Privacy Notice

1. Introduction

This Privacy Notice (“Notice”) describes how ONCREATE LTD (“Company,” “we,” or “us”) collects, uses, and processes your personal data when you access the mobile application (“Application”) Muza for iOS.

By using the Platform, you acknowledge and agree to the practices described in this Notice. If you do not agree to this Notice, you must discontinue using the Platform.

This Notice applies to all personal data collected through your use of the Platform, whether collected directly from you, through automated means, or from third parties authorized to share your information with us.

2. Important Information and Who We Are

Purpose of this Privacy Notice

This Privacy Notice aims to provide you with information on how Muza collects, processes, and protects your personal data. It explains the types of data we collect, how we use it, your rights concerning your data, and how you can contact us if you have any questions or concerns.

Controller

3. The Data We Collect About You

We collect various types of personal data through our mobile application. The information we collect depends on how you interact with the Platform and the permissions you grant us.

Personal Data You Provide Directly:

•      Identity Data: Name, email address.

•      Device Tokens: Device token, account token, push notification token.

•      Support Tickets Data: Data you provide when contacting our support team or submitting a support ticket.

•      Subscription Data: Information related to your subscriptions, including status, type, and duration.

Automatically Collected Data:

•      Device Information: Device ID, operating system, device type, model, language, and other related technical data.

•      Analytics Data: Anonymous data collected through third-party analytics services (such as Firebase, Appsflyer, Crashlytics, Apple Analytics, Google Analytics).

•      Advertising Identifiers: Provided by your device if you have granted permission (e.g., Apple IDFA).

•      Push Notification Token: Used for sending personalized notifications and updates.

•      IP Addresses: Collected for technical, security, and analytics purposes.

•      Web Request Headers: Collected to ensure the proper functioning of the Platform.

•      Favorites and Preferences: Information related to your saved favorites, personalized settings, and anonymized usage preferences.

•      Content Viewing History: Anonymized data about content you have viewed or saved on the Platform.

Data Collected Through Third-Party Services:

We use several analytics and tracking tools to improve our services, understand user interactions, and optimize our content. These include:

•      Firebase: User engagement tracking, analytics, crash reporting data.

•      Appsflyer: Mobile attribution and marketing analytics data.

•      Crashlytics: Application performance monitoring and crash reporting data.

•      Apple Analytics: Application performance and user engagement analytics data.

•      Google Analytics: Application analytics for visitor interaction analysis data.

•      Meta Pixel: Application analytics for visitor interaction analysis data.

We also receive Payment Data from Apple as our payment processor: transaction ID, payment method, but not full credit card details, which are handled by Apple.

We would like to draw your attention to the fact that we never collect the following types of data:

•      Passwords: We do not collect or store your passwords. Authentication and login are handled through secure third-party systems.

•      Search History: We do not store explicit search histories linked to individual Users. Data is anonymized and used for analytics purposes only.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: where it is necessary to perform the contract we are about to enter into or have entered into with you; where you have provided your consent; where it is necessary for our legitimate interests; and where we need to comply with a legal obligation.

Purposes for Which We Will Use Your Personal Data:

•      To register you as a new User.

•      To provide and manage our Services and Platform.

•      To process your purchases, subscriptions, and transactions.

•      To provide customer support and resolve issues.

•      To personalize your user experience.

•      To provide targeted advertising and promotions.

•      To collect feedback and conduct research.

•      To improve our Platform, products, services, and marketing strategies.

•      To comply with legal and regulatory obligations.

•      To detect, prevent, and respond to fraud, abuse, or security issues.

5. Disclosures of Your Personal Data

We do not sell or trade your personal data. However, we may share your personal data with third parties for the purposes described in this Notice.

Sharing with Service Providers:

We use trusted third-party service providers, including Firebase, Appsflyer, Crashlytics, Apple Analytics, Google Analytics, and Facebook, to process your personal data on our behalf for the purposes described above.

Sharing for Legal Reasons:

We may disclose your personal data if required to do so by law or in response to valid requests by public authorities, to enforce our user agreement, or to protect the rights, property, or safety of Muza, its Users, or others.

Third-Party Links:

Our Platform may contain links to third-party websites, plugins, and applications. We do not control these third-party websites and are not responsible for their privacy statements.

6. International Transfers

Your personal data may be transferred to, and processed in, countries other than the country in which you are resident, including countries outside the European Economic Area (EEA) or the United States. Where we transfer your personal data to a third party in a country not subject to an adequacy decision, we implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure your personal data remains protected.

7. Data Security

We are committed to ensuring the security of your personal data and use appropriate technical and organizational measures to protect it from unauthorized access, alteration, disclosure, or destruction, including:

•      Encryption: SSL/TLS during transmission between your device and our servers.

•      Access Control: Only authorized personnel who need to know personal data are given access.

•      Data Minimization: We limit collection to what is necessary for the purposes described herein.

•      Regular Security Assessments: Periodic security reviews and tests.

•      Anonymization & Pseudonymization: Where possible.

•      Backup & Recovery: Data backups and disaster recovery plans.

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for legal, accounting, or reporting requirements.

•      Account Information (Name, Email, Device Tokens): Retained as long as your account remains active; up to 5 years after deletion for legal or business purposes.

•      Advertising Identifiers, Analytics Data: Retained for up to 2 years; aggregated data may be retained indefinitely.

•      Support Tickets: Retained for 5 years.

•      Subscription and Payment Data: Retained for the subscription period and up to 7 years thereafter for tax and legal obligations.

•      IP Addresses and Web Request Headers: Retained for up to 1 year.

9. Accessing and Correcting Your Personal Data

You have the right to access, update, and delete your personal data at any time. Depending on your jurisdiction, you may have rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.

You can exercise your rights by contacting us at: [email protected]. We will respond to your request within one month of receiving it. To protect your privacy, we may need to verify your identity before processing your request.

10. Withdrawing Your Consent

If you have provided consent for the processing of your personal data, you have the right to withdraw it at any time by contacting us at [email protected]. Withdrawing your consent will not affect the legality of processing conducted prior to withdrawal, and may result in limited functionality of certain features.

11. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to collect information about your activity. For details on the types of cookies we use and how to manage them, please see our Cookie Policy at https://appmuza.com/info/cookie-policy.

12. Changes to This Privacy Notice

We keep our Privacy Notice under regular review. You are encouraged to review this Notice periodically. If there are material changes that affect your data privacy rights, we will notify you by displaying information on the Application and, if necessary, ask for your consent.