Draft — pending legal review

This document is a non-binding draft provided for preview only. It has not been reviewed or approved by legal counsel and does not yet constitute the final, binding agreement. Content is subject to change before publication.

Privacy Policy

Last updated: [DATE — to be set on publication]

1. Who we are

Lavly is operated by Iguana Reklam ve Yazılım A.Ş. (“Lavly”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, and protect your personal data when you use the Lavly mobile application and website. If you have any questions, you can reach us at hello@lavly.app.

2. Data we collect

We collect the following categories of data:

  • Account identifiers. When you sign in we receive identifiers from your chosen authentication provider through Firebase Authentication, including Google Sign-In and Apple Sign-In. This typically includes your email address and a unique user identifier.
  • User-generated content. The prompts, lyrics, and descriptions you submit, and the songs and related media generated from them.
  • Usage data. How you interact with the app, such as features used, tracks played, and credits consumed.
  • Device and diagnostic data. Technical information such as device type, operating system version, app version, and crash or error diagnostics.

3. How we use your data

  • To provide, operate, and maintain the Lavly service.
  • To generate the music, lyrics, and media you request.
  • To manage your account, subscriptions, and credit balance.
  • To improve our features, performance, and user experience.
  • To detect, prevent, and address technical issues, fraud, or abuse.
  • To comply with our legal obligations.

4. Third-party processors

We rely on the third-party service providers below to operate Lavly. The list is indicative and must be verified before publication.

ProcessorPurpose
FirebaseAuthentication and account management
AdaptySubscription and in-app purchase management
Suno / ErweimaAI music generation
OpenRouterLyrics and text generation
WiroCover-image generation
Cloudflare R2Media storage and delivery
SentryCrash and error telemetry (personal data stripped)
RemotionVideo rendering

5. Data retention and account deletion

We retain your personal data for as long as your account is active or as needed to provide the service. You can delete your account at any time directly within the app; deleting your account removes your profile and associated personal data, subject to any retention we are legally required to maintain.

6. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, and to object to certain processing. To exercise these rights, contact us at hello@lavly.app.

7. Children

Lavly is not directed to children under the age required by your local law to consent to the processing of personal data. We do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, please contact us so we can remove it.

8. International data transfers

Some of our processors may store or process your data outside your country of residence. Where we transfer personal data internationally, we take steps intended to ensure an appropriate level of protection in line with applicable law.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you within the app.

10. Contact

For any questions about this Privacy Policy or our data practices, contact Iguana Reklam ve Yazılım A.Ş. at hello@lavly.app.