf;
(c) the provider of our error monitoring service, which receives server error reports and application diagnostics;
(d) Apple, in connection with Sign in with Apple and App Store purchases, whose processing is governed by its own privacy policy;
(e) public authorities, courts and other parties, where disclosure is required by law or is necessary to establish, exercise or defend legal claims, or to protect the rights, property or safety of our users, the public or ourselves; and
(f) a successor to our business in the event of a merger, acquisition or transfer of assets, on terms consistent with this Privacy Policy.
5.2. Our processors act only on our documented instructions and are bound by obligations of confidentiality and security.
6. Retention
6.1. We retain personal data for the periods set out below.
| Data | Retention period |
|---|---|
| Account data, Input, Output and library activity | For as long as your account exists |
| Internal logs of requests to AI model providers | 90 days, after which they are deleted automatically |
| Input and Output held by AI model providers | Up to 55 days, for the purpose of abuse detection only |
| Application diagnostics and error reports | For as long as necessary to resolve the fault concerned |
| Server access logs (including IP addresses) | Overwritten automatically on rotation |
| Purchase and transaction records | For the period required by applicable tax, accounting and consumer protection law |
| Hashed identifier | After your account is deleted, a one-way hash of your Apple account identifier is retained in order to prevent repeated claims of free credits. It cannot be used to restore your account or your content. |
6.2. When you delete your account, your data is removed from our production database immediately. Deleted audio files may remain in storage versioning for up to 30 days, and database backups are overwritten within approximately 7 days.
7. Your choices
7.1. Account deletion. You may delete your account at any time in the application under Profile, Delete Account. Deletion removes your account, Input, Output and library activity in accordance with section 6, and revokes your Sign in with Apple authorization.
7.2. Sign in with Apple. You may stop using Sign in with Apple for the Service in your Apple Account settings. Doing so does not delete your data; account deletion should be used for that purpose.
7.3. Email address. You may decline to share your email address, or share an Apple private relay address instead.
7.4. Subscriptions. Subscriptions are managed in your Apple Account settings. Deleting your account does not cancel an active subscription.
8. Rights of individuals in the EEA, the United Kingdom and Georgia
8.1. Subject to the conditions and exceptions provided by applicable law, you have the right to:
(a) obtain confirmation as to whether we process your personal data, and access to that data;
(b) have inaccurate data rectified;
(c) have your data erased;
(d) restrict the processing of your data;
(e) object to processing based on our legitimate interests;
(f) receive the data you provided to us in a structured, commonly used and machine-readable format, and have it transmitted to another controller; and
(g) withdraw your consent at any time, where processing is based on consent.
8.2. To exercise these rights, please write to shelbulab@gmail.com. We may ask you to verify your identity, ordinarily by confirming the request from the email address or account concerned. We will respond within one month of receiving your request. Where a request is complex, or where we receive a number of requests, we may extend this period by up to two further months, in which case we will inform you of the extension.
8.3. You have the right to lodge a complaint with a supervisory authority, in particular in the country of your habitual residence or place of work, or of the place of the alleged infringement. In the United Kingdom, the supervisory authority is the Information Commissioner's Office. In Georgia, where we are established, it is the Personal Data Protection Service of Georgia, and our processing is also subject to the Law of Georgia on Personal Data Protection.
9. Rights of residents of the United States
9.1. If you reside in California or in another US state with a comprehensive consumer privacy law, you have, subject to applicable exceptions, the right to know the personal information we collect, use and disclose and to obtain a copy of it; to request its deletion; to request the correction of inaccurate personal information; and not to be discriminated against for exercising these rights.
9.2. In the preceding 12 months we have collected the following categories of personal information: identifiers (account identifier, email address and IP address); customer records (name); commercial information (purchase data); internet or other electronic network activity information (library activity and application diagnostics); and other information that you provide (Input) or that we generate for you (Output). The sources, purposes, recipients and retention periods of this information are described in sections 2 to 6.
9.3. We do not sell personal information and do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act, and we have not done so in the preceding 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.
9.4. We do not use or disclose sensitive personal information for purposes that would give rise to a right to limit its use under California law.
9.5. You may submit a request by writing to shelbulab@gmail.com or by deleting your account in the application. We will verify a request by confirming that it originates from the account concerned. You may designate an authorized agent to submit a request on your behalf, in which case we may require the agent to provide proof of your signed authorization and may require you to verify your identity directly with us.
9.6. If we decline your request, you may appeal by replying to our decision or by writing to shelbulab@gmail.com with "Privacy appeal" in the subject line. We will respond to an appeal within the period required by applicable law.
10. Children and teenagers
10.1. The Service is not directed to children under 13. The application prevents use by persons who indicate, or whose Apple age range indicates, that they are under 13. We do not knowingly collect personal data from children under 13, and if we become aware that we have done so, we will delete the account and the associated data without undue delay.
10.2. A user aged 13 to 17 may generate songs only after a parent or legal guardian has confirmed consent in an in-app confirmation step on the user's device. That consent extends to the use of the Service by the user, including the transmission of the user's Input to AI model providers as described in section 4. An age range that a parent has set through Apple Family Sharing is used only to determine the user's age and is not treated as consent.
10.3. In jurisdictions where the age of digital consent exceeds the user's age (in the European Union, between 13 and 16 depending on the Member State), we rely on the consent of the parent or guardian.
10.4. The accounts of users aged 13 to 17 are subject to stricter automated content filtering. We do not display advertising to any user and do not use the personal data of users aged 13 to 17 for profiling or marketing.
10.5. A parent or guardian may request access to, or the correction or deletion of, their child's data, or may withdraw consent, by writing to shelbulab@gmail.com. We may take reasonable steps to verify that the person making the request is the parent or guardian. Once consent has been withdrawn, the user will be unable to generate songs, and we will delete the account on request.
10.6. A California resident under the age of 18 may request the removal of content they have submitted to the Service by deleting it in the application, by deleting their account, or by writing to us. Removal may not extend to copies retained for the limited periods set out in section 6 or where retention is required by law.
10.7. If you believe that a child under 13 is using the Service, or that a user aged 13 to 17 is doing so without parental consent, please inform us at shelbulab@gmail.com.
11. Security
11.1. We maintain technical and organizational measures appropriate to the risk, including encryption in transit for all communications between the application and our servers, storage of session credentials in the iOS Keychain, restriction of access to production systems to authorized personnel, and the exclusion of request contents and IP addresses from error reports.
11.2. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We will notify you and the competent authorities of a personal data breach where the law requires us to do so.
12. International transfers
12.1. Our servers are located in Germany. We operate from Georgia, and some of our processors process data in the United States and in other countries whose laws may provide a different level of protection.
12.2. Where we transfer personal data from the EEA or the United Kingdom to a country that is not recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission (together with the UK International Data Transfer Addendum, where applicable) or, for recipients certified under it, the EU-US Data Privacy Framework. You may request further information about these safeguards by writing to shelbulab@gmail.com.
13. Changes to this Privacy Policy
13.1. We may amend this Privacy Policy from time to time. We will indicate the date of the latest revision at the top of this Privacy Policy and will notify you of material changes in the application.
13.2. Where a change materially alters the processing of your Input by AI model providers, we will seek your consent again before applying the change to you.
14. Contact
Individual Entrepreneur Renat Shakirov
Ferdinand Tavadze Street 3, Building 5, Vake District, Tbilisi, Georgia
shelbulab@gmail.com