Last updated: 10/7/2026
MIDI Lab AI ("us", "we", or "our") operates the MIDI Lab AI website (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.
We are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
We collect several different types of information for various purposes to provide and improve our Service to you.
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:
When you use the social features of our Service, we collect and store additional data:
When you participate in a Jam Session (Infinite Jam), we collect and store:
If you have accepted the current Terms, we collect a record of how you perform in the app — controller and on-screen knob (MIDI Control Change) gestures over time, note timing and velocity, synthesizer patch settings, and generation context (prompt, genre, directive) — together with your outcome for each take (kept, saved, or discarded). We use this to train your own personal AI model (your "twin"), which stays private to your account by default and personalizes what MIDI Lab AI generates for you. We also use this data to train and improve our AI models generally, to evaluate model quality, and to develop new features. We do not sell this data. You can request its deletion at any time; deletion removes it from future training sets (models already trained, including your twin, are not retroactively altered).
You may optionally choose to contribute aggregated statistics from your twin (for example filter cutoff, envelope, or LFO behavior) to a shared crowd model that helps generations start off smarter for every user. This is separate from accepting the Terms, is not required to use the Service, and is off unless you turn it on — we ask with a separate, unticked checkbox, and you can change your answer at any time under Data Sharing in your account settings. We only ever contribute aggregate statistics (such as averages) combined across a minimum number of contributing users — never your individual recordings, raw performances, or account identity. Turning it off stops future contributions immediately; aggregates already published are not retroactively removed.
We may also collect information about how the Service is accessed and used ("Usage Data"). This Usage Data may include information such as:
We use browser localStorage to remember your preferences, such as:
This data is stored locally in your browser and is not transmitted to our servers except as part of normal Service functionality. You can clear this data at any time through your browser settings.
We process your personal data based on the following legal grounds:
MIDI Lab AI uses the collected data for various purposes:
We use third-party services to operate our Service. These services have their own privacy policies:
We use Google Firebase for authentication, database storage, and cloud functions. Firebase processes your authentication data and stores your account information. Google's privacy policy applies: https://policies.google.com/privacy
We use Stripe for payment processing. Stripe handles all payment information securely and in compliance with PCI DSS standards. We do not store credit card details on our servers. Stripe's privacy policy applies: https://stripe.com/privacy
We use Google's Gemini AI API to generate MIDI content. Your prompts and generated content may be processed by Google's AI services. If you choose to have a reference track analysed in detail ("Listen closer"), a short excerpt of that audio — up to 60 seconds — is sent to Google's Gemini AI to be described in words. We do not store the audio, it is not used to train any model, and no transcription of the music is produced or kept. Audio is only sent when you explicitly request this analysis; the standard tempo, key and structure analysis runs entirely in your browser and no audio leaves your device. Google's privacy policy applies: https://policies.google.com/privacy
Prompt Processing: To protect intellectual property rights and ensure style compliance, we automatically process all user prompts before sending them to the AI service. Artist names referenced in prompts are not sent directly to the AI. Instead, they are converted to generic style and mood descriptors (e.g., "dark cinematic trap" or "energetic synths") that capture the musical characteristics without referencing specific artists.
We use Google Analytics to understand how visitors interact with our Service. This service uses cookies and similar technologies to collect information about your use of the Service. We also use Google AdSense to display advertisements. Both services are subject to Google's privacy policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, and you can manage your AdSense preferences through Google's Ad Settings.
Our Service is hosted on Vercel, which may collect certain technical information such as IP addresses, request headers, and access logs. Vercel's privacy policy applies: https://vercel.com/legal/privacy-policy
We ensure that all third-party service providers we use are contractually obligated to protect your personal data and use it only for the purposes we specify. We regularly review our third-party service providers to ensure they maintain appropriate security and privacy standards.
We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device.
We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted or expired). We use cookies for the following purposes:
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer.
We also use web beacons, pixel tags, and similar technologies to track user behavior and measure the effectiveness of our Service and marketing campaigns. These technologies may be used in conjunction with cookies to provide a more comprehensive understanding of how our Service is used.
If you have provided your email address, we may send you marketing communications about our Service, including updates, new features, special offers, and promotional content. You can opt out of receiving these communications at any time by:
Please note that even if you opt out of marketing communications, we may still send you important service-related messages, such as account notifications, security alerts, payment confirmations, and updates to our Terms of Service or Privacy Policy.
If you choose to enable SMS notifications, we collect your mobile phone number solely for the purpose of delivering account and activity notifications you have requested. Your phone number is never shared with third parties for marketing purposes and is not displayed publicly.
SMS notifications require a verified MIDI Lab AI account. Opt-in occurs within your authenticated account dashboard. You must enter your mobile number, check an explicit consent checkbox, and complete phone number verification via one-time code before any SMS is sent. Consent is not a condition of purchase.
SMS messages are delivered via Twilio, Inc., a third-party communications provider. Your phone number is transmitted to Twilio solely for message delivery. Twilio's privacy policy applies: https://www.twilio.com/en-us/legal/privacy
You may opt out at any time by replying STOP to any SMS from MIDI Lab AI, or by disabling SMS notifications in your account preferences at /notification-settings. After opting out, you will receive a single confirmation message and no further SMS will be sent. Reply HELP for assistance.
Your mobile phone number is retained for as long as SMS notifications are enabled on your account. If you opt out or delete your account, your phone number is removed from our active SMS records within 30 days.
We do not sell, trade, or rent your personal data to third parties. However, we may share your information in the following circumstances:
We do not share your personal data with third parties for their own marketing purposes without your explicit consent.
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Certain data you provide is visible to all visitors of our Service, regardless of whether they have an account. This includes:
Your credit balance, private tracks, collection, direct messages, and notification history are private and are never displayed publicly or to other users.
You can remove public visibility of tracks and presets at any time by toggling the share setting off. You can update or remove your profile photo, bio, and display name at any time from your profile settings.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.
Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.
If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to the United States and process it there. We use third-party services (Firebase, Stripe, Google) that may process data in various locations worldwide.
By using our Service, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
If you are located in the European Economic Area (EEA) or other jurisdictions with similar data protection laws, you have certain rights regarding your personal data:
You have the right to request copies of your personal data. You can access much of your data through your account settings. For additional data, please contact us.
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete. You can update most information through your account settings.
You have the right to request that we erase your personal data, under certain conditions. To request deletion of your account and data, please contact us at midilabai@gmail.com. Note that we may be required to retain certain data for legal or accounting purposes.
You have the right to request that we restrict the processing of your personal data, under certain conditions.
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions. We can provide your data in a machine-readable format (JSON).
You have the right to object to our processing of your personal data, under certain conditions.
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us at midilabai@gmail.com. We will respond to your request within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
To exercise your California privacy rights, please contact us at midilabai@gmail.com. We will verify your identity before processing your request and respond within 45 days.
In the event of a data breach that compromises your personal data, we will:
We will make notifications without undue delay and in accordance with applicable legal requirements, which may vary by jurisdiction. In some cases, we may be required to notify authorities within 72 hours of discovering a breach.
As a global service, your personal data may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.
When we transfer your personal data to countries outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place. These safeguards include:
By using our Service, you consent to the transfer of your personal data to these countries. If you have concerns about international data transfers, please contact us to discuss alternative arrangements.
Our Service is not intended for children under the age of 13 (or 16 in the European Union). We do not knowingly collect personally identifiable information from children under 13 (or 16 in the EU). If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13 (or 16 in the EU) without verification of parental consent, we will take steps to remove that information from our servers.
We may use automated processing, including profiling, to provide personalized content recommendations, improve our Service, and analyze user behavior. This may include:
If you are located in the EEA, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, this right does not apply if the decision is necessary for entering into or performing a contract with you, is authorized by law, or is based on your explicit consent.
If you have concerns about automated decision-making, you may contact us to request human review of any automated decision that significantly affects you.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:
MIDI Lab AI
Email: midilabai@gmail.com
We will respond to your inquiry within 30 days.