Privacy Policy

1. Scope

1.1. This Policy applies to information (including personal information) collected through the App. "Personal information" means information that identifies you personally, either alone or in combination with other information. Personal information does not include technical, device, or usage information that cannot be used to identify you, nor "aggregate" data from which individual identities have been removed.

1.2. This Policy applies to the App only. It does not apply to any other website or service you may reach from the App, each of which may have data practices that differ materially from ours. See Section 19.

2. Who Is Responsible for Your Data

2.1. Alvin AI Studio LLC acts as the Data Controller and is responsible for collecting, processing, and storing personal data in compliance with applicable data protection laws. Our full company details are in Section 22.

2.2. For purchases made through the Apple App Store or Google Play Store, Apple and Google process your payment and billing information as independent controllers under their own terms and privacy policies. We never receive your card number.

2.3. Privacy questions, requests, and complaints all go to the same address: info@singasong.app. See Section 20.

3. What Data We Collect, and How We Collect It

We collect data in three ways: you give it to us (creative input, profile details, support messages), it is collected automatically when you use the App (device, technical, and usage data), and it is generated by the App (the songs and videos produced for you, your credit balance, your subscription state).

3.1 Content you submit to create AI output ("Creative Input")

This is the category most relevant to how the App works. We collect it only when you actively submit it in order to generate something:

3.2 Account and profile information

• A guest account is created automatically for your device when you finish the walkthrough. No name or email address is required to use the App.
• If you choose to set up a profile: username, favourite genres and moods, and an optional profile picture.
• If you purchased a subscription on our website and link it to the App: your email address, collected in order to send a one-time verification code (OTP).
• When you contact support by email: your email address and the contents of your message, plus the technical details the support email pre-fills (user ID, platform, app version, subscription status, subscription identifier, device identifier).

3.3 Device and technical information

Collected automatically: device identifiers, device model and manufacturer, operating system and version, app version, language and region settings, crash reports and diagnostic logs, IP address, and — on iOS, only if you allow tracking when the system prompt appears — the Identifier for Advertisers (IDFA). On Android, the advertising ID, unless you have reset or limited it in system settings.

3.4 Usage and interaction information

Which screens you open, which creation flows you start and complete, purchases and credit-balance events, and the songs and videos you play, like, or post to the community.

3.5 Content generated for you

The songs, covers, voice models, and videos the App produces from your Creative Input, together with their titles and cover art, stored so that your Library works.

3.6 Purchase and subscription information

We do not collect or store your card number. Subscriptions and credit packs bought inside the App are processed by Apple or Google; purchases made on our website are processed by our payment provider. We receive a transaction identifier, the product purchased, the subscription state, and — for web purchases — your email address.

3.7 Website information

If you visit singasong.app, we collect standard server log data (browser type and version, operating system, referring URL, host name, time of request, and IP address) for security and error analysis, and we use cookies as described in Section 10.

3.8 What we do not collect

We do not collect your contacts, your precise GPS location, your health data, your financial account data, or any special-category data about you. We do not scan your photo library — we receive only the specific photos you select. We do not listen to your microphone except while you are actively recording in the App.

4. How We Use Your Information

We use your information to:

• Generate the output you asked for. Your Creative Input is transmitted to the AI providers named in Section 6 so that they can produce the song, cover, voice model, or music video you requested.
• Store your creations in your in-app Library and, if you explicitly choose to post them, display them in the community feed.
• Build and store your voice profile, so that you can reuse it for future AI covers. Your voice profile is private to your account and is not made available to other users.
• Moderate content, to detect and block prompts, lyrics, and uploads that violate our Terms of Use. See Section 11.
• Operate subscriptions and credits — verifying entitlement, granting the daily allowance, granting purchased credits, and returning credits when a generation fails.
• Provide customer support and respond to your requests.
• Send you notifications, where you have allowed them, primarily to tell you that a song or video you requested is ready.
• Measure and improve the App — analytics, crash diagnostics, feature performance, and testing of the interface.
• Measure advertising performance and attribute installs, where you have allowed tracking.
• Detect fraud, abuse, and security incidents, enforce our Terms, and comply with legal obligations.

We do not use your Creative Input, your voice recordings, or your photos to train our own AI models. Where an AI provider's own terms permit it to use data submitted through its service to improve its models, we contract to restrict that use; see Section 6.4.

4.1 Legal bases (where the GDPR or UK GDPR applies)

You can withdraw consent at any time (Sections 6.3 and 12), and withdrawal does not affect the lawfulness of processing carried out before it.

5. Sources of Information

We obtain personal information from: you directly; your device, automatically; the App's own operation (generated content, credit and subscription state); Apple and Google, which confirm your purchase and subscription state to us via our subscription provider; and our AI providers, which return the generated output.

We do not buy personal information about you from data brokers, and we do not enrich your profile from third-party sources.

6. Third-Party AI Providers — What We Send, and to Whom

The App sends content you submit to third-party artificial intelligence providers. This section names each of them, states exactly what data is sent, and states what it is used for. This is the disclosure required by our obligations of transparency, and it is the authoritative list — no other document of ours maintains it.

Each provider's own privacy policy is available on its website, and we link to them from the in-app consent screens.

Access intermediaries. We reach some of these AI models directly and some through authorised API platforms that provide access to them on our behalf. Where an intermediary is involved, it receives the same data described in the row above, acts only as our processor, is bound by the same obligations set out in Section 6.4, and is not permitted to use your data for its own purposes. The list above therefore identifies every AI model that processes your content and every purpose it is processed for; if you want to know the specific platform through which a given model is accessed at any time, email info@singasong.app and we will tell you.

6.1 We ask for your permission first

Before any of the above is transmitted, the App shows you a blocking consent screen with an Accept and a Decline button. There are three separate consent screens, each shown the first time you use the relevant kind of input:

Each screen tells you what data is sent, who receives it, and how it will be used, and links to this Privacy Policy. You cannot dismiss these screens by tapping outside them; on Android the back button is treated as Decline. Declining blocks the transmission — the App does not send the data and does not perform the generation. Declining does not restrict your use of the rest of the App.

6.2 Consent to a voice model

A recording of your voice, and a model built to resemble it, are sensitive. We therefore ask for your explicit, separate consent before creating a voice model, and we tell you plainly that you are directing us to create a means of imitating your voice. You may only submit your own voice, or the voice of a person who has given you express written permission — our Terms of Use, and the terms of the provider that builds the model, both require this.

6.3 You can withdraw your permission at any time

Open Settings → AI data sharing. Each of the three permissions (Song prompts, Photos, Voice recordings) has its own switch showing its current state. Turning one off asks you to confirm, then revokes it immediately. After revoking, the App will ask for your permission again the next time you try to use that feature. Withdrawing consent does not delete creations already made; to have data erased, see Section 12.

6.4 Protection at the AI providers

We only transmit data to AI providers under written agreements that require them to process it solely on our instructions, for the purposes described above, to apply security measures equivalent to our own, not to use it to train or improve their own models beyond what is necessary to produce your output, and not to disclose it to further third parties. Our agreements require that these providers offer the same or equivalent protection for your personal data as this Policy provides. Where personal data is transferred out of the European Economic Area, the United Kingdom, or Switzerland, that transfer is covered by Standard Contractual Clauses under Article 46 GDPR or an equivalent lawful transfer mechanism, together with supplementary technical and organisational measures.

6.5 Output generated by AI

Songs, covers, and videos generated for you are stored on our servers so that they appear in your Library. If you choose to post a creation to the community feed, it becomes visible to other users of the App, together with your username and profile picture. Posting is always your explicit action; nothing you create is posted automatically. You can unpost a creation at any time, although we cannot recall copies another user may already have saved or shared.

7. Other Service Providers We Share Data With

Besides the AI providers in Section 6, we share limited data with the following processors, each under a data processing agreement, and each only to the extent needed for the stated purpose:

We may additionally disclose information: to affiliates and companies under common ownership; in connection with a merger, acquisition, or sale of assets; where you have asked us to, for example when you use the share sheet; to the public, where you have made a creation public; and where required by law, to enforce our Terms, or to protect the rights, safety, and property of our users or of us.

We do not sell your personal data, and we do not share it for cross-context behavioural advertising by third parties.

7.1 Refund requests

If you request a refund for an in-app purchase, Apple or Google may ask us for information about your use of the App in order to decide whether the refund is justified — for example, how much you have created since purchasing. Where that happens, we may transfer that usage information to Apple or Google. By requesting a refund through the store you consent to this transfer; our legal bases are your consent and our legitimate interest in responding to the store's enquiry.

8. Community Content and Other Users

If you post a creation to the community feed, other users can see it, play it, like it, and share it. Do not include personal information in a title, prompt, or lyric that you would not want to be public. Information you make public in this way is no longer private, and we cannot control what other users do with it once they have seen it.

9. Children's Privacy

The App is not directed at children. It is rated for users 13 years of age and older, and we do not knowingly collect personal data from children under 13 — or under 16, where a higher age of digital consent applies locally. If we become aware that a child below the applicable age has provided us with personal data, we will delete it and close the account, unless we have a legal obligation to retain it. If you believe a child has provided us with personal data, contact info@singasong.app.

10. Cookies and Similar Technologies (Website)

Our website uses cookies. Cookies are small data files stored on your device; they do not contain viruses and do no harm. We use:

• Strictly necessary cookies — required for the site and checkout to function. The site cannot work properly without these.
• Preference cookies — remember choices such as your language.
• Statistical cookies — help us understand how visitors use the site, in aggregate.
• Marketing cookies — used to measure and target advertising.

You can set your browser to notify you about cookies, to accept them only in individual cases, to refuse them generally, or to delete them automatically when the browser closes. Disabling cookies may limit the site's functionality. Where required by law, we ask for your consent before setting non-essential cookies. The mobile App does not use cookies; it uses the device and advertising identifiers described in Section 3.3.

11. Automated Processing, Moderation, and Automated Decision-Making

11.1. Generation is automated. Your output is produced by AI models without human review. Output may be inaccurate, unexpected, or unsuitable; our Terms of Use set this out in full.

11.2. Moderation is automated. We apply automated checks to prompts, lyrics, and uploads and may refuse a request — for example where it names a recording artist, or contains explicit or hateful content. A refusal blocks that one request, returns any credits it used, and has no other consequence for you.

11.3. We do not carry out automated decision-making or profiling that produces legal effects concerning you, or that similarly significantly affects you. Automated moderation is not such a decision: it affects a single creation request, not your rights, your account standing, or your access to the service. If we ever introduce processing of that kind, we will tell you about the logic involved and its significance and consequences, and we will give you the right to obtain human intervention and to contest the decision.

11.4. You may ask a human to look at any refused request by emailing info@singasong.app.

12. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The criteria we use to determine how long to keep data are: how long we have an ongoing relationship with you; whether we are subject to a legal obligation to retain it; and whether retention is advisable in light of our legal position, for example applicable limitation periods, litigation, or a regulatory investigation.

In practice:

When you delete your account, we deactivate it immediately and your access ends at once — the account can no longer be signed into or used. We retain the records associated with a deactivated account only for as long as necessary for the purposes described in this Policy, and delete or irreversibly de-identify them once they are no longer needed, except where a longer period is required by law or is necessary to resolve a dispute or enforce our agreements.

You can ask us to erase your data outright at any time, whether or not you have deleted your account, by emailing info@singasong.app. We complete verified erasure requests within thirty (30) days. Note that if you ask us to erase your data, you will lose access to your Library, and if you use the App again afterwards we may treat it as a new account.

13. Security

We use TLS encryption in transit — indicated in a browser by https:// and the padlock icon — and encryption at rest. We restrict internal access to personal data on a need-to-know basis, require our processors to maintain equivalent safeguards, review our compliance with this Policy, and provide privacy and security training to staff who handle personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, and we do not accept liability for unauthorised disclosure occurring despite reasonable measures.

14. Data Breach Notification

In the event of a breach of security leading to the accidental or unlawful destruction, loss, alteration, or unauthorised disclosure of your personal data, we will notify you and the relevant supervisory authorities within the timeframes required by applicable law.

15. Your Rights and Choices — All Users

Delete your account. Open your profile and use Delete account. Access ends immediately and the account can no longer be used. Retention after deactivation is described in Section 12. If you want your data erased, rather than only your account closed, email info@singasong.app.

Important: deleting your SingASong account does not cancel a subscription bought from the App Store or Google Play. Cancel the subscription in your store account first, or you will continue to be charged. Our Terms of Use §7.9 explains how.

Withdraw AI data-sharing consent. Settings → AI data sharing — see Section 6.3.

Device permissions. Microphone, camera, photo library, notifications, and — on iOS — app tracking are all managed in your device's system settings and can be changed at any time. Refusing a device permission disables only the feature that needs it.

Advertising identifier. On iOS, decline the App Tracking Transparency prompt or turn tracking off in system settings. On Android, reset or delete your advertising ID in system settings.

Marketing. Where we send marketing email, every message contains an unsubscribe link, and you can opt out at any time without affecting your subscription.

15.1 Rights under the GDPR and UK GDPR

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to:

• Access — obtain confirmation of whether we process your data, a copy of it, and information about the purposes, the categories of data, the recipients, the retention period, and the origin of the data.
• Rectification — have inaccurate or incomplete data corrected without undue delay.
• Erasure — have your data deleted, except where processing is necessary for freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims.
• Restriction — have processing restricted where you contest the accuracy of the data, where processing is unlawful but you oppose erasure, where we no longer need the data but you do, or where you have objected under Art. 21.
• Object — object to processing based on our legitimate interests under Art. 21, and object at any time and without justification to processing for direct marketing.
• Portability — receive your data in a structured, commonly used, machine-readable format, or have it transmitted to another controller.
• Withdraw consent — at any time, by an informal email to info@singasong.app, without affecting the lawfulness of processing carried out before withdrawal.
• Not be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you — see Section 11.
• Complain to a supervisory authority — the competent authority is the one in the Member State of your habitual residence, place of work, or the place of the alleged infringement.

To exercise any of these rights, email info@singasong.app. We respond to verified requests within thirty (30) days, and we do not charge for a first request.

16. Additional Rights for Residents of California, Virginia, Connecticut, Utah, Colorado, Texas, Delaware, and Oregon

We respect the rights granted by the privacy laws of these states, and we will not discriminate against you — in price or in service — for exercising them.

16.1 Your rights

• Right to know and access — obtain a copy of the specific pieces of personal information we have collected about you. This right applies to information relating to you, not to any other user.
• Right to delete — request that we delete your personal information. This may be limited where we are permitted or required by law to retain it. If you request deletion, you may no longer be able to use the App; if you use it again afterwards, we may treat it as a new account.
• Right to correct — request correction of inaccurate personal information we hold about you.
• Right to opt out of "sale" and certain sharing — including what California calls a "sale" or "share" and what Virginia calls "targeted advertising". We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of; the advertising measurement described in Section 7 is carried out only where you have allowed tracking, and you can withdraw that at any time in your device settings.
• Right to obtain additional details about our information practices — generally available in this Policy.

16.2 Categories of personal information we collect

Identifiers (device identifiers, guest account ID, username, and email address if you provide one); commercial information (purchases, subscription state, credit balance); internet or network activity (usage and interaction events); audio, electronic, and visual information (your voice recordings, hummed audio, photos, videos, and the songs and videos generated for you); and inferences drawn only from your stated genre and mood preferences.

16.3 Categories of third parties we disclose it to

Artificial intelligence service providers (Section 6); analytics, attribution, and crash-diagnostics providers; subscription and payment processors; cloud hosting and storage providers; push messaging providers; and advertising networks, where you have allowed tracking.

We do not sell personal information, and we have no knowledge of selling or sharing the personal information of consumers under 16 years of age.

16.4 How to exercise your rights

Email info@singasong.app. We respond to verifiable requests within the timeframe required by applicable law.

16.5 Verification

We are required to take reasonable steps to verify your identity before responding. If we cannot verify your identity or your authority to make the request, and confirm that the information relates to you, we cannot respond to it. We may ask for information sufficient to confirm your identity, such as your user ID, the email address on your account, or your store purchase reference. Requests may be granted in whole, in part, or not at all, depending on their scope and as permitted by law. Where required, we will tell you if we reject your request and why.

16.6 Appeal

If you are a resident of Colorado, Virginia, Connecticut, Texas, Delaware, or Oregon, you have the right to appeal a request we deny after verifying your identity. We will send you the appeal process separately if your request is denied.

16.7 Authorised agent

You may use an authorised agent to exercise a privacy right. An agent must be able to demonstrate authorisation: written authorisation signed by you, including your full name, address, telephone number, and the email address you use with us, or a valid power of attorney. For a request to know, delete, or correct, we will verify the agent's authority directly with you at that email address.

16.8 "Do Not Track" and Global Privacy Control

We do not currently respond to browser "Do Not Track" signals, as there is no common standard for them. If our website detects a Global Privacy Control signal from your device, we will treat it as a request not to sell or share your personal information for targeted advertising, to the extent that the law applicable to you provides for such a request.

16.9 Shine the Light (California)

California residents are entitled, once per calendar year, to ask us for a notice identifying the categories of personal information we share with affiliates or third parties for marketing purposes, and providing contact information for them, and to request deletion of that data. Send an informal written request to info@singasong.app with proof of identity and place of residence. We will respond to verified requests within thirty (30) days.

16.10 Do Not Sell My Personal Information

We do not sell your personal information. If you wish to confirm this position in respect of your own data, or to object to any processing you believe amounts to a sale, email info@singasong.app.

17. Nevada Privacy Rights

Nevada residents may submit a request to opt out of the sale of covered information under Nevada Revised Statutes Chapter 603A to info@singasong.app. We will endeavour to respond to a verified request within sixty (60) days. If we need more time — up to a further thirty (30) days — we will tell you the reason and the extension period in writing.

18. International Users and Transfers

We are based in the United States, and our services are hosted and operated there. Our providers, including the AI providers named in Section 6, are located in the United States and in other countries. If you access the App from outside the United States, your information will be transferred to, stored in, and processed in the United States.

Where we transfer personal data out of the European Economic Area, the United Kingdom, or Switzerland, we rely on Standard Contractual Clauses under Article 46 GDPR, or another lawful transfer mechanism, together with supplementary technical and organisational measures. Processors in a third country receive access to personal data only where that country offers an adequate level of protection under an adequacy decision, or where we have put appropriate safeguards in place.

19. Third-Party Sites and Services

The App and our website contain links to services we do not operate — for example an app store listing, a share destination, or a provider's own privacy policy. We are not responsible for the privacy practices or the content of those services. We encourage you to read the privacy policy of any third-party service you use.

20. Complaints and Enforcement

We review our compliance with this Policy. If you have a concern or a complaint about how we handle your personal information, contact info@singasong.app — this is also the address for privacy complaints and grievances. We will investigate and try to resolve it. If we cannot, you retain the right to complain to your competent data protection or consumer authority, and to pursue any legal remedy available to you under the law of the country where you live.

21. Accessibility and Changes to This Policy

21.1. If you need this Privacy Policy in an alternative format, contact info@singasong.app and we will provide one.

21.2. We may update this Privacy Policy periodically. Use of information we have already collected is subject to the Policy in force at the time it is used. Material changes will be posted in the App or on our website with an updated "Last revised" date, and where practical we will also notify you by in-app notice or email. Where a change concerns how we share your data with AI providers, we will ask for your consent again before continuing.

22. Contact Us

Company Information and Contact Details:

Company: Alvin AI Studio LLC
Address: 447 Broadway, 2nd Floor Suite 3007
City: New York, NY 10013
Country: USA

Customer Service Contact:
For any questions, support, or requests, please contact us at: info@singasong.app