Privacy Policy

Effective from November 4, 2026.

1. Who processes your data

The data controller is FOP Oliinyk Ivan Ihorovych, Ukraine. For data questions, contact [email protected].

2. What data we collect

• Account: email, name (optional), password hash. If you sign in with Google — the email, name and avatar from your Google profile.
• Song content: occasion, style, language, facts about the person the song is for, lyrics and their versions, generated songs and videos, uploaded photos and videos.
• Voice notes: the audio is needed only for transcription. We delete it right after processing. We use the transcript to fill in form fields that you confirm yourself.
• Payments: processed by Whop. We receive the payment ID, amount, currency, status, country and subscription details. We never receive or store your card number.
• Technical data: IP address (to prevent abuse we store only a hash of it), country derived from the IP, browser type, error logs.
• Consents: the version of the accepted document, the time and a hash of the IP address.

3. Cookies

We only use essential cookies: to keep you signed in (session) and to remember your language. There are no advertising or analytics cookies. If that changes, we will ask for your consent first.

4. Purposes and legal bases

Purpose	Legal basis (GDPR)
Creating songs, your account, payments	Performance of a contract, Art. 6(1)(b)
Voice input	Your consent, Art. 6(1)(a) — you can withdraw it at any time
Abuse prevention, security, error monitoring	Legitimate interests, Art. 6(1)(f)
Payment and tax records	Legal obligation, Art. 6(1)(c)

We do not sell your data or use it for advertising.

5. Who we share data with

Only with providers the Service cannot work without:

• Anthropic (USA) — writing and editing lyrics, extracting facts from transcripts, moderation.
• Google, Gemini API (USA) — music generation (Lyria) and speech recognition. Google may retain requests for a limited time to detect abuse.
• Whop (USA) — payments and subscriptions.
• Cloudflare — site protection, content delivery, media storage.
• Cloudflare Email Service (USA) — sending emails.
• Sentry — error monitoring (if enabled).
• Hosting provider — [name and country to be confirmed].

When data is transferred outside the EEA, we rely on the EU Standard Contractual Clauses or other mechanisms permitted by law.

6. How long we keep data

• Voice recordings — deleted right after processing (no later than 1 hour if processing fails).
• Account, songs and media — while your account is active. After you delete your account, we delete them within 30 days.
• Payment records — as long as the law requires. Credit records are anonymized after account deletion.
• Error and technical logs — up to 30 days.

7. Your rights

You can request access to your data, correction, deletion, restriction of processing and data portability, object to processing and withdraw consent. Email us at [email protected] and we will reply within 30 days. You also have the right to lodge a complaint with the data protection authority in your country of residence. In Ukraine, this is the Ukrainian Parliament Commissioner for Human Rights.

8. Children

The Service is for adults only (18+). If you share information about a child, such as a name in a lullaby, do so as a parent or with a parent's consent, and don't share more than needed.

9. Security

Data is transmitted over encrypted connections, passwords are stored only as hashes, and access to data is restricted.

10. Changes

We may update this Policy. We will notify you of material changes in advance by email or in the Service.