Privacy & Cookie Policy
Effective: 2026-07-02 · MvMusics, Inc.
MvMusics, Inc. (“we”) operates ZMusic and is the data controller for personal data processed through the Service. This policy also covers our use of cookies (§6) and your choices (§7).
1. What we collect
Account data (email, display name, auth identifiers incl. a Google ID if you use Google sign-in, password hash — never plaintext, subscription status); usage data (plays, qualified-stream events, saved mixes, preferences, streaks); technical data (device/browser, approximate location from IP for locale/territory, IP hashed where used for security/rate-limiting); payment data (handled by Stripe; we don’t store full card numbers); advertising data (identifiers and interaction signals used to deliver/measure ads on the free tier).
2. How we use it
To provide and secure the Service; authenticate you; deliver streaming and wellness features; process subscriptions and payments; attribute royalties by territory; measure and improve; deliver advertising on the free tier (including personalized ads subject to your choices); comply with law; and prevent fraud/abuse.
3. Legal bases (GDPR/UK GDPR)
Contract (providing the Service/subscriptions); legitimate interests (security, fraud prevention, basic analytics, non-personalized ads); legal obligations; and consent where required (personalized advertising and non-essential cookies), withdrawable anytime.
4. Sharing
With processors acting for us: Stripe (payments), Google (sign-in, if used), Cloudflare (delivery/security/DNS), hosting/storage providers, and advertising/measurement partners for the free tier. With rights-holders/distributors only aggregated/territory-level royalty data — not your identity. To comply with law or protect rights/safety. Sharing data with ad partners for personalized ads may count as “sale”/“sharing” under California law — see §7.
5. Advertising & targeting
The free tier is ad-supported; ads may be personalized using approximate location, device signals, listening context, and ad identifiers, and may involve profiling to select relevant ads. Personalized ads and non-essential advertising cookies are used only with your consent where required, and you can opt out anytime (§6–§7). Premium subscribers see no advertising. We do not use your wellness/listening history to infer sensitive health conditions for ad targeting.
7. Your rights & choices
Subject to your location, you may access, correct, delete, port, restrict, or object, and withdraw consent — under GDPR/UK GDPR, CCPA/CPRA (incl. Do Not Sell or Share and opt-out of targeted ads), Vietnam PDPD/PDPL, and Brazil LGPD. EU/EEA/UK users may complain to their supervisory authority.
- Cookie & ad settings: open to accept or decline analytics and advertising cookies anytime.
- Opt out of targeted advertising / “sale” or “sharing”: use cookie settings above, or enable GPC in your browser — we honor it globally where feasible.
- Access, delete, correct, or export data: email [email protected] from your account email, or use in-app account controls; we may verify identity first, and will not discriminate for exercising rights.
8. Retention, transfers & security
We keep account data while your account is active and as needed to provide the Service, then delete or anonymize it unless longer retention is legally required. We may process data in the US and elsewhere, relying on Standard Contractual Clauses / the Data Privacy Framework where required. We use encryption in transit, hashed credentials, access controls, and rate-limiting; no method is 100% secure and you use the Service at your own risk.
9. Children
Not directed to children under the applicable minimum age (Terms §3); we don’t knowingly collect their data. Contact [email protected] with concerns.
10. Changes & contact
Updates posted here with a new effective date; material changes notified. Data controller: MvMusics, Inc. — [email protected]. The English version of this policy is authoritative; translations are convenience-only.