Privacy Policy

Effective Date: July 8, 2026

GiftSong ("we," "our," or "the Service") lets you create personalized AI-generated songs using your own voice or an AI singer. This Privacy Policy explains what information we collect, how we use it, and the choices you have when using the iOS app, the web app, and shareable gift pages.

1. Information We Collect

1.1 Voice Recordings

When you record a voice sample in the App, the audio is uploaded to our servers and forwarded to a third-party AI music service for voice cloning. We retain a copy of your original recording on our servers so that your voice profile can be rebuilt if needed, without requiring you to re-record. You can delete your voice recording at any time through the App's Settings.

1.2 Messages & Lyrics

When you write a message to generate a song, that text is sent to our servers and used as lyrics for AI music generation. We store your message alongside the generated song so you can view your song history within the App.

1.3 Generated Songs

The AI-generated songs (audio files) are stored on our servers. This allows you to replay your songs, view your history, and share them via gift links. Songs remain stored until you delete them or your data is removed per our retention policy.

1.4 Analytics & Performance

We collect pseudonymous usage data to understand how the App is used and to improve it. This includes:

• Device model and operating system version
• App performance metrics and crash diagnostics
• Usage events (e.g., songs generated, features used) — linked to a random device identifier, not your identity

1.5 Web Accounts & Email Verification

If you use GiftSong in a browser, you may create an account with your email address and password. We use your email to verify your account, help you sign in, reset your password, and send transactional messages related to your account. We do not use verification or password reset emails for marketing.

1.6 Subscription & Payments

On iOS, subscriptions and payments are processed through Apple's App Store. On the web, subscriptions and voice credit purchases are processed through Stripe. We do not store your full payment card number. We store purchase status, plan, credit balance, Stripe customer identifiers, transaction identifiers, and related metadata needed to provide paid features, prevent duplicate fulfillment, support refunds, and reconcile purchase records.

1.7 Purchase Tracking

We use RevenueCat to track purchase status and entitlements across iOS and web purchases. Purchase data is associated with a pseudonymous customer token so that subscriptions and credits can be applied to the correct account or installation.

1.8 Push Notifications

If you grant notification permission, we receive a device token from Apple to send you alerts when your song is ready. This token is not linked to your identity and is used solely for delivering notifications related to your song generation.

1.9 Technical Data

Like most internet services, our servers automatically receive certain technical information when you use the App, including your IP address and general network information. IP addresses are not stored long-term and are not used to identify you.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Core functionality — processing your voice recording, generating songs from your messages, and delivering your musical gifts
• Song history — allowing you to replay and share previously generated songs
• Notifications — alerting you when a song generation is complete
• App improvement — diagnosing technical issues, measuring engagement, and identifying areas to improve
• Subscription and credit management — verifying purchases, opening billing flows, applying credits, and preventing duplicate fulfillment
• Account access — creating web sessions, sending verification codes, and supporting password resets

We do not sell your personal information. We do not use your voice recording or messages for any purpose other than generating your requested songs.

3. Voice Recording & AI Processing

Your voice is central to the GiftSong experience, and we want to be transparent about how it is handled:

• What happens when you record: Your voice sample is uploaded to our servers, then forwarded to our AI music generation provider to create a voice profile. On the web, the recording is captured through your browser only after you grant microphone permission.
• Server storage: We keep a copy of your original recording on our servers. This backup allows us to restore your voice profile automatically if it needs to be rebuilt — so you never have to re-record.
• Automatic cleanup: Voice profiles that have not been used for 30 days are automatically removed from the AI provider's systems. Your original recording remains on our servers until you choose to delete it.
• Your control: You can replace or delete your voice recording at any time from Settings within the App. When you delete it, both the server copy and the AI voice profile are removed.

4. Sharing & Gift Links

When you share a song, a unique link is created (e.g., giftsong.net/gift/...). Please be aware:

• Gift links are publicly accessible — anyone with the link can listen to the song, view its title, and read the lyrics.
• Gift links do not reveal your name, device information, or any personally identifiable information.
• Links use a cryptographically random identifier that cannot be guessed or enumerated.
• Once shared, a link cannot currently be revoked. Please share thoughtfully.

5. Third-Party Services

We use a minimal set of third-party services to operate the App:

• Mureka (via useapi.net) — AI music generation and voice cloning. Your voice recording and song lyrics are processed by this service. mureka.ai
• Mixpanel — pseudonymous analytics to understand app usage patterns. No personally identifiable information is sent. Mixpanel Privacy Policy
• Cloudflare — infrastructure hosting, database, file storage, security protection, and transactional email delivery. Data is processed on Cloudflare's global edge network. Cloudflare Privacy Policy
• Apple App Store — subscription and payment processing. Apple Privacy Policy
• Stripe — web checkout, subscription billing, one-time voice credit purchases, and customer portal access. Stripe Privacy Center
• RevenueCat — purchase entitlement tracking and subscription analytics across supported platforms. RevenueCat Privacy Policy

We do not use additional analytics, advertising, or crash reporting services beyond those listed above.

6. Data Retention

• Voice recordings: Stored on our servers until you delete them via Settings. AI voice profiles unused for 30 days are automatically cleaned up from the AI provider.
• Songs & messages: Stored as long as your song history is maintained. You may request deletion at any time.
• Web account data: Stored while your account remains active or as needed to provide the Service, prevent abuse, resolve disputes, and satisfy legal obligations.
• Payment and entitlement records: Stored as needed for billing, refund support, fraud prevention, accounting, and purchase reconciliation.
• Analytics data: Retained according to Mixpanel's data retention policies.
• Push notification tokens: Stored until replaced by a new token or until you uninstall the App.
• Security nonces: Temporary anti-replay tokens are automatically purged within minutes of expiry.

7. Data Security

We implement the following measures to protect your data:

• All communication between the App and our servers is encrypted via HTTPS.
• API requests are authenticated using cryptographic signatures to prevent tampering and replay attacks.
• Audio files are served via time-limited URLs that expire after 2 hours, preventing unauthorized long-term access.
• Rate limiting is enforced on all API endpoints to prevent abuse.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

GiftSong is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your data (voice recordings can be deleted in-app where supported; for full account or data deletion, contact us)
• Object to or restrict certain processing activities

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

10. International Data Processing

Our servers are operated on Cloudflare's global edge network, and our service providers may process data in the United States and other countries where they operate. By using the Service, you understand that your information may be transferred to and processed in those locations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top. We encourage you to review this page periodically. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: [email protected]
Website: giftsong.net