Who we are
MUZAI is operated by Visorya Yazılım ve Teknoloji A.Ş., Akademi Mah. Gürbulut Sk. Teknokent Sitesi No: 67, Selçuklu / Konya, Türkiye. We are the data controller for everything described here — under Turkish Law No. 6698 (KVKK) and, where it applies to you, the GDPR. Written for the website and for the iOS and Android apps alike; the differences between them are called out where they matter.
1. What we collect
Your account. On the web an account is required. In the apps you can start from a device identifier alone, without ever giving us an email address. If you do register, we hold your email, your password as a hash, an auto-generated username you can change, an optional profile image, your language, a support reference, an invite code and a notification token if you turn notifications on. Signing in with Google or Apple gives us the identifier and whatever name and email you let them share.
What you create with. The prompts, lyrics, style, mood and voice choices you enter, images you upload for artwork or a video, and the songs, covers and videos that come back — plus whether you marked each one public. Please keep personal details about yourself or other people out of prompts: they are sent to the AI providers in section 3.
Your voice, if you choose. The voice-tone feature records you so a voice can be built from it. It only runs if you start it and allow the microphone. We treat these recordings as sensitive, we never use them to identify you, and they are deleted on the schedule in section 5.
Payments and usage. Purchases, credit balance and a ledger of what each generation spent. Device model and OS, app version, IP address, an approximate country from that IP, access logs and error logs. We do not collect GPS location and the apps never ask for it.
2. How we use data
To generate your music and keep your library, to run your account and answer support, to take payment, to send the notifications you enabled, to keep the service secure and stop abuse, and to meet our legal obligations. The legal grounds are performance of our contract with you for everything the product does, our legitimate interest in security and in measuring our own marketing, your explicit consent for voice recordings and for app tracking, and legal obligation for financial records.
Analytics and app tracking. The mobile apps use Firebase Analytics to see which features are used and where generations fail. They also use AppsFlyer to work out which advertising campaign led to an install — that is measurement, and on iOS it only involves your advertising identifier if you allow it on the App Tracking Transparency prompt. Say no and attribution runs without it. So that we can tell whether the ads we run actually work, AppsFlyer reports that events such as an install or a purchase happened to the platform that showed the ad — today that is Meta only; your name, email address and phone number are not part of that report. We do not keep an advertising profile about you: we hold no user profile built for ad targeting, we do not sell your personal information, and we run no ad network inside MUZAI. Meta, which receives the event reports described above, does use them to decide who to show our ads to and to train its own advertising systems; what happens there is governed by Meta's own terms and is outside our control. We do not use your prompts or your music to train our own models.
3. Who we share it with
We name our processors rather than describing them vaguely, because your creative input genuinely leaves our servers to be turned into music.
Generation. kie.ai (which runs the Suno model) receives your prompt, lyrics and style choices to compose and sing. Google Gemini generates lyrics and text from your prompt. RunPod runs AI covers and video, so it receives the audio, voice and images those need.
Running the service. Cloudflare R2 stores and delivers finished media. Mailgun sends account email. Firebase handles push, analytics and bot protection. AppsFlyer handles install attribution. Meta receives install and in-app event signals through AppsFlyer so we can measure and improve the ads we run. RevenueCat verifies mobile subscriptions. Creem (Armitage Labs OÜ, Estonia) is our merchant of record and takes card payments on the website — your card number is entered on Creem’s systems and we never see or store it. Apple and Google handle sign-in and app-store purchases.
Each is used only for the job above and is bound by its own terms and privacy policy. Beyond these, we share data only when the law requires it. We do not use Crashlytics or Sentry, and we run no advertising network.
4. Where it is processed
Your account, your generation records and our database live on our own servers in Türkiye. That is where the primary processing happens.
The providers in section 3 are outside Türkiye, so using MUZAI necessarily involves an international transfer: your prompt goes abroad to be turned into music, and finished media is distributed worldwide over Cloudflare’s network so it plays quickly wherever you are. There is no version of the product where this does not happen — if you would rather your input did not leave Türkiye, MUZAI cannot generate music for you, and that is the honest trade. Starting a generation is you asking us to send it, and you consent to that transfer when you do.
5. How long we keep it
Account data and your creations: for as long as the account exists. Delete the account and they leave our active systems within 30 days, and our backups within 90.
Voice recordings: 14 days by default, or until you delete them — whichever comes first.
Support conversations: two years after the request is closed.
Payment and invoice records: ten years, because Article 82 of the Turkish Commercial Code requires it. This one we cannot shorten on request.
Analytics: 14 months. Server access logs: 12 months.
6. Your rights
You can ask what we hold about you, have it corrected or erased, have a copy sent to you, object to processing we base on legitimate interest, and withdraw a consent you gave — including for voice recordings and for app tracking, which you can turn off in your device settings at any time.
You can see and correct your account details in Settings, and delete your account there at any time; deleting it removes your account and your creations from our active systems on the schedule in section 5. Note that deleting your MUZAI account does not cancel a subscription billed by an app store — cancel that in the store that bills it.
For anything else write to support@muzaimusic.com from the address on your account, so we can tell it is you asking. We answer within 30 days. If you are not satisfied, you can complain to the Turkish Personal Data Protection Board (Kişisel Verileri Koruma Kurulu), or in the EEA and UK to your local supervisory authority.
7. Cookies & local storage
MUZAI sets no advertising or tracking cookies. What the site keeps in your browser is local storage: a device id, your sign-in token, a cached copy of your profile, your language choice and any generation still running — all of it so you stay signed in and don’t lose work on a refresh. Clearing site data in your browser erases every one of them and signs you out. Choosing to sign in with Google or Apple hands you to that provider, which sets cookies of its own under its own policy.
8. Children
MUZAI is not for children under 13, and we do not knowingly collect their data. In the EEA the age at which someone can consent on their own runs from 13 to 16 depending on the country; if you are under it, a parent or guardian has to agree on your behalf. If you believe a child has given us data, write to us and we will delete it.
9. Contact
The quickest route is Contact us in the More menu — it opens a support ticket and the reply comes back on that same screen. For privacy questions and data requests specifically, write to support@muzaimusic.com. Visorya Yazılım ve Teknoloji A.Ş., Akademi Mah. Gürbulut Sk. Teknokent Sitesi No: 67, Selçuklu / Konya, Türkiye. MERSİS 0925132165500001 · Meram V.D. 925 132 1655 · 0850 242 96 93.