Last updated on 9 November 2026
Ailmind provides Midify’s desktop, mobile and web editors, ChatGPT integration and related cloud services. This policy covers those products; functionality and controls vary by version and platform. For privacy or support requests contact [email protected]. Our website privacy policy covers website enquiries and client projects.
You can choose not to use cloud or AI features. Information necessary for a requested feature is needed to provide it. Do not include passwords, payment details, sensitive personal information or confidential material you lack permission to share in prompts, song titles or feedback.
When you use an AI feature, the provider serving it receives the relevant request and context. Providers can include OpenAI, Google Gemini and Anthropic, depending on your app and settings. Using your own API key still sends data to that provider under its terms, billing and data settings. Local editing does not mean every AI feature runs locally.
The ChatGPT host processes your conversation under its own policies. Midify does not automatically receive your entire ChatGPT history. Invoking a Midify tool can send the selected content, tool arguments and account authorisation needed for that action to our servers. Saved cloud songs and their metadata are processed by Midify so you can reopen, edit, list and export them. These tool requests are separate from the native app’s optional analytics controls.
Read the relevant OpenAI, Google and Anthropic policies. Provider retention and improvement practices depend on the product, account settings and agreement; we do not promise that every provider follows the same rules.
Where available, Settings → Data Controls includes:
These controls apply to optional collection in versions that expose them. Service requests needed to provide AI, sign-in, cloud storage, purchases and security are separate. Higher sharing levels may include the lower diagnostic and usage levels; check the controls in your version. Turning off optional sharing affects future collection and does not automatically erase information already sent. You can request deletion by email.
The interaction-sharing capability is not merely a future proposal. Read the data-use explanation before opting in. We do not treat ordinary use of the app as permission to train our own models on your private content.
We do not sell your personal information or use private music and conversation content for targeted advertising. We disclose information as needed to operate the features you use, provide support, address security and comply with law:
Provider access is limited to the purpose of the feature, with appropriate contractual or other protections. Information may also be disclosed to advisers, where legally required, or where lawfully necessary to investigate misuse or protect rights. A business transfer involving personal information would require appropriate protections and any legally required notice.
Device and browser storage can hold preferences, credentials, editing state and history. Sign-in features use session cookies or equivalent tokens. Clearing local storage or uninstalling may remove local work but does not necessarily delete cloud records or cancel billing.
Cloud content remains available subject to the service’s limits and your actions. Deleting or replacing a song removes it from the active library; cleanup, short recovery windows, operation records and backups mean every copy may not disappear immediately. Keep exported copies of important music. We retain account, technical, support and purchase records only as needed for their purpose and applicable security, legal, accounting or dispute obligations. We do not promise a universal 30-day deletion period for all prompts or records.
Contact us to request deletion of account data, music or previously shared interactions. Include the account or approximate session/date details needed to locate the records, without sending passwords or API keys. We may need to verify your identity. Pseudonymous records may be difficult to locate without the relevant identifier. We explain any records we must retain; independent providers may require separate requests.
We take reasonable steps to protect information using access controls, appropriate service configuration and limited access. No storage or transmission method guarantees complete security. We address incidents and provide legally required breach notifications.
We operate from New Zealand and use international providers. Information may be processed outside your country, including in the United States, Europe and other provider locations. An EU-region configuration does not mean all information stays in Europe. We use safeguards required by applicable law for overseas disclosure, including contractual protections where appropriate.
Email [email protected] to request access, correction or deletion, raise a complaint, or withdraw consent to optional processing. You can also change available Data Controls, disconnect an integration through its host, delete songs and export your work. Disconnecting stops future authorised access but does not itself erase existing records.
We respond within applicable legal time limits, explain lawful exceptions and verify identity where needed. If we decline a correction, you may request that a statement of correction be attached. Depending on applicable law, you may also have rights to portability, restriction or objection. Withdrawal does not undo processing already lawfully performed. You may complain to the New Zealand Privacy Commissioner or another competent local regulator.
Midify is not intended for children under 13. Users under 18 need parent or guardian permission and must meet the host platform’s age requirements. Contact us if a child has supplied personal information that should be removed.
We update this notice when practices change and show the revision date above. We provide additional notice or obtain consent where required for materially different processing.
