LYMO · PRIVACY

Privacy Policy

Effective date: 10 October 2026 · Operator: Vivid Universe (Shanghai) Technology Co., Ltd.

English

This policy covers Lymo's U.S. service and explains how we collect, use, store, and share information when you use our music social service. Lymo does not sell personal information or use it for targeted advertising.

1. Information we process

Account and identity. Your generated Lymo handle, display name, profile image, account timestamps, and the email address or provider identifier used to sign in. If you use Sign in with Apple, Apple may provide your name and either your email address or a private relay address, according to your choice.
Authentication and security. Short-lived verification challenges, hashed device and network identifiers used for abuse prevention, session records, and encrypted provider authorization tokens where needed to maintain or revoke a linked login method.
Music information. With your permission, Lymo reads selected Apple Music library metadata such as recently played tracks, playlists, artists, artwork references, and playback state. We store the music metadata you choose to sync or share so your profile and social features work.
Music preferences and summaries. In versions that enable AI music analysis, we derive music preferences and listening summaries from your listening records and relevant music metadata. These results may be linked to your Lymo account. See AI music analysis and your data for current availability and processing details.
Social activity and content. Friend requests and friendships, listening activity, likes, playlists created in Lymo, private messages, shared song metadata, and message read state.
Contacts. If you choose Invite a contact, the system picker shares only the contact you select with the app. Their name, phone numbers and email addresses stay in temporary device memory so you can choose a destination; Lymo does not upload or store them on its servers. You confirm sending your invitation in the system text-message or email composer.
Technical information. We retain service request logs, which may include in-app search terms, IP addresses, timestamps, and device or app information. We also process update failures, bounded crash details, notification delivery timing and errors for security, reliability and troubleshooting. These records may be linked to your account or app installation.

Subscriptions and free-experience eligibility. In versions that offer subscriptions, we process Apple-signed transaction identifiers, product and renewal information, purchase status, and an account-binding identifier to verify and maintain Lymo access, prevent conflicting ownership, and handle billing support. We also use keyed hashes derived from verified login identities and eligibility timestamps to prevent repeat free experiences during the retention period described below. These hashes are not usable login credentials. Apple processes payments; Lymo does not receive your payment-card details.

2. Why we use information

We use this information to create and secure your account; authenticate you; connect login methods; provide profiles, music sync, playback, friendships, messaging, reactions, and playlists; prevent abuse; troubleshoot failures; comply with legal obligations; and respond to support or privacy requests.

Where AI music analysis is enabled, we may use automated technology, including third-party artificial intelligence services, to analyze your listening records and relevant music metadata, infer music preferences, and generate listening summaries. This use is limited to these music features and does not authorize targeted advertising or training general-purpose models.

3. Who can see information

Your handle, display name, and profile image can appear in account search. Accepted friends can see the profile, music, and listening information exposed by Lymo's friend features. Direct messages are available to the conversation participants. Authorized reviewers can access specifically reported evidence as described below. Blocking limits social visibility and contact between the pair. Friend pins are account-scoped preferences synchronized by Lymo.

Music preference analyses and listening summaries follow the access controls of the music information they describe. AI processing does not make private information public or expand its audience.

4. Service providers and disclosures

Artificial intelligence service providers. In versions that enable AI music analysis, we may send the listening records and relevant music metadata needed for preference analysis and summaries to third-party AI service providers, together with a processing reference if needed. These requests do not include your email address, phone number, contacts, private messages, avatar, sign-in credentials, Apple authorization tokens, or music audio. Before sending data, we provide the relevant disclosure and obtain any required explicit permission. We require these providers to process data for the agreed purposes and provide protection consistent with this policy. The public help page explains AI service providers, processing locations, and retention.

Lymo relies on Apple for Sign in with Apple and Apple Music, and on Alibaba Cloud for application hosting, transactional email and content moderation. With your explicit agreement, before publication, submitted avatars and text (such as display names, comments, messages and shared playlist names) are checked by Alibaba Cloud Content Moderation in Singapore. We send the submitted item and an opaque request identifier, not your email, phone number, recipient identity or full conversation history. Automated decisions help prevent harmful content; uncertain content is held for authorized human review and rejected content can be appealed at hi@vividverse.fun. Moderation text evidence and decision records are retained for up to seven days and removed with your account. Uploaded avatar files remain in private account storage and are removed through account deletion; rejected or expired checks do not publish them. Automatic approvals retain only hashes and identifiers for up to 24 hours. The registration page links the Terms and this policy and explains these content checks. Its initially unchecked checkbox explicitly includes permission for them; you must agree before registering by email, Apple or Google. Completing registration creates your account and saves the current permission version and time together. Cancelled or failed registration grants no permission. Signing in or restoring a session does not show a separate agreement page or change an existing choice. Apple Music authorization does not grant content-checking permission. Opening comments or submitting content does not display an automatic agreement prompt; without permission, submission keeps your draft and directs you to Settings. You can allow or withdraw checks in Settings → Privacy & Safety. Withdrawal stops subsequent checks, including remaining portions of a pending check; an already dispatched request cannot be recalled. Reading, blocking, reporting, support and account deletion remain available. If the explanation changes, you can review it and update your choice in Settings → Privacy & Safety. Requests sent to these providers are limited to what is needed for the selected feature. We may also disclose information when required by law, to protect users and the service, or as part of a corporate transaction subject to appropriate safeguards. Providers that process Lymo user data are required to protect it consistently with this policy and applicable law.

Expo provides app updates and push notification delivery. For updates, Expo receives an installation identifier, app and update versions, and failed-update or bounded fatal-error details when needed for recovery. For push delivery, Expo receives the push token and the notification content and routing data needed to deliver it through Apple. These services support app operation and reliability, not advertising tracking.

For subscriptions, we send Apple the account-binding identifier and transaction information needed to verify purchases and receive renewal, expiry and refund updates. We use Apple's StoreKit and App Store server services directly for this purpose.

Continuous listening sync. After Apple Music is connected, Lymo separately offers to keep your recent listening up to date while the app is closed. Agree and enable allows us to verify and store your encrypted Apple Music user authorization and use it on our server to request recent history from Apple, including listening on other devices on that Apple Music account. We use this metadata for your music profile and listening activity visible to accepted friends; we do not upload or distribute Apple Music audio files. Sync starts after this choice and runs automatically, normally between five-minute and daily checks, with backoff during failures. Two weeks without opening Lymo suspends collection but retains the encrypted authorization; opening Lymo can resume it while permission remains granted. The Apple Music connection card shows sync status and lets you stop it. Stopping sync deletes the server authorization without disconnecting playback or deleting existing listening records. Disconnecting Apple Music or deleting your Lymo account also removes the authorization. Existing connections require this explicit choice; an iOS music permission alone does not enable server collection.

5. Storage and international processing

Our production service is hosted in Singapore. If you use Lymo elsewhere, your information may therefore be transferred to and processed in Singapore and in locations where the providers above operate. We use access controls, encryption in transit, restricted credentials, and encryption for stored Apple authorization tokens. No internet service can guarantee absolute security.

AI processing, where enabled, may also take place outside the United States. The relevant locations and provider arrangements are described in the AI data help page; a U.S. launch does not mean all processing takes place in the United States.

6. Safety evidence, retention and deletion

A report contains the selected item or profile as it appeared when reported, the reason and optional explanation, and identifiers needed to investigate. It does not provide reviewers with your entire private conversation. Only authorized reviewers can access evidence. We record their moderation decisions and restrict access; the reported person is not shown the reporter’s identity. Closed reports and their associated evidence are removed after 90 days. Evidence supporting an active social restriction is retained for appeals and restoration; the 90-day period begins after the final restoration decision. Deleting an account removes its report identity, explanations, evidence, blocks and permission decisions from the active service. If a restriction of another account is still active, we retain only an anonymous administrative decision record needed for appeal or restoration, without the deleted reporter’s identity or reported content. The restricted account’s own restriction reason remains until resolved.

We keep account and social information while your account is active, and keep authentication or operational records only as long as reasonably needed for the purposes described above. Short-lived sign-in challenges expire automatically. When you delete your account in Lymo, the account and associated profile, identities, sessions, friendships, music metadata, activities, playlists, reactions, and messages are deleted from the active service, except information we must retain for legal, security, fraud-prevention, or backup-integrity reasons. Residual backup copies are isolated and removed through the normal backup lifecycle. For Sign in with Apple, Lymo also attempts to revoke the associated Apple token.

After account deletion, the same request directly attempts to remove current, replaced and pending avatar files. A storage failure does not restore your account; we record an error code and the deleted account identifier for manual removal of remaining files. We do not automatically retry or periodically scan for these files. An upload authorized before deletion may finish after this attempt, and an interrupted deletion request may leave files; these require manual handling. Listening-sync permission decisions are removed with the account.

AI analysis data, where enabled. Account-linked music preferences and listening summaries are kept with the associated music information while needed to provide those features. Account deletion stops new analysis for that account and removes its account-linked analysis results from the active service, subject to the legal, security, and isolated-backup exceptions above. A request already sent to a provider cannot be recalled. Any provider-side retention for service delivery, security, or legal obligations is described in the AI data help page; we do not promise zero retention unless the selected service and configuration support it.

Subscription and eligibility retention. In versions that offer subscriptions, account deletion immediately removes the account's local entitlement. We retain minimal purchase-ownership records for 30 days from deletion, regardless of when the paid period ends, to prevent conflicting claims and handle billing enquiries and delayed store updates; we then purge them. They do not restore the account or allow its purchase to move to a new account. Free-experience eligibility hashes remain while a verified identity is associated with any active account; their 30-day deletion period starts when the last associated account is deleted. We purge those records after that period, and a new registration may then qualify for another seven-day free experience. These records do not preserve deleted profiles, messages or social data. Deleting Lymo records does not delete Apple's transaction history or cancel your App Store subscription. See our subscription terms for management and refund-request options.

7. Your choices and rights

Decline Contacts or Media Library permission in iOS Settings; core account access remains available, while the related feature may not work.
Report inappropriate content from its actions; manage blocked users and view your report status in Settings → Privacy & Safety. For concerns or appeals, contact hi@vividverse.fun.
Enable or stop continuous listening sync on the Apple Music connection card. We remember refusals and withdrawals across your devices and do not ask again on every launch.
Manage or unlink eligible sign-in methods under Settings → Login methods.
Delete your account under Settings → Login methods → Delete account. Recent authentication and confirmation are required to protect against accidental deletion.
Manage Sign in with Apple under Apple Account settings and manage Apple Music access in iOS Settings.
Ask to access, correct, export, restrict, object to, or delete personal information where applicable law grants that right.
For privacy requests, including restricting AI processing or withdrawing consent where processing relies on consent, contact hi@vividverse.fun. We may need to verify your account before acting. Closing the app does not itself delete stored records or withdraw consent.

8. Children

Lymo is not directed to children under 13 or the minimum age required to consent to an online service in their location. If you believe a child has provided personal information without valid authorization, contact us so we can investigate and remove it.

9. Changes and contact

We may update this policy as Lymo changes. We will update the effective date and provide additional notice when required. For privacy questions or requests, email hi@vividverse.fun. You may also complain to the data-protection authority available in your jurisdiction.

If a new purpose requires additional permission, we obtain it before starting that processing. Updating this policy alone does not grant a new permission for an existing account.

简体中文

本政策适用于 Lymo 面向美国用户提供的服务，说明您使用本音乐社交服务时，我们如何收集、使用、存储和共享信息。Lymo 不出售个人信息，也不会将个人信息用于定向广告。

1. 我们处理的信息

账号与身份信息：系统生成的 Lymo 账号名、展示名称、头像、账号时间，以及用于登录的邮箱或第三方身份标识。使用“通过 Apple 登录”时，Apple 可能依照您的选择提供姓名、邮箱或隐私中继邮箱。
认证与安全信息：短期有效的验证码挑战、用于防止滥用的设备及网络标识哈希、会话记录，以及维护或撤销关联登录方式所需的加密授权令牌。
音乐信息：在获得授权后，Lymo 会读取部分 Apple Music 资料库元数据，例如最近播放、歌单、艺人、封面引用和播放状态。您选择同步或分享的音乐元数据会被存储，以提供个人主页和社交功能。
音乐偏好与收听摘要：在启用 AI 音乐分析的版本中，我们根据您的听歌记录及相关音乐元数据推断音乐偏好、生成收听摘要。这些结果可能与您的 Lymo 账号关联。当前可用状态及处理详情见《AI 音乐分析与数据处理说明》。
社交活动与内容：好友请求和好友关系、收听动态、点赞、在 Lymo 中创建的歌单、私信、分享的歌曲信息以及消息已读状态。
通讯录：当您选择“邀请通讯录好友”时，系统选择器只向 App 提供您选定的联系人。姓名、手机号和邮箱仅在设备内存中临时使用，供您选择邀请方式，不会上传或存储到 Lymo 服务器。邀请由您在系统短信或邮件编辑器中确认发送。仍受支持的旧版 App 可能保留“从通讯录查找”，发送最多 1,000 个规范化邮箱的哈希以匹配可被发现的账号，不上传联系人姓名或明文通讯录。
技术信息：我们保存服务请求日志，其中可能包含应用内搜索词、IP 地址、时间以及设备或应用信息。我们也处理更新失败、有限的崩溃详情、通知投递时间和错误，用于安全、稳定性及故障排查。这些记录可能与您的账号或应用安装实例关联。

订阅与免费体验资格：在提供订阅的版本中，我们处理 Apple 签名的交易标识、商品与续期信息、购买状态及账号绑定标识，用于验证和维持 Lymo 权限、防止购买归属冲突及处理账单咨询。我们还使用从已验证登录身份生成的带密钥哈希及资格时间记录，在下述保留期内防止重复领取免费体验。这些哈希不能用作登录凭据。付款由 Apple 处理，Lymo 不会收到您的支付卡详情。

2. 使用目的

我们为创建和保护账号、身份认证、关联登录方式、提供主页、音乐同步与播放、好友、消息、反应和歌单功能、防止滥用、排查故障、履行法定义务以及响应客服或隐私请求而使用上述信息。

在启用 AI 音乐分析时，我们可能使用包括第三方人工智能服务在内的自动化技术，分析您的听歌记录及相关音乐元数据，推断音乐喜好并生成收听摘要。这项处理仅用于上述音乐功能，不授权将数据用于定向广告或训练通用模型。

3. 信息可见范围

账号名、展示名称和头像可能出现在账号搜索中。已互相接受的好友可以看到 Lymo 好友功能中展示的主页、音乐和收听信息。私信对会话双方可见。获授权的审核人员可以访问下文说明的具体被举报证据。拉黑会限制双方的社交内容可见范围及联系能力。好友置顶是由 Lymo 同步的账号偏好。

音乐偏好分析和收听摘要遵循其所依据音乐信息的访问控制。AI 处理不会将私密信息公开，也不会扩大其可见范围。

4. 服务提供商与披露

人工智能服务提供商：在启用 AI 音乐分析的版本中，我们可能向第三方人工智能服务提供商发送音乐偏好分析及收听摘要所需的听歌记录和相关音乐元数据，并在必要时附带处理标识。这些请求不包含您的邮箱、手机号、通讯录、私信、头像、登录凭据、Apple 授权令牌或音乐音频。发送数据前，我们会提供相关说明，并取得必要的明确许可。我们要求相关服务商按照约定目的处理数据，提供与本政策相应的数据保护。相关服务商、处理地区及保存安排见公开的《AI 音乐分析与数据处理说明》。

Lymo 使用 Apple 提供“通过 Apple 登录”和 Apple Music，使用阿里云托管应用、发送事务邮件及审核内容。经您明确同意后，发布前提交的头像和文字（例如展示名称、评论、消息及分享的歌单名称）会由阿里云内容安全服务在新加坡进行检查。我们发送本次提交的内容及不直接识别您的请求标识，不发送您的邮箱、手机号、接收者身份或完整会话历史。自动判断用于防止有害内容发布；存在疑问的内容会暂缓发布，交由获授权人员复审。被拒绝的内容可通过 hi@vividverse.fun 申诉。审核文字证据及决定记录最多保留七天，并在删除账号时移除。上传的头像文件保存在账号的私有存储中，通过删除账号流程移除；被拒绝或已过期的检查不会发布这些图片。自动通过的内容仅保留哈希与标识，最多保留 24 小时。注册页会提供服务条款与本政策的链接，并说明上述内容检查。默认未勾选的确认框明确包含这些检查的许可；通过邮箱、Apple 或 Google 注册前，需勾选同意。完成注册时，账号与当前许可版本、时间一并保存。取消或失败的注册不会授予许可。登录或恢复会话时不会出现独立协议页，也不会改变已有选择。Apple Music 授权不会授予内容检查许可。打开评论或提交内容时，不会自动弹出协议授权；未允许内容检查时，提交会保留草稿，并提示您前往设置。您可在“设置 → 隐私与安全”允许或撤回内容检查。撤回后将停止后续检查，包括尚未发出的内容分段；已发出的请求无法撤回。阅读、拉黑、举报、支持和删除账号仍可使用。用途说明更新后，您可在“设置 → 隐私与安全”查看并更新选择。向这些服务商发送的数据仅限于实现所选功能所必需的范围。我们也可能因法律要求、保护用户或服务安全，或在具备适当保障的公司交易中披露信息。处理 Lymo 用户数据的服务商应按照本政策和适用法律提供相应保护。

Expo 提供应用更新及推送通知投递。更新服务接收安装标识、应用和更新版本，以及恢复所需的更新失败或有限的致命错误详情。推送服务接收推送令牌，以及通过 Apple 投递通知所必需的通知内容和路由信息。这些处理用于应用运行及稳定性，不用于广告追踪。

对于订阅，我们向 Apple 发送验证购买所需的账号绑定标识及交易信息，并接收续期、到期和退款更新。我们直接使用 Apple 的 StoreKit 及 App Store 服务端服务完成这些处理。

持续收听同步：连接 Apple Music 后，Lymo 会单独邀请您在应用关闭时继续更新近期收听。选择“同意并开启”后，我们会验证并加密保存您的 Apple Music 用户授权，在服务端凭此向 Apple 获取近期收听，包括同一 Apple Music 账号在其他设备上的收听。这些元数据用于音乐主页及已接受好友可见的收听动态；我们不会上传或分发 Apple Music 音频文件。同步在您作出选择后自动运行，通常每五分钟至一天检查一次，故障时适当延后。两周未打开 Lymo 会暂停采集，但保留加密授权；在仍然同意的情况下，重新打开可恢复采集。Apple Music 连接卡会显示同步状态并提供停止入口。停止同步会删除服务端授权，不影响播放连接，也不会删除已有收听记录。断开 Apple Music 或删除 Lymo 账号同样会移除授权。已有连接也需要此次明确选择；iOS 音乐权限本身不会启用服务端采集。

5. 存储与跨境处理

生产服务托管于新加坡。如果您在其他地区使用 Lymo，信息可能被传输至新加坡，以及上述服务商运营所在地区处理。我们采用访问控制、传输加密、受限凭据，并对存储的 Apple 授权令牌加密。任何互联网服务都无法保证绝对安全。

启用 AI 功能时，相关处理也可能在美国以外的地区进行。具体地区及服务商安排见AI 数据帮助说明；首发在美国不代表所有数据都在美国处理。

6. 安全证据、保存与删除

举报包含被选中的内容或主页在举报时的快照、原因、选填说明及调查所需标识，不会向审核人员开放您的完整私聊。只有获授权的审核人员可以访问证据，我们记录其处理决定并限制访问；被举报人不会看到举报者身份。已结案举报及其相关证据在 90 天后删除。仍在生效的社交限制所依据的证据会保留，以支持申诉和恢复；恢复权限的最终决定作出后，开始计算 90 天期限。删除账号时，其举报身份、说明、证据、拉黑记录及授权选择会从在线服务中删除。如果对另一个账号的限制仍然生效，我们仅保留用于申诉或恢复的匿名管理决定记录，不保留已删除举报者的身份或被举报内容。受限账号自身的限制原因会保留至处理完成。

账号有效期间，我们会保存账号及社交信息；认证或运维记录仅在实现上述目的所合理需要的期限内保存。短期登录挑战会自动过期。您在 Lymo 内删除账号后，账号及相关主页、身份、会话、好友关系、音乐元数据、动态、歌单、反应和消息会从在线服务中删除；法律、安全、防欺诈或备份完整性要求保留的内容除外。备份中的残留副本会被隔离，并随正常备份周期删除。对于“通过 Apple 登录”，Lymo 还会尝试撤销相关 Apple 令牌。

账号删除后，同一次请求会直接尝试删除当前头像、曾替换的头像和尚未完成的头像上传。存储故障不会恢复账号；我们记录错误码和已删除账号的标识，以便人工删除残留文件，不自动重试或定期扫描。注销前已获授权的上传可能在本次删除尝试之后才完成，请求中断也可能留下文件，这些情况需要人工处理。账号删除时，其持续收听同步授权选择也会删除。

启用 AI 时的分析数据：与账号关联的音乐偏好和收听摘要，会在提供相关功能所需的期间随对应音乐信息保存。删除账号会停止该账号的新分析，并从在线服务中移除其关联的分析结果；上述法律、安全及隔离备份例外仍然适用。已经发送给服务商的请求无法撤回。服务商为提供服务、安全或履行法定义务而保存数据的安排，见AI 数据帮助说明；除非实际服务和配置支持，我们不会承诺零保留。

订阅与资格记录保留：在提供订阅的版本中，删除账号会立即移除该账号的本地权益。无论已付费周期何时结束，我们均从删除之日起保留最小购买归属记录 30 天，用于防止归属冲突、处理账单咨询及迟到的商店更新，期满后清理。这些记录不能恢复账号，也不能将其购买转移给新账号。只要同一已验证身份仍关联任一有效账号，免费体验资格哈希就会继续保留；最后一个关联账号删除后开始计算 30 天，期满后清理，新注册届时可能再次获得七天免费体验。这些记录不会保留已删除的主页、消息或社交数据。删除 Lymo 记录不会删除 Apple 的交易历史，也不会取消 App Store 订阅。管理订阅及申请退款的选项见订阅条款。

7. 您的选择与权利

可以在 iOS 设置中拒绝通讯录或媒体资料库权限；账号核心功能仍可使用，但相关功能可能不可用。
可以从内容操作菜单举报不当内容，并在“设置 → 隐私与安全”管理拉黑名单及查看举报状态。如有问题或需要申诉，请联系 hi@vividverse.fun。
可以在 Apple Music 连接卡开启或停止持续收听同步。拒绝或撤回会在您的设备间同步，不会每次启动都重复询问。
可以在“设置 → 登录方式”管理或解绑符合条件的登录方式。
可以在“设置 → 登录方式 → 删除账号”发起账号删除。为防止误删，需要近期重新认证并再次确认。
可以在 Apple 账号设置中管理“通过 Apple 登录”，并在 iOS 设置中管理 Apple Music 权限。
在适用法律规定的范围内，您可以请求访问、更正、导出、限制处理、提出异议或删除个人信息。
如需提出隐私请求，包括限制 AI 处理，或在处理基于同意时撤回同意，请联系 hi@vividverse.fun。处理前可能需要核实您的账号。关闭 App 本身不会删除已有记录，也不代表撤回同意。

8. 未成年人

Lymo 不面向未满 13 周岁或所在地法律规定的网络服务最低同意年龄的儿童。如果您认为儿童在缺少有效授权的情况下提供了个人信息，请联系我们调查并删除。

9. 更新与联系

我们可能随 Lymo 的变化更新本政策，并更新生效日期；法律要求时会另行通知。如有隐私问题或请求，请发送邮件至 hi@vividverse.fun。您也可以向所在司法辖区有权受理的个人信息保护机构投诉。

如果新增用途需要额外许可，我们会在开始相关处理前取得许可。仅更新本政策不会为已有账号授予新的处理许可。