Privacy Policy

Mirakilouz Beatz ("we", "us", "our") provides an online marketplace and mobile app for browsing and purchasing beats, watching videos, and booking studio sessions. This policy explains what information we collect, why we collect it, and how you can control it.

Information we collect

• Account information: your name, email address, and phone number when you register or edit your profile.
• Password: stored only as a one-way cryptographic hash — we never store or have access to your plain-text password.
• Profile photo: optional, if you choose to upload one.
• Booking details: the studio session date/time, location, notes, and (if required by the package) an audio file you upload for the session.
• Purchase and order history: which beats and licenses you've purchased, for your records and ours.
• Two-factor authentication data: if you enable 2FA, your authenticator secret is stored encrypted, and recovery codes are stored as one-way hashes.
• Preferences: your chosen language and currency, stored locally on your device.
• Push notification token: if you allow notifications, a device token issued by Firebase Cloud Messaging (Google) so we can send you order/booking updates and announcements. It identifies your device for delivery only — we never see or store your contacts, location, or any other Google account data through it.

What we do not collect

We do not collect your device's advertising ID, precise location, contacts, or camera/microphone access. We do not use any third-party analytics or advertising SDKs, and we do not run behavioral tracking of any kind.

Payments

Payments are processed by Paystack, a licensed third-party payment processor. When you pay for a beat or a studio booking, your card details are entered directly into Paystack's own secure checkout screen — we never see, receive, or store your card number, expiry date, or CVV.

How we use your information

• To create and manage your account.
• To process your orders and studio bookings.
• To send you transactional emails (order confirmations, password resets, security alerts).
• To keep your account secure (2FA, suspicious-login detection).

We do not sell your personal information to anyone, and we do not share it with third parties for their own marketing purposes.

Data retention

We keep your order and booking history for as long as your account exists, for accounting and support purposes. If you delete your account (see below), your personal details are erased immediately; order and booking records are kept in an anonymized form for our financial records, as required for tax and business purposes, but are no longer linked to your identity.

Deleting your account and data

You can permanently delete your account at any time directly inside the mobile app: go to Profile → Danger Zone → Delete Account, confirm your password, and your account is deleted immediately. If you no longer have the app installed, you can request deletion instead via our web-based account deletion page.

Security

Passwords are hashed, never stored in plain text. Two-factor authentication secrets are encrypted at rest. All traffic between the app and our servers is encrypted in transit (HTTPS/TLS). Your session token is stored on your device using Android's secure, encrypted keystore-backed storage, not in plain preferences.

Children's privacy

Mirakilouz Beatz is not directed at children and is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact us

Questions about this policy or your data? Contact us at market@mirakilouzbeatz.com.