Privacy Policy — SongCraft

1. Introduction

SongCraft is operated by Heijnes Digital (KvK 99250926), a company registered in the Netherlands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SongCraft mobile application and website (collectively, the "Service").

SongCraft is an AI-powered personalized song generator that creates custom songs based on descriptions you provide. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Company Information

3. Data We Collect

We collect the following categories of personal data when you use SongCraft:

3.1 Account Information

• Email address (when you create an account or sign in)
• Display name (if provided)
• Authentication provider data (Apple Sign-In, Google Sign-In)

3.2 Song Creation Data

• Person descriptions and traits you provide for song creation
• Selected song modes (Roast Battle, Love Song, Birthday, Breakup, Hype)
• Selected music styles (Pop, Rap, Rock, Country, R&B, EDM, Acoustic, Reggaeton)
• AI-generated lyrics and song content
• Generated audio files

3.3 Usage Analytics

• App usage patterns and feature interactions
• Device information (type, operating system, app version)
• Crash reports and error logs
• Session duration and screen views

3.4 Payment Information

• Purchase history (song purchases, subscription status)
• Payment details are processed by the App Store (Apple), Google Play, RevenueCat, and Stripe — we do not store your credit card information

4. How We Use AI

SongCraft uses artificial intelligence to create personalized songs:

• Lyrics Generation: Your person descriptions are processed by the Anthropic Claude API to generate personalized song lyrics. Descriptions are sent to Anthropic's servers for processing and are subject to Anthropic's Privacy Policy.
• Music Generation: Generated lyrics are processed by ElevenLabs to produce the final audio track. Data is sent to ElevenLabs' servers and is subject to their privacy policy.

We do not use your personal descriptions to train AI models. Descriptions are used solely for the purpose of generating your requested song.

5. Data Storage & Security

Your data is stored on Supabase infrastructure located in the European Union (EU). Generated audio files are stored in cloud storage. We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/SSL) and at rest
• Row-level security on database tables
• Secure authentication via Supabase Auth
• Regular security reviews

6. Third-Party Services

We share data with the following third-party services:

7. Sharing Songs

SongCraft allows you to share your generated songs with others. When you choose to share a song, a shareable link is created that allows recipients to listen to the song. Once a song is shared, the recipient's access to and use of the shared content is their own responsibility. We recommend only sharing songs with people you trust.

8. Your Rights (GDPR)

As we are based in the Netherlands and process data within the EU, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Request an export of your data in a structured, machine-readable format
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Object to data processing based on legitimate interest
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@heijnesdigital.com. We will respond within 30 days.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Generated songs and associated audio files will be deleted along with your account. Anonymized, aggregated analytics data may be retained indefinitely.

10. Children's Privacy

SongCraft is not designed for or directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information as soon as possible. If you believe a child under 13 has provided us with personal data, please contact us at privacy@heijnesdigital.com.

11. Cookies & Tracking

Our website may use essential cookies required for the website to function properly (e.g., authentication sessions). We use PostHog for product analytics, which may set cookies to track usage patterns. You can disable cookies in your browser settings, though this may affect certain features.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

For privacy-related inquiries regarding SongCraft, please contact us at privacy@heijnesdigital.com. For general support, contact us at support@heijnesdigital.com.

Heijnes Digital, The Netherlands. KvK 99250926.

Useful Links

• Terms of Service
• Support