Skip to content

Psywave Privacy Policy

Last updated: 30 October 2026

Psywave turns a description or a photo into an Apple Music playlist. It has no account to create, no advertising and no tracking. Your playlists stay on your device unless you share one. What reaches Midgar's servers is what the AI needs to make a playlist, an anonymous identity that keeps your credit balance, an anonymous Midgar ID, and what is needed to recognise your purchases.

In short

Who we are

Psywave is published by Midgar Oy, a company in Finland, which is the controller of the information described here. You can reach us at support@midgarcorp.cc.

AI processing

To provide the app's core feature, the description or photo you provide is sent over an encrypted connection to our server at api.midgarcorp.cc, which passes it to Google Gemini to generate a playlist. The photo and the description are processed only to produce your result and are not used to train AI models. Our AI provider handles the request under its own privacy and security commitments and is permitted to use it only to return your result. Our server keeps a usage record of each playlist you make (when, what it cost and which model answered), and that record may include the text of your description. It does not keep your photo. The record is linked to your anonymous account and is deleted with it.

Identity

Psywave works without a sign-up. On first launch we create an anonymous, device-based account used to hold your credit balance and to recognise your Psywave Pro subscription. It holds no name, email address or phone number. The app does not offer Sign in with Apple. When you delete your account in Settings, this account, your credit balance and the records linked to it are deleted from our server.

The anonymous Midgar ID

The app also asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps both in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. When the ID is created or joined the app may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we receive Apple's attestation and nothing about you. The ID is sent with some requests as a sign-in token, and on the More Apps screen it shows which Midgar apps you already use. It is not removed by Delete Account in Psywave, because your other Midgar apps share it. To have it deleted, email support@midgarcorp.cc.

Purchases

Psywave Pro (an auto-renewing subscription) and credit packs are sold through Apple In-App Purchase. Each purchase carries your anonymous Midgar ID as Apple's app account token. The app sends the signed transaction record Apple issues (which product, the price, the dates and Apple's transaction identifiers) to Midgar's purchase ledger at api.midgarcorp.cc, which keeps it linked to your Midgar ID so that Psywave Pro is recognised on all your devices and your purchases can be restored in your other Midgar apps, and Apple's own server notifications about your purchases reach the same ledger. Our server checks the signed transaction of a credit pack before it credits your balance. From version 1.4.4, neither the app nor our servers send anything about your purchases to RevenueCat; earlier versions have RevenueCat validate purchases, and it receives the purchase receipt from Apple, an anonymous identifier that it generates and your IP address, but not your name or email address. We never receive your payment-card details.

On-device data

Content you create in the app, such as your playlist history and a small copy of any photo you made a playlist from, is stored on your device and is not uploaded to us. A diagnostic log is written there too, recording errors, the app version and device model, never your descriptions or any token. It leaves your device only if you choose to share it with Share Diagnostics.

Shared playlists

When you tap Share Link, the playlist's name, description, mood, and song list (titles, artists, albums, Apple Music song identifiers, and album-art addresses) are stored on our server so the link can show them. Anyone with the link can view that page. It never includes your photo, your identity, or anything else from your device. To have a shared page removed, contact us with its link.

Apple Music

With your permission, Psywave finds songs in the Apple Music catalog and adds the playlists you make to your Apple Music library. If you turn on Psywave Pro's “Only songs new to me” or “Grow One of My Playlists”, the app reads your library on your device to skip songs you already have or to see which songs a chosen playlist contains; only the song titles and artists of that chosen playlist are sent to our AI provider to suggest additions, and nothing from your library is stored on our servers.

More Apps

Settings has a Midgar universe card that opens a view of Midgar's other apps. It fetches the app list from midgar-catalog.guitaripod.workers.dev and asks Apple's public iTunes lookup service for current icons, prices and ratings; your App Store country code is sent so prices are correct for your region. It reports which app tiles were displayed and which were tapped to api.midgarcorp.cc. That report contains no identifier of any kind and not your Midgar ID: only the event, the promoted app's App Store id, your App Store country code, where in the app the screen was opened, and the app's name, version and platform. Our server stores a running total per day, event, app and platform, so there is no per-person or per-device record. This is product-interaction data, used only to decide which of our apps to promote, never for advertising or tracking. The Midgar ID is sent as a sign-in token only with the separate request that lists which Midgar apps you already use.

The app also sends two more kinds of anonymous count to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app, and one count for each purchase that names only the product bought. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used, never for advertising or tracking.

Midgar's server runs on Cloudflare, which may keep standard request logs such as your IP address for a limited time. We do not use them for anything else.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

Children

The app is not directed at children under 13 and does not knowingly collect information from them. It contains no advertising and no user-to-user communication.

What we don't do

We do not sell your data, show advertising inside the app, use advertising identifiers, run third-party analytics or crash-reporting software, or ask for tracking permission. We do not use your data to train AI models.

How long we keep data

Your choices and rights

You can delete your account in Settings at any time, which removes your anonymous account and everything saved on the device. Deleting the app alone removes the on-device data but not the server-side account. Where privacy law such as the GDPR gives you rights to access, correct, delete, restrict or move information, or to object to its use, contact us at support@midgarcorp.cc and we will help. We process this information to provide the playlists and purchases you ask for. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider and by Google as our AI provider. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.