Privacy Policy

1. Introduction

This Privacy Policy explains how SingMyVoice (“we”, “us”, “our”) handles personal information when you use the SingMyVoice mobile app (the “Service”). We built the app to help you generate AI-assisted songs in your own cloned voice. To do that we need to handle a small amount of personal data — this document tells you exactly what and why, in plain English.

We’re a solo-developed product (a formal company entity is being set up; we’ll update this document with the legal name and address as soon as that completes). Questions: support@singmyvoice.app.

2. Information We Collect

2.1 Information you provide

• Account info — your name, email, and profile photo from Google when you sign in.
• Voice samples — short audio recordings you make during Voice Clone setup, plus a verification phrase recording.
• Lyrics and prompts — anything you type into the song-creation form.
• Subscription preferences — which plan you pick. We never see your card number; Google Play processes payment and only tells us “user X has plan Y”.

2.2 Information collected automatically

• Device & app data — model, OS version, app version, language, and crash logs (stack traces). No advertising IDs.
• Usage events — generation requests and timestamps for billing reconciliation. No screen-by-screen tracking.
• Crash diagnostics — when the app crashes, we send the stack trace plus your Supabase user id (a random identifier, not your email) to Sentry so we can correlate crashes to specific accounts when debugging.

2.3 Information from third parties

• Google Sign-In — your verified email and basic profile fields.
• RevenueCat / Google Play — subscription status (active, trial, cancelled, etc.) and renewal dates.

3. How We Use Your Information

• Run the Service — authenticate you, generate songs, train your voice persona, deliver finished audio back to your library.
• Bill correctly — match your subscription status with how many songs you’ve generated this cycle.
• Improve quality — fix bugs surfaced through crash reports.
• Respond to support requests — when you email us, we read your message and reply.

Note on voice data retention: We deliberately don’t hold your voice samples or voice persona for long periods. Raw recordings auto-delete after 7 days; the cloned persona is held by our model provider for at most 14 days. This keeps your biometric data exposure minimal.

We do not use your data for advertising, profiling, or training third-party AI models that aren’t directly serving your generation request.

4. Sharing & Disclosure

We share the minimum data needed with the following service providers:

• Supabase — stores your account row, song metadata, voice clone records, and generated audio. Hosted in the EU.
• KIE.AI — receives voice samples and song-generation prompts to produce the audio. They process the input and return the result. We send only the minimum data required to fulfill each generation request.
• RevenueCat — tracks your subscription entitlement; receives your Supabase user id as the customer identifier.
• Google Play Billing — processes payments. We don’t see card data.
• Sentry — receives crash stack traces tagged with an opaque user id.
• Cloudflare — hosts the SingMyVoice marketing pages and legal documents (this page included).

We may disclose information when legally required (subpoena, court order) or in connection with a business transfer (merger, acquisition). We don’t sell personal data.

5. Data Retention

• Voice samples (raw recordings) — automatically deleted from our storage 7 days after upload by our scheduled cleanup job. The cloned voice persona itself is stored by our AI model provider (KIE.AI) for up to 14 days, after which it is permanently deleted by the provider. We do not extend or re-create voice personas automatically — this is by design, so that no part of your voice is retained longer than necessary. After 14 days, you can create a new voice clone whenever you want.
• Generated songs — kept until you delete them from your library or delete your account. Soft-deleted rows are hard-deleted within 30 days.
• Account data — kept until you delete your account. We complete deletion within 30 days of your request.
• Crash logs — kept for 90 days in Sentry, then auto-purged.
• Transactional records — kept as long as required for tax / billing audit purposes (typically 7 years), but only the minimum needed.

6. Your Rights

Depending on where you live, you have rights to:

• Access — see the personal data we hold about you.
• Correction — fix inaccurate data.
• Deletion — ask us to delete your account (use Profile → Delete account, or email support@singmyvoice.app from your account email. We complete deletion requests within 30 days). See our account deletion guide for full details.
• Portability — receive your data in a machine-readable format.
• Object / restrict — limit how we use your data in certain cases.
• Opt-out of marketing — we don’t run marketing yet; if we ever do you’ll get a one-tap unsubscribe.

California residents — we don’t sell or share personal information as those terms are defined under the CCPA / CPRA. You have rights of access, deletion, and non-discrimination; email us to exercise them.

7. International Data Transfers

The Service is global. Your data may be processed in the EU (Supabase), US (KIE.AI, Sentry, RevenueCat, Google Play, Cloudflare), or other regions where our providers operate. Where personal data leaves your home jurisdiction, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Security

• All network traffic uses HTTPS.
• Voice samples and generated songs sit in private storage buckets behind Row-Level Security; only your account can read your rows.
• Shared song links are short-lived signed URLs (30-day expiry by default).
• Passwords don’t exist — Google handles authentication.

No system is perfectly secure. If a breach happens that affects you, we’ll tell you per applicable law.

9. Children’s Privacy

The Service is for users 13 years or older. We don’t knowingly collect data from anyone under 13. If you believe a child has signed up, email us and we’ll delete the account immediately.

10. Changes to This Policy

We may update this policy as the product evolves. Material changes will surface in-app (you’ll see a “Privacy Policy updated” prompt before continuing). The “Last updated” date at the top always reflects the current version.

11. Contact Us

Questions, requests, complaints: support@singmyvoice.app

A formal mailing address will be added here once the company entity is registered.