Skip to main content

Privacy Policy

Last Updated: 2026-10-21

1. Information We Collect

Account Information: Including your email address, nickname (if provided), password (stored only as a salted hash), and, if you sign in with Google, the name, email address, profile picture, and language setting that Google shares with us.

Usage Data: Including the projects, articles, mind maps, and materials you create or upload (such as images, documents, saved web links, and voice recordings with their transcripts), chat records, inspiration notes, long-term memory entries, subscription information, StarPower usage records, etc.

Technical Information: Including your IP address, browser type, device information, access time, the pages you visit and the page you came from, data collected through cookies and similar technologies, and—if you use the desktop app—performance and error diagnostics linked to your account.

2. How We Collect Information

  • Provided by You: Information you provide when registering an account, creating content, using features
  • Automatically Collected: Technical information collected through cookies, log files, and similar technologies
  • Third-Party Sources: Basic profile information obtained through OAuth login (such as Google), and payment and subscription status from our payment processor (Stripe)

3. How We Use Information

  • Provide and Improve Services: Process your requests, provide AI features, manage subscriptions and accounts
  • Product Optimization: Analyze usage patterns to improve features and user experience. The Muses team may review your conversations with the AI assistant to improve Muses. You can turn off “Allow conversation review” in your Profile at any time; once it is off, we no longer review your conversations for this purpose, but we may still review the relevant conversations to provide the service, respond to your requests, or detect and address content that is illegal or violates our Terms of Service. We do not use your content or conversations to train AI models
  • Communication: Send verification codes, service notifications, subscription updates (we won't send marketing emails unless you explicitly consent)
  • Security Protection: Detect and prevent fraud, abuse, and security threats

4. Information Sharing

Service Providers: We share information with third-party service providers only as needed to operate Muses, including providers of hosting and cloud infrastructure, databases and caching, file storage, AI models and model APIs, web search and page reading for AI features, email delivery, payment processing, website analytics, and content delivery. We send each provider only the information needed for the function it performs for us; how they handle that information is also governed by their own terms and privacy policies.

Legal Requirements: We may disclose your information when required by law or to protect our rights, property, or safety or those of others.

Business Transfers: If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of the assets.

5. Data Security

We take reasonable technical and organizational measures to protect your personal information, including storing passwords only as salted hashes, HTTPS transmission, access control, regular security audits, etc. However, no method of Internet transmission or electronic storage is 100% secure.

6. Data Retention

When you delete a cloud project, the project and its associated content are hidden from normal use and retained in online storage for 30 days so you can contact support to request recovery after an accidental deletion. Once the 30-day period expires, the project and data belonging exclusively to it enter scheduled permanent cleanup and can no longer be restored through support. Voice recordings and AI tool results remain subject to their own retention periods; restoring a project does not restore data already removed under those periods. The same 30-day recovery window applies to individually deleted cloud articles, materials, inspirations and chat conversations, including cloud chat histories for desktop local projects. Restoring a project does not reset a separately deleted item’s deadline. Desktop local files remain governed by the system recycle bin. Restoring any content does not extend retention periods for voice recordings or temporary AI tool results. We retain your personal information only for as long as necessary to achieve the purposes described in this privacy policy. Some data has a fixed retention period: voice recording files are deleted from storage 7 days after upload, and the results produced by AI tools during a conversation are deleted after 30 days. If you ask us to delete your account, we will delete or anonymize your personal information unless we are required by law to retain certain information. To prevent accidental data loss, we regularly make encrypted backups of our database. We use these backups only to restore data in the event of a failure; they are kept for no more than 12 months and are then deleted automatically. As a result, information may remain in our backups for up to 12 months after it is permanently deleted from online storage. This includes content you delete, data deleted when it reaches one of the retention periods above, and information deleted or anonymized when your account is deleted.

7. Cookies and Tracking Technologies

We use cookies and similar technologies (such as your browser's local storage) to maintain sessions, remember preference settings, carry information from our public site into the app when you sign up, and collect usage statistics.

Necessary cookies (for sign-in sessions and security); a preference cookie that remembers your language; temporary cookies, kept from a few minutes up to 7 days, that carry a tool you started, an invitation code, or your sign-up source from our public site into the app; and, on our app site (app.muses.my), analytics cookies: our own visitor ID cookie (kept for one year) and cookies set by Google Analytics and Microsoft Clarity. Our public site (muses.my) itself sets only the language cookie. You can manage cookies through your browser settings, but disabling necessary cookies will prevent you from signing in.

8. Third-Party Services

  • OAuth Login: Google (for third-party login)
  • AI Model Providers: To power AI features, the content you submit in conversations and AI features (messages, attachments, and the articles, materials, and memories the assistant reads to complete a request) is sent to third-party AI model providers and API service providers, which process it to generate responses. Which provider handles a request depends on the model and feature you use.
  • Payment Processing: Stripe (processes subscription payments on its hosted checkout page and customer portal; Stripe receives your email address, name, the billing details you enter such as billing address or tax ID, and your Muses account ID; your card details go directly to Stripe and never reach our servers)
  • Analytics Services: on our app site (app.muses.my), third-party analytics tools (see “Cookies and Tracking Technologies”) and our own visit statistics (the pages you visit, the page you came from, IP address, browser information, and a random visitor ID; linked to your account when you are signed in); on our public site (muses.my), the analytics described under “Growth and Acquisition Analytics”

9. Growth and Acquisition Analytics

To understand how our content performs and which channels bring people to Muses, we collect anonymous usage signals on our public site (muses.my), and we store a single first-source record with your account when you complete registration.

  • What we collect: the page path and page language on the public site, the domain name of the external site you came from, any UTM parameters carried in the link, and anonymous events for content reading depth and clicks on sign-up/sign-in buttons. When you complete registration, we store once with your account the first public-site page and language you arrived on, the referring domain and UTM parameters, and the page and button position that led you to sign up. Once written, that record is not overwritten by later visits.
  • What we do not collect: this public-site analytics does not use cookies, does not create a visitor ID, a session ID, or any identifier that could link separate events back to the same person, and does not store the full referring URL — we keep only the domain name, not its path, query string, or fragment. These anonymous events contain no account information, and we do not store your IP address in the event record.
  • Abuse prevention: for security and abuse-prevention purposes (such as preventing inflated traffic and forged requests), we temporarily process visitors' IP addresses for rate limiting. We do not store them in the clear, and we do not use them for analytics.
  • Purpose: to evaluate content quality and the effectiveness of acquisition channels, and to improve public-site pages and product entry points. The figures are aggregated within each data source and viewed side by side; we do not use them to reconstruct an individual visitor's journey.
  • Retention: anonymous public-site events are deleted 180 days after the server receives them. The first-source record stored with your account is kept for as long as your account exists, is handled together with your account when it is deleted or anonymized, and is included in any copy of your data you request from us.
  • Processors: public-site page views and traffic sources are provided by Cloudflare Web Analytics, a separate data source that is presented alongside our own statistics and never merged with them.
  • About Do Not Track (DNT): this public-site analytics uses no identifiers and does not constitute cross-site tracking, so anonymous aggregate events are still recorded when you turn DNT on. On our app site (app.muses.my), our own visit statistics are not reported when a DNT signal is detected; however, we do not currently turn off the third-party analytics tools on our app site in response to DNT. The first-source record stored with your account when you register is account information you actively provided, and it can be deleted together with your account.

10. Your Rights

  • Right to Access: You can view and update your basic account information on your profile page, and you can request a copy of the other personal information we hold about you by contacting us
  • Right to Correction: You can update or correct inaccurate information
  • Right to Deletion: You can request deletion of your account and personal information by contacting us
  • Right to Data Portability: You can export your articles and projects in Muses, and request a copy of your other data by contacting us
  • Right to Withdraw Consent: You can withdraw consent to data processing at any time

11. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and discover that your child has provided us with personal information, please contact us and we will delete it promptly.

12. Cross-Border Data Transfer

Muses is operated by MyLang LLC, a company registered in the United States, and our service providers operate in several countries. Your information may therefore be transferred to and stored on servers outside your country/region, including in the United States. We will take measures to ensure that your data is protected according to this privacy policy and complies with applicable data protection laws.

13. Policy Updates

We may update this privacy policy from time to time. Significant changes will be notified to you through platform notifications or email. Continued use of the service indicates your acceptance of the updated privacy policy.

14. Contact Us

Muses is operated by MyLang LLC, a limited liability company registered in the State of Colorado, USA, with its principal office at 1500 N Grant St, Ste N, Denver, CO 80203, United States. As the controller, MyLang LLC is responsible for the processing of personal information described in this privacy policy. If you have any questions, comments, or requests regarding this privacy policy, please contact us through the feedback feature on the platform or by sending an email to [email protected].