SongSync Privacy Policy

Effective date: 2026-06-10

SongSync (“we”, “us”) takes your privacy seriously. This policy explains what information we collect when you use the SongSync AI vocal practice app, how we use it, and how we protect it.

1. Microphone Permission

SongSync requires access to your device microphone to record your singing. The microphone is activated only when you explicitly start a recording session — SongSync does not listen in the background. You can revoke microphone permission at any time in device Settings; doing so will disable the recording and AI scoring features.

2. Information We Collect

Account information: When you sign in with Apple, we receive only the anonymous user identifier Apple provides and, optionally, an email address if you choose to share one.

Recording data: Vocal recordings you upload (mp3/m4a, ≤10 MB / ≤10 min) are sent to an AI service for pitch, rhythm, and expression analysis. Once scoring is complete, the raw recording is deleted from our processing pipeline — we do not retain your original recordings long-term.

Practice history: The DNA score results from each session (5-dimension scores + weak-spot timestamps) are stored in your account to power the 7d/30d/365d progress curves.

Backing tracks: Backing tracks you upload are stored in a private, per-account storage bucket. They are not visible to other users and are never redistributed to any third party.

Usage metadata: We collect anonymous usage metadata (e.g., feature call timestamps, error codes, subscription status) to improve service quality. This metadata does not include your identity or recording content.

3. AI Data Processing

Whisper transcription: Your vocal recording is forwarded to a third-party AI service (routed through our API gateway) for lyrics-timing alignment and audio analysis. We do not transmit your name, email, or other personally identifiable information alongside the recording. The raw recording is not retained by the AI provider after processing.

AI coaching: DNA scores, weak-spot analysis, and coaching suggestions are reference-grade AI output. They do not constitute professional vocal instruction or medical advice.

4. Copyright Declaration Records

When you upload a backing track, your copyright declaration choice (own rights / public domain / purchased license / personal practice only) is logged for audit purposes in case of copyright disputes.

5. Data Storage & Security

Your data is stored on Supabase secure cloud infrastructure using TLS/SSL encrypted transport and row-level security (RLS) isolation. Each user’s data is strictly isolated — no cross-user access is possible.

6. Data Retention & Deletion

You can permanently delete your account at any time: Profile → Account Settings → Delete Account. Deletion cascades to all recordings, DNA history, uploaded backing tracks, and account data (soft-deleted, then permanently purged within 7 days).

7. Third-Party Services

• Supabase — authentication and data storage (row-level security isolation)
• Whisper / AI service — vocal audio analysis (via our API gateway; raw recordings not retained)
• RevenueCat — subscription management
• Apple Sign in with Apple — user identity verification

8. Children’s Privacy

SongSync is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notice and will require you to re-acknowledge. Continued use of the app after changes take effect constitutes acceptance.

10. Contact Us

For privacy questions: support@sanva.tk