Privacy Policy

1. What We Collect

Account data: if you sign in with Google, we receive your name, email address, and profile picture from Google. We use this to identify you and show your own analysis history. If you issue a certificate, we also store the full name you choose to put on it.

Uploaded content: the audio/video file you upload, along with any optional metadata you provide (genre, song name).

Microphone recordings: Vocal Coach exercises and the Vocal Range Test record your voice through your device's microphone and upload that recording to us for scoring. Recording only happens when you start an exercise or test, and your browser will ask for microphone permission first. We do not listen through your microphone at any other time.

Voice-derived data: measurements produced from your recordings, including pitch, timing, dynamics and strain measurements, your estimated vocal range and voice type, and a melody fingerprint used to recognize repeat performances of the same song.

Generated data: analysis results (scores, timestamps, AI-generated observations and advice), and derived audio (e.g. isolated vocal stems produced during processing).

Payment data: if you subscribe or buy credits, Stripe collects and processes your payment details. We do not receive or store your full card number. We store your plan, subscription status, token usage, and credit balance.

Usage data: basic technical logs (IP address, timestamps, job status) used for rate limiting and abuse prevention, and product-analytics events (e.g. pages visited, features used) collected via Mixpanel. Analytics are collected from all visitors, including those who are not signed in; if you are signed in, these events are additionally associated with your account email.

Local storage: we store data on your device (including a Mixpanel analytics identifier and your sign-in session) to keep you signed in and to measure usage. This is not used for advertising. Where prior consent is legally required, the analytics identifier is only stored after you agree.

Email preference: whether you want occasional emails about new features, when and where you made that choice (for example the sign-in checkbox or Settings), the wording you were shown, and your interface language at the time. We also store a best-guess country, derived once from your IP address and your browser's time zone. It is used only to decide which email rules apply to you and to organise our own records, never for advertising, and the IP address itself is not stored.

2. How We Use Your Data

To run the analysis pipeline and generate your report.

To enforce fair-use rate limits and prevent abuse of the service.

To show you your own analysis history if you are signed in.

We do not sell your data, and we do not use your uploaded audio/video to train our own models.

To send you occasional emails about new features and improvements if you opted in, or, if you are in the United States, until you unsubscribe. These are separate from emails about your account and billing, which are always sent.

3. Legal Bases for Processing

Where the GDPR applies, we rely on the following legal bases. To perform our contract with you: running the analysis pipeline, storing your history, issuing certificates, and taking payment. On the basis of your consent: analytics, where consent is required in your region, and any processing of voice recordings that qualifies as a special category of data. On our legitimate interests: rate limiting, abuse and fraud prevention, and keeping the service secure. To comply with a legal obligation: retaining accounting records for payments.

Where processing rests on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before you withdrew.

Product-update emails are sent, where the GDPR applies, only on the basis of your consent. You can withdraw it at any time using the unsubscribe link in any such email or in Settings. Withdrawal does not affect emails sent before you withdrew.

4. Third-Party Processing

To generate scores and coaching advice, your audio/video (or short derived clips) is sent to Google's Gemini API for analysis. Google processes this data under its own applicable terms and privacy commitments for API customers.

If you sign in, authentication is handled by Google OAuth (via NextAuth). We do not receive or store your Google password.

To screen backing tracks for commercial/copyrighted music (see 'Data Retention' below), a short excerpt of about 20 seconds - taken from the separated backing track of your recording, not from your voice and not the whole file - is sent as audio to AudD, a third-party audio-identification service, which matches it against its catalogue of commercial recordings.

If you subscribe or buy credits, payments are processed by Stripe. Stripe receives the personal and payment data needed to take payment, and processes it under its own terms and privacy policy.

Files you upload, and derived audio, are stored on servers rented from our hosting provider, Hostinger, which also runs the application, database, and job queue. Hostinger acts as a processor on our behalf and holds data only for as long as the retention rules below allow.

We use Mixpanel, a third-party analytics provider, to understand how the service is used. Analytics are collected from all visitors, including those who are not signed in. If you are signed in, this usage data is associated with your account email. Where prior consent is legally required (currently the EEA and the UK), we ask before any analytics are collected, and you can change your choice at any time in Settings.

Before any product-update email is sent, the email delivery provider that sends it will be named here.

5. International Transfers

Several of the providers named above are based in, or process data in, countries outside the European Economic Area — including the United States. This applies to Google (Gemini), Stripe, Mixpanel, and AudD.

Where personal data is transferred outside the EEA or the UK, we rely on the transfer mechanisms those providers make available, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision. You can ask us for details of the safeguards that apply to a particular transfer.

The service is operated from the United States. Personal data — including account emails, analysis history, and product analytics — is therefore processed in the United States, which is not covered by a European Commission adequacy decision for transfers of this kind.

6. Data Retention

Uploaded files, generated derivative audio, and analysis results are automatically and permanently deleted approximately 24 hours after a job is created. When local playback is enabled for an analysis, the uploaded recording is instead deleted as soon as the analysis completes and is kept only in the browser on the device it was uploaded from; if that browser cannot play the recording's format, a compressed audio copy is kept for at most 60 minutes so it can be transferred to it. When the phrase trainer is enabled, a copy of the recording with the vocal removed is kept on the same terms and for the same reason: at most 60 minutes, solely so it can be transferred to that browser, after which only your device has it. The isolated vocal, a silent reduced-size copy of a video, and the results of such an analysis are deleted approximately 7 days after the job is created. This is enforced by an automated background process, not a manual step.

Microphone recordings made in Vocal Coach or the Vocal Range Test are deleted by the same automated process on the same approximately 24-hour schedule. The scores and measurements derived from them are kept as part of your practice history until you delete your account.

If you have an account, we retain your account email and a list of your past job metadata (titles, scores, dates - not the underlying media, which is deleted on the schedule described above) until you delete your account.

If a submission is flagged by our automated copyright check (see 'Third-Party Processing' above), it is not processed, and any file already received is deleted immediately, with no separate record retained.

For every successfully completed analysis by a signed-in user, we automatically retain a lightweight, permanent snapshot of your scores and an audio fingerprint (not the underlying audio) so a future upload can be recognized as the same song. If you confirm two recordings as versions of the same song using the Vocal Coach feature, this snapshot becomes part of that song's progress history. You can delete this history at any time by deleting the song or your account. When the phrase trainer is enabled, this also includes a handful of practice phrases per analysis: the times of the moments that did not come off, and the target notes that go with them, as numbers — never audio of the song. If you record one of those phrases again, that recording is deleted on the same schedule as any other microphone recording, while its score is kept as part of your practice history. Practice phrases survive deleting an individual analysis — they belong to the song, not to that one analysis — and are deleted when you delete the song or your account.

If you issue a certificate, it is kept until you delete your account. A certificate is deliberately immutable so that its code keeps verifying; it stores the name you put on it, your assessed level and category scores, and your voice type and vocal range at the time of issue. Anyone holding the code can view those details on the public verification page, which does not show your email address. Deleting your account deletes your certificates, after which their codes no longer verify.

Your email preference, and the record of each choice you made about product-update emails, are kept until you delete your account and are deleted with it.

7. Your Rights

You can delete your account yourself at any time from the Settings page, under "Danger zone". Deletion is immediate and permanent, with no grace period and no way for us to restore the data afterwards. If you have an active paid subscription you will be asked to cancel it first; cancelling is also what stops any further charges. Any unused credits are forfeited and are not refunded.

Deletion covers your analyses and their metadata, your Vocal Coach problems, exercises, attempts and any stored recordings, your tracked songs and their version history, and your certificates. You may also request deletion by contacting us at the address below - we are not required by any regulation to keep this data, and will delete it promptly upon request.

If you are in the EU/UK, you have rights under GDPR including access, correction, deletion, and data portability. If you are in California, you have similar rights under the CCPA. Contact us to exercise any of these rights.

You can unsubscribe from product-update emails at any time using the link in every such email, or in Settings. Unsubscribing takes effect immediately.

8. Security

We use reasonable technical measures to protect your data in transit and at rest, but no system is 100% secure. Given the short retention window, your exposure window is limited by design.

9. Children

This service is not directed at children under 13, and we do not knowingly collect data from them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about this Privacy Policy, or requests to access/delete your data, can be sent to the contact address listed on our website.