Privacy Policy

This Privacy Policy explains how Mluen ("Mluen", "we", "us", or "our") collects, uses, shares, and protects personal information when you create an account, top up your wallet, or use our AI generation services (the "Service"). By using the Service you agree to this policy.

This page is maintained by the operator of Mluen as a customer-facing explanation of our practices. It does not constitute legal advice and is not an independent certification of any standard.

1. Who is responsible for your data

The operator of Mluen acts as the data controller for personal data described in this policy. Questions, requests, or complaints can be sent through our contact page.

2. Information we collect

We collect the following categories of personal data:

• Account information — email address, display name, optional phone number, country, password hash, and Google identifier (if you sign in with Google).
• Wallet & payment information — wallet balance and transaction history. Card payments are processed by our payment processor; we do not store full card numbers.
• Generation data — the prompts, files, and parameters you submit, the AI outputs returned, the model selected, and the cost charged. This is stored in your generation history so you can revisit it.
• Device & usage data — IP address, approximate location derived from IP, browser, device type, pages viewed, and basic telemetry needed to keep the Service running securely.
• Communications — messages you send us through the contact form or support channels.

3. How we use your information

• To create and operate your account and wallet.
• To route your prompts and files to the AI model provider you selected and to deliver the resulting output back to you.
• To process top-ups, verify manual payments, and keep an accurate billing ledger.
• To monitor service health, prevent fraud and abuse, and enforce our Terms of Service.
• To respond to your support requests and security reports.
• To comply with legal obligations, including tax, anti-fraud, and record-keeping requirements.

4. Legal bases (where applicable)

Where data-protection laws such as the GDPR apply, we rely on the following legal bases: (a) performance of a contract to provide the Service you signed up for; (b) our legitimate interests in operating, securing, and improving the Service; (c) compliance with a legal obligation; and (d) your consent, where consent is required (for example, certain marketing communications).

5. AI providers and sub-processors

Mluen is a multi-model aggregator. When you run a generation, the prompt and any uploaded files are sent to the third-party model provider you select (for example, OpenAI, Anthropic, Google, Flux, Qwen, Veo, Kling, Seedance, ElevenLabs, and similar). Those providers process your inputs under their own terms and privacy policies, and we do not control how they handle data once submitted.

We also use the following categories of sub-processors:

• Cloud hosting & database — to host the application, store your account and wallet data, and serve the website.
• Identity & authentication — to manage sign-in, sessions, password hashing, and Google OAuth.
• Payment processors — to accept card payments and (where applicable) reconcile local mobile-money top-ups.
• Email & messaging — to send transactional email such as verification, password reset, and receipts.

We do not sell your personal data, and we do not use your prompts, files, or outputs to train our own AI models.

6. Sharing with third parties

We share personal data only:

• with the AI model provider you selected for a generation, strictly to run that generation;
• with our sub-processors listed above, under contractual confidentiality obligations;
• when required by law, regulation, court order, or to protect our rights or the safety of users and the public;
• in connection with a merger, acquisition, or sale of assets, in which case the recipient will be bound by this policy.

7. International transfers

Your data may be processed in countries other than the one in which you reside, including in the United States and the European Union, where our sub-processors operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

8. Data retention

• Account & wallet records are retained for as long as your account is active and for a reasonable period afterward to comply with tax and anti-fraud obligations.
• Generation history is retained while your account is active and removed on request or on account deletion.
• Payment receipts may be retained for longer where required by accounting or tax law.

9. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to certain processing, and to lodge a complaint with your local data-protection authority. You can exercise these rights by contacting us through the contact page. We will respond within the timeframe required by applicable law.

10. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted password storage, scoped session tokens, role-based database access control, and audit logging for sensitive actions. No system is perfectly secure; you should use a strong unique password and tell us immediately if you suspect your account has been compromised.

11. Children

Mluen is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Cookies and similar technologies

We use a small number of strictly necessary cookies and local-storage items to keep you signed in, remember your preferences, and operate the wallet. We do not use third-party advertising cookies. You can clear these at any time from your browser; doing so will sign you out.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

14. Contact

Privacy questions, requests, and complaints can be sent through our contact page.