Miya Privacy Policy

Effective Date: August 12, 2026 · Last Updated: August 12, 2026

This Privacy Policy (“Policy”) explains how TIMEDOMAIN, INC. and our corporate affiliates (“we”, “our”, or “us”) process Personal Data of individuals who use our services, including the Miya desktop application, our websites (e.g., https://miya.fm), and other online services (jointly, the “Services”). This Policy also explains your rights and choices about how we use your Personal Data, including how you can access or update certain information about you.

In this Policy, “Personal Data” means any information relating to an identified or identifiable individual, such as an individual’s name, address, telephone number, or email address.

This Policy does not apply when we offer our Services and process Personal Data on behalf of enterprise/business customers. Our use of that data is governed by our customer agreements.

1. Categories of Personal Data We Collect

(a) Personal Data You Provide to Us

• Contact details. When you set up an account to use our Services, we ask you to provide your contact details such as your email address.
• Profile information, such as your username and password, unique user ID, and your photograph.
• Prompts and submitted content. The text prompts and other material you submit to generate songs and videos may include Personal Data (for example, if you describe events involving yourself or others). We process it to provide the generation service, and we may also use it to research, develop and improve our AI models. If you choose to publish a generated song, the song and the prompt text you chose to publish with it become visible to other users of the Service — see “Data Recipients” below. If we intend to use your Personal Data for other purposes, we will provide specific notice at the time the Personal Data is collected.
• Feedback and correspondence, such as information you provide when you report a problem with the Service, receive customer support, or otherwise correspond with us.
• Payment details. When you register for any paid Services, our third-party payment processor Stripe collects and processes your payment-related information, such as your name, email, billing address, and credit/debit card or other financial information. Please consult Stripe’s privacy policy at https://stripe.com/privacy.

(b) Personal Data We Collect Automatically

• Location information. When you use our Services, we infer your general location information, for example by using your internet protocol (IP) address.
• Device information. We receive Personal Data about the device and software you use to access our Services, including IP address, web browser type, operating system version, and device identifiers.
• Usage information. We receive Personal Data about your interactions with our Services, such as information about how you use the Service, information associated with any content you submit, application crash data, and information you provide when you use any interactive features.
• Cookies and similar technologies. We and our third-party partners collect information using cookies, pixel tags, or similar technologies. We may use both session cookies and persistent cookies. Strictly necessary cookies make our Services available to you (e.g., login functionality); analytics cookies (including Google Analytics — see Google’s practices) help us operate, maintain, and improve our Services; marketing cookies help us and our advertisers show you relevant advertising.

(c) Personal Data We Collect from Third Parties

Third-party logins. If you choose to register or log in to our Services using your account with third parties (e.g., Google), we receive Personal Data about you from such third parties, such as your name, email address, username, and profile picture.

In some cases, we need to collect your Personal Data to provide you with our Services. If you choose not to provide the requested Personal Data, you may not be able to use our Services. We will tell you if providing the Personal Data is required by law or under a contract and what the consequences of failing to provide it are.

2. Purposes and Legal Basis for Processing

Depending on the country in which you are located, we will only process your Personal Data based on a valid legal ground. We process Personal Data for the following purposes:

• Providing the Services described in the Terms of Use (performance of a contract) — including generating songs and videos from the prompts you submit.
• Personalising your experience, including suggesting content and features which could be of interest to you (legitimate interest).
• Communicating with you — updates, requested information, comments and questions, customer support (performance of a contract).
• Billing and accounting, including keeping records of payments (performance of a contract).
• Preventing fraud and protecting against malicious, deceptive, fraudulent, or illegal activity (legitimate interest).
• Safety — safeguarding our platform and services (legitimate interest).
• Providing technical support, including diagnosing and resolving issues you report (performance of a contract).
• Understanding usage — trends and preferences, improving and repairing errors, developing new products, services, features, and functionalities (legitimate interest).
• Aggregated data generation — anonymised or aggregate data we may use for any lawful purposes such as publishing reports (legitimate interest).
• Administrative and legal — addressing intellectual property infringement, defamation, or privacy issues, enforcing our Terms of Use, and establishing, exercising or defending our legal rights (legitimate interest).
• Compliance with legal obligations, for instance accounting and tax rules, or as mandated by a court order, judicial process or governmental agency (legal obligation).
• Research and development of AI models — we research, develop and improve our AI models (legitimate interest). Processing is limited to the purposes listed above; if we intend to use your Personal Data for other purposes, we will provide specific notice at the time the Personal Data is collected.

We only rely on our or a third party’s legitimate interests to process your Personal Data when these interests are not overridden by your rights and interests. When we are using your information because we or a third party have a legitimate interest to do so, you may have the right to object to that use.

3. Data Recipients

Your Personal Data may be shared with:

• Affiliates. Current or future affiliates, for any of the purposes described in this Policy.
• Vendors and service providers who provide services such as website hosting, data analysis, advertising, information technology and related infrastructure, customer service, email delivery, auditing, and payments processing.
• Other users, if you instruct us to do so. If you choose to publish content you have generated, it may appear on public surfaces of the Service — including the live comment wall, where it scrolls for other users present at the time, and showcase or discovery pages we may add later. What becomes visible is the generated song or video and the prompt text you chose to publish with it, together with the profile name and photograph on your account; your email address and payment details are never published. You can remove published content at any time, after which we stop displaying it, though copies already saved or shared by other users may persist outside our control.
• As required by law. Law enforcement agencies, regulatory bodies, or public authorities, if we believe doing so is required or appropriate to comply with legal process or to protect your, our, or others’ rights, property, or safety.
• Merger, sale, or other asset transfers. Service providers, advisors, potential transactional partners, or other third parties in connection with a corporate transaction.
• Consent. We may also disclose your information with your permission.

4. Data Transfers

Our Services are hosted in the United States. If you choose to use our Services from a different jurisdiction, you are transferring your Personal Data outside of your jurisdiction and into the U.S. for storage and processing. The data protection laws in your jurisdiction may be different from the laws applicable in the U.S.

If you are located in the European Economic Area, the United Kingdom or Switzerland (“Europe”), we transfer your Personal Data outside of Europe to other countries, including to the U.S. We apply appropriate protections when we transfer your Personal Data to such countries, including transfers to countries found to provide adequate protection, contractual protections, or transfers to recipients participating in the EU-U.S. Data Privacy Framework. For more information, contact us using the details in the “Contact Us” section below.

5. Data Retention

We take measures to delete your Personal Data or keep it in a form that does not permit identifying you when this information is no longer necessary for the purposes for which we process it, unless we are required or permitted by law to keep it for a longer period. When determining the specific retention period, we consider various factors, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and any relevant statute of limitations.

6. Your Rights

Depending on where you are located or reside, you may have certain rights regarding the Personal Data we maintain about you. You may access and update many categories of Personal Data by logging in to your account and accessing your account settings, or by contacting us. You may request to close your account and delete your Personal Data associated with that account by contacting us.

Depending on where you are located, you may additionally have the right to: request access to and receive information about the Personal Data we maintain about you; update and correct inaccuracies; restrict or object to processing; have the information anonymised or deleted; exercise data portability; and lodge a complaint with a supervisory authority. You may withdraw any consent you previously provided at any time — we will apply your preferences going forward.

Your Cookie Choices

Depending on your country, you may be asked to provide consent for our use of cookies (except strictly necessary ones). Many web browsers allow you to manage your cookie preferences, including refusing or deleting cookies; blocking all cookies may impair the use of our Services. To opt out of Google Analytics, you can download the opt-out browser add-on. Some of our advertising partners are members of the Network Advertising Initiative or the Digital Advertising Alliance; you can visit their opt-out pages to learn about opting out of personalised ads.

7. Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy practices of these third parties. This Policy does not apply to your activities on those services; we encourage you to read their privacy policies before providing any information to them.

8. Security

We implement reasonable security measures to secure and protect your Personal Data. As no electronic transmission or storage of information can be entirely secure, we can make no guarantees as to the security or privacy of your information, to the extent permitted by applicable law.

9. Children’s Privacy

We do not knowingly collect, maintain, or use Personal Data from children under 18 years of age, and our Services are not directed to children. If you believe that we may have collected any such Personal Data on our Service, please notify us at hello@miya.fm.

10. Updates to this Policy

We may periodically update this Policy. If there are significant changes, we will notify you in advance or as required by law.

11. Contact Us

For any questions regarding this Policy or to exercise your rights, please contact our Data Protection Officer at hello@miya.fm.