Privacy Policy — Croon

Last Updated: July 13, 2026

This Privacy Policy describes how PIXO Inc. (“Owner,” “we,” “us,” or “our”) collects, uses, stores, and discloses personal information when you use the Croon application (“Application” or “Service”). Please read this policy carefully before using the Service.

Important — Please Read Before Using AI Features. The Service relies on Third-Party AI Providers (such as Replicate, Anthropic, and Google) to perform AI music generation, voice synthesis, cover creation, and related processing. When you use any AI feature, the data you submit (including voice recordings, music inputs, prompts, and parameters) is transmitted to one or more of these providers for processing. The handling of your data by those providers — including any logging, retention, abuse monitoring, or use for model training, fine-tuning, evaluation, or service improvement — is governed by each provider’s own terms and policies, not by this Privacy Policy. The Owner does not control, audit, or guarantee the practices of these providers. By using the AI features of the Service, you consent to such transmission and processing under the providers’ policies. If you do not consent, do not use the AI features of the Service. See Section 6 for details and links to each provider’s privacy policy.

This policy complies with:

the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), as amended;
the Illinois Biometric Information Privacy Act (BIPA) and equivalent state biometric privacy laws (Texas CUBI, Washington My Health My Data Act, etc.);
the EU General Data Protection Regulation (GDPR) and UK GDPR, to the extent applicable;
the Personal Information Protection Act (PIPA) of the Republic of Korea;
Apple App Store privacy requirements (for iOS in-app purchases);
Paddle’s handling of payment data as Merchant of Record (for purchases made through Croon’s website);
other applicable U.S. state privacy laws, including Virginia CDPA, Colorado CPA, Connecticut CTDPA, and Texas TDPSA.

Policy Summary

Personal Data Processed by Purpose and Service

Purpose	Service	Key Data Types
AI Music & Voice Generation	Third-Party AI APIs (music, voice synthesis)	Voice recordings, music inputs, text prompts, Voice Models
AI Cover Creation (Voice Recording)	Replicate, Anthropic (Claude API), Google (Gemini API)	Live voice recordings, song selection, generated audio output
AI Video Generation	Third-Party AI APIs (video generation)	Images, video inputs, text prompts
Analytics	Google Analytics for Firebase, Amplitude	App usage, device info, session data
Advertising & Attribution	Meta Pixel, Meta Audience Network, AppsFlyer, Facebook SDK	Trackers, device identifiers, usage data
Hosting & Backend	Firebase (Firestore, Realtime DB, Cloud Storage, Hosting), AWS, MongoDB Cloud	Usage data, user-generated content
Infrastructure Monitoring	Firebase Crashlytics	Device identifiers, geographic position, crash data
Push Notifications	Firebase Notifications, Firebase Cloud Messaging	Device tokens, notification interaction data
Subscription & Payment Management (iOS in-app)	Apple App Store, Adapty	Purchase history, subscription status
Payment Processing (Merchant of Record, Web)	Paddle.com Market Limited	Name, email, billing address, payment method (handled by Paddle)
Credit Management	Internal systems	Credit balance, transaction history
Registration & Authentication	Google OAuth	Email, profile information, trackers

Contact Information

Owner and Data Controller PIXO Inc. 77, World Cup buk-ro 4-gil, Mapo-gu, Seoul, Republic of Korea Email: [email protected] Chief Privacy Officer (CPO): Designated in compliance with PIPA; contact via the above email for all privacy inquiries.

1. Owner and Data Controller

PIXO Inc. 77, World Cup buk-ro 4-gil, Mapo-gu, Seoul, Republic of Korea Email: [email protected] Privacy Requests (US Users): [email protected] EU/UK Representative: [To be designated upon EU/UK user threshold being met]