Global Privacy Policy

UAE / GCC / International Markets

Release 1 | 20 October 2026

Meluvi Privacy Policy

Last updated: 20 October 2026

Meluvi helps people turn memories, feelings, photographs and personal stories into personalized music and digital gifts. We understand that the information behind a personal gift can itself be deeply personal. This Privacy Policy explains how Meluvi collects, uses, stores, shares and protects personal information when you use our websites, applications, gift-creation experiences, recipient pages and related services, and the rights that may be available to you depending on where you live.

1. Who we are

The controller responsible for personal information covered by this Privacy Policy is Meluvi Technologies (FZE), a Free Zone Establishment incorporated and licensed at Sharjah Research Technology & Innovation Park Free Zone (SRTI Park), Sharjah, United Arab Emirates.

Company registration and licence number: 20342

Registered office: Block C-C01-176, Sharjah Research Technology & Innovation Park Free Zone (SRTI Park), Sharjah, United Arab Emirates Correspondence address: 9th Floor, Rolex Tower, Financial Center, DIFC, Sheikh Zayed Road, PO Box 117397, Dubai, United Arab Emirates

Date of incorporation: 28 September 2026

Privacy contact: privacy@meluvi.ai

Website: meluvi.ai

Where applicable law requires a data protection officer, local representative or other designated privacy contact, the relevant details will be published here or in the applicable jurisdictional section.

2. Scope of this Policy

This Policy applies to personal information processed in connection with Meluvi consumer services, including:

meluvi.ai and other Meluvi websites or applications;
the gift-creation journey and Story Intelligence experience;
Meluvi accounts and authentication;
personalized stories, titles, lyrics, music, covers, clips and gift pages;
photo and media upload, storage and presentation features;
recipient experiences and gift links;
social-sharing features;
payment and order administration;
customer support, security and service communications.

Separate notices may apply to employees, job applicants, B2B customers, business partners or other activities not covered by this consumer policy.

3. Personal information we collect

A. Information about the creator

Depending on how you use Meluvi, we may collect your name, email address, account and authentication information, country or approximate location, language preferences, communication preferences, customer-support communications, order history and transaction-related information.

B. Information about the gift recipient

To personalize a gift, you may provide information about another person, including their name, your relationship to them, the occasion or moment being celebrated, selected song language, memories, meaningful experiences, qualities you appreciate, personal messages and how you would like the recipient to feel.

C. Story and questionnaire information

We may process answers to Story Intelligence questions, relationship and moment selections, creator-written memories, story drafts and edits, and identifiers of questions previously shown in purchased gifts so that repeat customers can receive varied questions. The question-rotation history does not need to duplicate the text of your answers.

D. Photos and media

If you upload photographs or other media, we may process the files, technical metadata, crop or position settings, cover selections and related presentation information. Photos may contain personal information about the creator, recipient, children or other people.

E. Generated content

Meluvi may generate and store personalized stories, song titles, lyrics, music or audio, covers, clips, social previews and recipient gift pages. Generated content may reflect personal information supplied by the creator.

F. Payment information

Payments may be handled by third-party payment providers. Meluvi may receive payment status, amount, currency, transaction identifiers, refund status and limited billing metadata. Where card information is collected directly by the payment provider, Meluvi does not receive the complete payment-card number.

G. Device, usage and security information

We may automatically receive IP address, browser and device information, operating system, session identifiers, timestamps, pages or features used, referral information, error logs, security logs, performance data and cookie or similar technology identifiers where applicable.

4. Information you provide about other people

Meluvi is designed to help people create gifts about other people. You may therefore provide personal information about a spouse or partner, child, parent, relative, friend, colleague or another person appearing in a photo.

When you provide information about another person, you are responsible for ensuring that you have an appropriate right or lawful basis to use and provide that information. Please avoid providing information that is unnecessarily private, confidential or sensitive, and obtain permission where appropriate before uploading another person’s photograph or personal information.

Meluvi may provide recipients and other affected individuals with a way to contact us about content concerning them, including requests to review or remove a gift or photograph.

5. Sensitive personal information

Personal stories and photographs can sometimes reveal sensitive information, including health information, religious or philosophical beliefs, racial or ethnic origin, political opinions, sexual orientation or sex life, biometric information, criminal matters or other protected categories.

Meluvi does not require this type of information for ordinary gift creation. Please do not submit highly sensitive or confidential information about another person unless it is genuinely necessary for the requested service and lawful for you to provide.

Where applicable law requires explicit consent, a permit or additional safeguards for sensitive personal information, Meluvi will apply those requirements before conducting the relevant processing.

6. Children

Meluvi is intended to be purchased and operated by adults. Adults may create gifts for children or upload photographs containing children.

If you provide information about a child, you must have the legal authority or appropriate permission to do so. Meluvi does not knowingly permit children below the applicable minimum age to independently create accounts or purchase gifts without any authorization required by law.

Where local law requires parental or guardian authorization or additional safeguards, those requirements will apply. If you believe information about a child has been uploaded improperly, contact privacy@meluvi.ai or use the Privacy Request page.

7. Why we use personal information

We may use personal information to:

provide the Meluvi service and maintain accounts;
personalize questions and the creation journey;
generate stories, lyrics, songs, covers, clips and gift experiences requested by the creator;
process and present uploaded photos and media;
store and display gifts and make gift links available to recipients;
process purchases, payments, refunds and order recovery;
provide customer support;
prevent fraud, abuse, duplicate generation and security incidents;
diagnose errors and improve reliability, safety, accessibility and usability;
comply with legal, accounting, tax and regulatory requirements;
send service communications and, where permitted, marketing communications.

We do not use personal information for materially incompatible purposes without an appropriate legal basis and any notice or consent required by applicable law.

8. Legal bases for processing

Where applicable law requires us to identify a legal basis, the basis depends on the processing activity and jurisdiction. It may include:

Contract

Processing necessary to provide the service you request, create and deliver a gift, maintain an account or fulfil a purchase.

Consent

Where consent is required, for example for certain cookies, direct marketing, particular uses of sensitive information or other processing that applicable law requires to be consent-based.

Legitimate interests

Where permitted by applicable law, for interests such as security, fraud prevention, reliability, customer support and product improvement, after considering the rights and interests of affected individuals.

Legal obligations

Where processing or retention is required by law, regulation, court order, accounting or tax requirements.

Other lawful grounds

Certain jurisdictions permit additional grounds, including protecting vital interests or processing necessary for specific legal or public-interest purposes. We will rely on such grounds only where applicable.

9. Artificial intelligence and creative generation

AI is central to some Meluvi creative features. Depending on the feature, information may be processed using AI systems to generate or assist with stories, lyrics, music, images, video, visual effects or creative recommendations.

Data minimization for AI

We aim to send only information reasonably necessary for the requested generation task. For example, lyric generation may require the approved story, recipient name, occasion, desired feelings, musical direction and song language, but should not require unrelated payment information.

Creator review

Where the product supports it, creators can review or edit important generated material before finalizing or sharing the gift.

Accuracy

Generative AI can produce errors, unexpected wording or inaccurate content. Creators should review generated content before approval or sharing.

Model training

Meluvi’s intended policy is not to use private gift stories, private uploaded photographs or private recipient content to train Meluvi-owned generative AI models unless we separately ask for and receive appropriate permission.

10. Photo analysis and facial positioning

Meluvi may automatically detect the approximate location of faces or subjects in photographs to improve presentation, such as keeping faces away from text, selecting safe crop areas, centering subjects or preparing covers and clips.

Unless a feature clearly states otherwise, this processing is for visual layout and presentation. Meluvi does not need to determine a person’s real-world identity in order to position a face appropriately in a design, and does not intend to create facial-recognition profiles for ordinary gift creation.

If Meluvi introduces identity-based biometric functionality in the future, we will provide additional notice and obtain any authorization required by applicable law before enabling it.

11. Automated personalization

Meluvi may use automated rules and AI-assisted functionality to personalize the creative experience. For example, systems may select story questions, reduce repetition for repeat purchasers, recommend feelings or musical direction, and position photographs.

These features support creative choices and are not intended to make solely automated decisions that produce legal or similarly significant effects about individuals.

12. How we disclose personal information

We may disclose personal information to service providers that help us operate Meluvi, including providers of cloud hosting and databases, media storage and content delivery, AI and media generation, payment processing, transactional communications, security, fraud prevention, technical monitoring, error reporting, customer support and analytics where enabled.

A provider may act as a processor/subprocessor on Meluvi’s behalf or, for some regulated activities, as an independent controller. We aim to disclose only the information reasonably necessary for the provider’s role and use contractual and security controls appropriate to that role.

We may also disclose information where reasonably necessary to comply with law or valid legal process, enforce our terms, protect users or Meluvi, prevent fraud or abuse, or complete a merger, financing, acquisition, restructuring or similar corporate transaction subject to appropriate safeguards.

Meluvi does not sell private gift stories, private uploaded photographs or private recipient information as a data product.

13. Gift links, recipients and social sharing

Meluvi may allow creators to send recipients unique gift links. Depending on the sharing configuration, anyone who obtains a link may be able to access the gift. Treat a private gift link as confidential unless you intend broader access.

Meluvi may provide tools that prepare images, clips or gift links for sharing through messaging services or social platforms. Sharing should occur through an action initiated by the user. Once content is transferred to or published on a third-party platform, that platform’s own privacy practices apply.

Meluvi cannot control further use of content after a creator or recipient deliberately publishes or forwards it outside Meluvi.

14. Cookies, analytics and advertising technologies

Meluvi may use cookies and similar technologies for authentication, session continuity, security, preferences, checkout, analytics, service performance and advertising or campaign measurement where enabled.

Where applicable law requires consent, non-essential analytics or advertising technologies will remain disabled until the user makes the required choice. Users should be able to change preferences through a Cookie Settings control.

15. International transfers and processing locations

Meluvi is based in the United Arab Emirates and may use service providers or infrastructure in other countries. Personal information may therefore be processed outside the country where the creator or recipient is located.

Where applicable law restricts international transfers, Meluvi will use an appropriate lawful transfer mechanism and safeguards, which may include adequacy decisions, contractual protections, standard contractual clauses, regulator-approved mechanisms or other permitted grounds.

16. Retention and deletion

Meluvi retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including providing gifts, maintaining accounts, resolving disputes, preventing fraud and satisfying legal, accounting or regulatory requirements.

Different data categories may have different retention periods, including unpaid drafts, uploaded photos, completed gifts, generated media, support records, security logs, consent records and payment/accounting records.

When information is no longer required, we delete or anonymize it where reasonably practicable. Backup copies may persist temporarily until they are overwritten under normal backup cycles.

Gift availability and retention are separate. Meluvi’s commitment to make a completed gift available for 12 months from completion is a customer access commitment under the Terms and Conditions. It is not a retention period: the end of hosted access does not by itself mean that personal information is deleted on that date, and personal information is retained and deleted as described in this section and as required by applicable law.

17. Security

Meluvi uses technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, disclosure or destruction. Depending on the system, measures may include encrypted communications, access controls, restricted administrative access, signed or time-limited media URLs, environment separation, monitoring, backups and incident-response procedures.

No online service can guarantee absolute security. Users should protect their account credentials and avoid sharing private gift links more broadly than intended.

18. Personal data breaches

If we become aware of a personal data breach, we will assess it promptly, take appropriate containment and remediation measures, document the incident as required, and notify competent authorities and/or affected individuals where applicable law requires notification.

19. Your privacy rights

Depending on where you live and the law that applies, you may have some or all of the following rights:

to know whether and how we process your personal information;
to access personal information and receive a copy;
to correct inaccurate or incomplete information;
to request deletion;
to restrict or object to certain processing;
to withdraw consent where processing relies on consent;
to data portability where applicable;
to object to direct marketing;
to opt out of certain sale or sharing where applicable;
to limit certain uses of sensitive personal information where applicable;
to complain to the competent privacy or data-protection authority;
to receive information concerning certain automated decision-making where applicable.

Rights may be subject to legal conditions and exceptions. We will not discriminate against a person for exercising applicable privacy rights.

20. How to exercise your rights

Privacy requests may be submitted through meluvi.ai/privacy-request or by contacting privacy@meluvi.ai. We may ask for information reasonably necessary to verify identity, identify the relevant account or gift, prevent fraud and protect the rights of other people.

We do not require a Meluvi account for a recipient or other person to raise a privacy concern about content that relates to them. Where a request concerns a gift created by someone else, we may need the gift link or sufficient information to locate the content without disclosing information about the creator.

We will respond within the period required by applicable law. Where a request cannot be fulfilled in full because of a legal exception or another person’s rights, we will explain the outcome to the extent appropriate and lawful.

21. Recipient and content takedown requests

If a Meluvi gift contains your image or personal information and you believe it should be removed, corrected or restricted, you may use the Privacy Request page even if you did not purchase the gift and do not have an account.

For verified or higher-risk cases, Meluvi may temporarily restrict public access to a disputed gift while reviewing the request. This enables us to protect privacy without automatically and irreversibly deleting the creator’s content before the request has been assessed.

Requests involving children, intimate/private content, impersonation or other elevated risks may receive priority review.

22. Marketing choices

Meluvi may send marketing communications only where permitted by applicable law. Where consent is required, we will obtain it. You may unsubscribe through the link in a marketing message, through account settings where available, or by contacting us.

Transactional or service communications about an account, purchase, security issue or gift status are not marketing messages and may still be sent where necessary.

Where necessary, Meluvi may retain a minimal suppression record so that a person who opted out is not inadvertently re-added to a marketing list.

23. Jurisdiction-specific information

United Arab Emirates

Where the UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data applies, Meluvi will process personal information in accordance with applicable UAE requirements concerning lawful and transparent processing, security, individual rights and cross-border processing.

Saudi Arabia

Where the Saudi Personal Data Protection Law and its Implementing Regulations apply, Meluvi will provide the information required by the Saudi framework, including the purpose and method of collection, categories of data, processing, storage and destruction, disclosure, geographic scope, rights and how those rights may be exercised. Applicable Saudi requirements for international transfers and direct marketing will also be followed.

Bahrain

Where Bahrain Law No. 30 of 2018 with respect to Personal Data Protection applies, Meluvi will comply with applicable requirements governing personal data processing, individual rights and transfers.

Qatar

Where Qatar Law No. 13 of 2016 concerning Personal Data Privacy Protection applies, Meluvi will process personal information consistently with the applicable transparency, fairness, security and individual-rights requirements.

Oman

Where Oman’s Personal Data Protection Law and Executive Regulations apply, including amendments in force at the time of processing, Meluvi will comply with applicable requirements concerning consent and other lawful grounds, children, sensitive data, controllers and processors, individual rights, transfers and automated processing.

Kuwait

Where Kuwait privacy and data-protection requirements applicable to Meluvi’s services apply, Meluvi will provide required notices, honor applicable rights and follow applicable rules for collection, use, storage and disclosure.

European Economic Area

Where the EU GDPR applies, individuals may have rights including access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a supervisory authority. Where legally required because Meluvi offers services to individuals in the EEA while established outside it, Meluvi will appoint and publish the details of an EU representative.

United Kingdom

Where the UK GDPR and applicable UK privacy rules apply, individuals have applicable UK data-protection rights and may complain to the Information Commissioner’s Office. Where legally required, Meluvi will appoint and publish the details of a UK representative.

California

If and to the extent the California Consumer Privacy Act (CCPA), as amended, applies to Meluvi, eligible California residents may have rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information and exercise their rights without discrimination. Meluvi does not sell private gift stories or private uploaded photographs as a data product. If advertising or tracking practices constitute sale or sharing under California law, Meluvi will provide the required opt-out mechanism and honor applicable browser-based opt-out signals such as Global Privacy Control.

24. Changes to this Policy

We may update this Privacy Policy as Meluvi’s services, providers, processing practices or legal obligations change. The current version will display its effective or last-updated date. Where a change materially affects how personal information is used, we will provide additional notice where required by law.

25. Contact and complaints

For questions about this Policy or Meluvi’s privacy practices, or to exercise privacy rights, contact:

Meluvi Technologies (FZE) Company registration and licence number: 20342 Privacy: privacy@meluvi.ai Registered office: Block C-C01-176, Sharjah Research Technology & Innovation Park Free Zone (SRTI Park), Sharjah, United Arab Emirates Correspondence address: 9th Floor, Rolex Tower, Financial Center, DIFC, Sheikh Zayed Road, PO Box 117397, Dubai, United Arab Emirates

You may also have the right to complain to the privacy or data-protection authority responsible for your jurisdiction.