Song Studio

Your songs stay private.

A plain-language summary of how Song Studio handles personal data.

Controller and contact

Katarzyna Ludwig, 2209 Skyler Dr, Mount Pleasant, SC 29466-9394, United States, is the controller and provider of Song Studio. For privacy or support requests, email support@songstudio.app.

What we process

  • An automatically created guest identifier with no name or email, to provide credits, generation, delivery, and purchases.
  • New guests use the anonymous guest identity and are not offered account linking. Existing accounts previously linked with Apple remain supported.
  • Your unfinished song idea and genre, plus one previous draft for restoration, are stored only on this iPhone. They remain until replaced, restored, cleared after an exact submission, or the app is deleted, as applicable.
  • Your song idea and genre to create the requested song and individual cover.
  • Generated lyrics, audio, and cover art for temporary delivery and import into your library.
  • Job, download, and integrity information such as status, time, size, and checksum for delivery, troubleshooting, and abuse prevention.
  • Apple purchase and transaction information, such as product, transaction ID, and signed proof, to provide credits and prevent duplicate crediting.
  • If you enable a notification category, a random installation ID, APNs device token, selected notification categories, locale, app environment, and delivery status to send the update you requested.
  • Technical request information, which may include IP address and service logs, for operation, security, and abuse prevention.
  • Messages you send to support, to answer your request.

The one-time 18+ confirmation is stored on your device. Each creation request tells our backend that this confirmation was completed; we do not send a birth date or request identity documents. Please do not include confidential or particularly sensitive information in a song idea.

How AI creation works

Before the first creation, the app asks you to confirm AI processing. Each creation sends your song idea and genre through Supabase and OpenRouter to Google Lyria 3 Pro Preview. Short excerpts of the idea and generated lyrics go to Google Gemini 3.1 Flash Lite for the song title and to Google Gemini 3.1 Flash Image for the cover. No model-provider secret is included in the app.

OpenRouter input/output logging and its 1% data-use setting are disabled for this service. Requests use paid endpoints, and routing to paid endpoints that train on request data is disabled. OpenRouter still processes non-content request metadata. Google may retain prompts, contextual information, and outputs for up to 55 days for safety and abuse monitoring.

Apple handles payment. After the one-time 18+ confirmation, new guests can create and buy without registration or Apple sign-in. Existing accounts previously linked with Apple remain supported. Song Studio, Supabase, and Vercel process limited signed StoreKit transaction data to verify purchases, credit packs, refunds, and revocations.

One-time welcome song

Version 1.1 can provide one welcome song per App Store account and app. To check eligibility without registration, Song Studio sends Apple’s signed AppTransaction through its authenticated Supabase service to a separately authenticated Vercel verifier. The signed proof and decoded AppTransaction ID are used only for verification and are not stored or logged.

After verification, Supabase stores a keyed HMAC-derived identifier and the minimum eligibility state, including the generation-job ID and a request hash needed to recognize an exact retry. This record contains no song idea, raw AppTransaction, or raw receipt. It remains while the one-time offer is enforced, including after guest-account deletion, so reinstalling the app or creating a new guest identity cannot provide another welcome song for the same App Store account and app. The identifier is not used for advertising, cross-app tracking, or identifying a person. Verification rate-limit records are linked to the guest identity and are deleted with that identity.

Voluntary notifications and Apple offer codes

If notifications are available in your version of Song Studio, you choose song-ready updates and offers separately in Settings. We process the random installation ID, APNs device token, selected categories, locale, app environment, and a limited delivery record to send the update you requested, avoid duplicate delivery, and handle invalid tokens. Turning a category off stops delivery for it; deleting your account removes its notification registration and delivery records.

If you choose to redeem an Apple offer code, the app sends the signed StoreKit transaction and signed AppTransaction to our verifier so Apple’s signature, product, offer type, app transaction, and credit claim can be checked. These signed proofs are transient and are not stored or logged. The minimum purchase and credit-ledger records remain under the retention terms below to prevent duplicate credits, support reversals, and provide the purchased credits. Receiving a notification or opening a redemption link does not add a credit.

Where data is processed

We use a Supabase project in Central EU (Frankfurt) for account, credit, job, and temporary delivery infrastructure; OpenRouter and Google for AI creation; Vercel for this website, signed Apple purchase verification, and the APNs relay; Apple Push Notification service for enabled notifications; and Apple iCloud Mail for support email. Providers and their subprocessors may also process data outside the European Economic Area. Where GDPR transfer rules apply, we rely on the safeguards in the applicable processor or provider agreement, including an adequacy decision or EU Standard Contractual Clauses where applicable.

Retention and deletion

  • Library: songs, albums, song ideas, audio, lyrics, and covers remain app-private on this iPhone until you delete them or the app. There is no live CloudKit sync. A device backup may include app data.
  • Server prompt: removed after successful song-and-cover generation. After a failure or safety block, it is scheduled for deletion after 24 hours; delayed cleanup may complete later.
  • Temporary delivery: generated lyrics and access to audio and cover files remain available for no more than 30 days. Physical file deletion may complete later through recurring cleanup.
  • Guest identity, credits, and purchases: minimum records remain while the guest or a previously Apple-linked identity exists. After deletion, pseudonymised StoreKit transaction and reversal records and a random purchase-account token may remain without a Supabase user ID to prevent duplicate credits and reconcile refunds. No fixed deletion period is currently configured for these technical records.
  • Support: messages received at support@songstudio.app are processed in Apple iCloud Mail and retained only as long as needed for support, security, refunds, legal claims, or legal obligations.
  • Website: Vercel and its service providers may process technical request information, including IP address and access logs, in the normal operation and security of the site. We do not use advertising cookies or cross-site tracking on this static site.

Sharing and Photos

When you create a song video, it is rendered locally. With add-only Photos permission, Song Studio saves a copy to Photos and then opens the iOS share sheet. If Photos access is denied, sharing still works. Apple and any destination app you choose process the shared copy under their own terms.

Legal bases and your rights

For people in the EEA or UK, we process account, creation, delivery, and purchase data as necessary to provide the requested service (Art. 6(1)(b) GDPR); meet legal obligations (Art. 6(1)(c)); and protect the service from fraud and abuse (Art. 6(1)(f)). You can stop future AI requests in Settings → Datenschutz → KI-Verarbeitung.

You may request access, correction, deletion, restriction, portability, or object to processing. Email support@songstudio.app. You may also complain to your data-protection authority.

Delete your account

In the app, choose Settings → Account → Delete account. This deletes the guest or previously Apple-linked backend identity and immediately blocks new backend actions. Music already on this iPhone is not automatically deleted. Provider safety-retention periods may still apply.

Services referenced

Apple Privacy Policy · Supabase Privacy Policy · OpenRouter Privacy Policy · Google Privacy Policy · Vercel Privacy Policy