Privacy Policy

Updated: 8 September 2026

Hummivo is operated by Tong Xu. Contact us about privacy or support at dami.ai@outlook.com.

What this policy covers

Hummivo turns written ideas into AI-generated songs and keeps their records in your personal library. Generated audio and artwork have a limited availability period, described below. This policy describes the app and the server that provides accounts, creation and playback. Your library is not a public community feed.

Information we use

• Account and sign-in: an Apple account identifier specific to the app, an internal account ID and your display name. We process Apple's identity token and authorization code to verify sign-in. We do not save an Apple email address in your account profile, although Apple's token can contain email-related information.
• Session security: the app keeps session credentials in the device Keychain. The server stores hashed app refresh tokens and session-security records. An Apple authorization token is stored encrypted so we can revoke authorization when you delete your account.
• Creation and playback: submitted ideas, language, titles, lyrics, musical style, generated audio and artwork, lyric timing, and task identifiers and status. These support your drafts, generation requests, library and playback.
• Purchases: Apple transaction and product identifiers, account association, purchase or renewal dates, refund status, and generation-credit records. Apple handles payment details; Hummivo does not receive your payment-card number.
• Support: in-app feedback and the email address, messages or attachments you choose to send us.
• Device preferences and operations: local drafts, language and AI-consent choices; technical task records, error categories and purchase-notification records used to operate and protect the service. Servers and network infrastructure receive IP addresses and connection information when handling requests.

The current app does not use advertising SDKs or cross-app advertising tracking. It does not provide voice cloning or a raw-voice upload feature. When you use system dictation on Apple Watch, Hummivo receives the text you submit; Apple's system handles dictation separately.

Dictating an idea

On iPhone and iPad, the app requests microphone and speech-recognition permission only after you tap dictation in the idea editor. This control uses supported on-device recognition only. It does not save a recording or upload audio to Hummivo or the AI creation servers. If the device cannot recognize the selected language locally, the app suggests typing or using system keyboard dictation, which Apple handles separately.

Recognized text appears in your idea draft, where you can edit or clear it. Recording stops when you tap stop, leave the editor or send the app to the background; each recording lasts at most 60 seconds. The text is submitted under the AI-provider rules below only when you separately consent to AI creation and choose to generate. Declining voice permissions does not prevent typing.

Local song-completion reminders

On iPhone and iPad, the app asks for notification permission when you first choose to generate a song, not at sign-in. Permission is optional: declining does not prevent song generation. You can open the system notification settings from Settings → Help & Feedback.

The app uses ordinary authenticated library updates to detect when a tracked generation finishes. The decision to show a reminder and the records used to avoid duplicates are handled on your device, separately for each account and service environment. Local records include pending and completed generation IDs and whether notification permission has been requested. A reminder contains a generic completion message and internal account, generation, song and environment identifiers used to validate navigation; it does not include the song title, lyrics or audio. This feature does not register for remote push notifications or send a device token to Hummivo.

One generation is announced at most once, including when it produces two versions. Initial loading of historical completed songs does not send reminders. The app cannot check generation progress while fully closed; checks resume when you reopen it, so there is no promise of a real-time reminder after quitting. Tapping a reminder requires the matching signed-in account and a fresh library check before opening your creations.

Signing out clears pending and displayed reminders, while local duplicate-prevention records remain for that account. Deleting the account through this device clears its local reminder records for the current service environment.

AI providers and your choice

Cloud AI features require sending information to external providers:

• AI text generation service: generating an inspiration sends the requested language and a random variation value, not the existing text in your editor. Generating a title and lyrics sends your full submitted idea and requested language.
• AI music generation service: generating music sends the chosen title, lyrics, musical style and generation settings. Task identifiers are used to retrieve audio, artwork and lyric timing.

We do not add your Apple identifier, display name or purchase history to these AI prompts. Information you include in your own text is nevertheless part of the content sent for processing.

Before your first AI submission on a device, the app asks for explicit consent. If you decline, that request is not sent. To withdraw on iPhone or iPad, open Settings → Help & Feedback → AI Data Sharing. On Apple Watch, open Me → AI Data Sharing. Withdrawal stops new AI requests from that device and preserves local drafts. Already-transmitted requests cannot be recalled this way and may still finish. Other devices have separate consent settings; using AI again requires consent.

Providers process inputs and results through their own systems and applicable service arrangements. We cannot promise that every provider excludes content from retention, human review or model training, or that processing stays in your country. Please do not submit confidential material or sensitive information about yourself or others. Contact us for questions about provider processing or a deletion request; deleting a Hummivo account does not itself verify deletion of every upstream copy.

Access and security

After a verified successful purchase or renewal in the live App Store environment, Hummivo sends a minimal operational email to the operator through QQ Mail. The email contains the product ID, Apple transaction ID and purchase/verification times, not your name, Apple account identifier, lyrics, payment-card details or signed receipt. The email service processes these operational messages. Sandbox tests do not produce purchase-alert emails.

Apple processes sign-in and App Store transactions. AI providers receive the information described above. Hummivo's hosting infrastructure stores the application database, including song information, lyrics, provider media links and expiry times. New audio and artwork are served from the provider's media infrastructure instead of being copied to Hummivo's server. Previously self-hosted files may remain until separately removed. The support mailbox service processes email you send. Service administration may require access to investigate a support request, maintain security or handle legal obligations.

Account authorization protects library access. Playback starts with a time-limited signed link and may redirect your device to the provider's media URL. The media provider receives the connection information needed to serve audio or artwork, such as your IP address. Anyone you give an accessible media URL to may be able to use it; Hummivo's short-lived signature does not revoke a provider URL already obtained. Do not share private links unintentionally. The app uses HTTPS and device Keychain, but the server and generation providers must be able to process generation content. This is not end-to-end encryption, and no system is guaranteed completely secure.

Retention and account deletion

Temporary playback cache: To make switching tracks faster, the app may fetch a small number of neighboring songs in advance and keep bounded temporary audio files on your device. These requests go to the media service, not to a new Hummivo audio-storage service. The cache is separate from audio you explicitly save, is cleared when you sign out or the playback session is reset, and does not extend the displayed media expiry or provide permanent offline storage. Save audio you want to keep before its expiry.

Temporary media: Our AI music generation provider states that generated media are retained for 14 days. Hummivo records a fixed expiry for new provider-hosted songs and does not renew it when you open or play a song. Save audio you want to keep to your own device before the displayed expiry. Provider availability can end earlier because of failures or removal; Hummivo does not keep a recovery copy of new media. Song information and lyrics can remain in your library after audio and artwork expire. The media period does not set an expiry for already-granted generation credits. The provider separately describes retaining generation logs for two months; media expiry is not proof that every input, log or upstream copy has been erased.

Account and library data are stored while your account is active to provide the service. On iPhone or iPad, open Settings → Delete Account to request deletion. The service first revokes the stored Apple authorization, then disables account access and new tasks and removes the account's active database content and privately stored media. Some accounts need fresh Apple sign-in before authorization can be revoked. Cleanup may wait for work already in progress; a pending-deletion message is not confirmation that cleanup has finished.

Limited purchase and anti-abuse records remain after their link to the live profile is removed. These can include transaction and original-transaction IDs, the previous account ID used for purchases, product, purchase environment, relevant dates, credit or refund state, and notification records. This prevents duplicate purchase grants and reattaching a deleted account's purchases to another account. These records are not necessarily anonymous.

Technical security records, support correspondence and recovery backups may also outlast account deletion. There is currently no single automatic expiry period covering all of these records and backups. Removing an active account does not guarantee immediate erasure of every historical copy. Contact us about the information retained for your account or a deletion request.

Signing out or uninstalling the app does not delete the server account. Deleting your Hummivo account does not cancel an Apple subscription. Manage renewal separately in your Apple account; see Apple's cancellation instructions.

Contact and requests

You can edit your display name in the app. For access, correction, a copy of your information, deletion follow-up, consent questions or other privacy requests, email dami.ai@outlook.com. We may need to verify your connection to the account. Do not send passwords, authorization codes, session tokens or full payment details. Applicable privacy rights depend on your circumstances and law; this policy does not limit those rights.

The date above identifies this version of the policy.