Privacy Policy

What Data We Collect

Account Information

• Email address — used for login, account recovery, and service notifications.
• Authentication data — managed by BetterAuth (session tokens, login method).
• Display name (optional) — if you choose to set one.

Voice Data

• Voice recording — a 60-second singing clip you record in the app. This is the core of how SongRise works.
• Voice clone identifier — when Mureka AI processes your recording, they return a vocal_id that references your cloned voice. We store this ID to generate future songs without re-uploading your recording every time.
• Original recording file — stored in Cloudflare R2 (encrypted at rest) so you can re-clone or we can troubleshoot quality issues.

Song Data

• Affirmation goal selections — the themes and goals you choose for your songs.
• Generated lyrics — the AI-written affirmation lyrics for each song.
• Generated songs — the final MP3 audio files.
• Song metadata — creation date, duration, affirmation theme, generation status.

Payment Information

We do not store your payment details. All payments are processed by Apple (for In-App Purchases) or Stripe (for web purchases). Stripe stores card details; we only receive a transaction reference and subscription status.

Usage Data

• Analytics events — page views, feature usage, song generation counts. Collected by PostHog. No personally identifiable information is tied to analytics events.
• Error reports — crash data and error logs collected by Sentry to fix bugs. May include device type and OS version. Does not include voice data or song content.

How We Use Your Data

We do not use your voice data to train AI models. We do not use your data for advertising. We do not build profiles for ad targeting.

Who We Share Data With

We share your data only with the service providers needed to run SongRise:

No one else. We do not sell, rent, or share your voice data with anyone not listed above.

Voice Data: The Details

Your voice is the most sensitive data we handle. Here's exactly what happens:

• Collection: You tap "Record" and sing for 60 seconds. The recording is captured on your device.
• Transmission: Uploaded to our servers (encrypted via TLS), then sent to Mureka AI for voice cloning.
• Storage: Original recording in Cloudflare R2, encrypted at rest. Voice clone ID stored in our database.
• Retention: Kept as long as your account is active. Deleted within 30 days of account deletion.

What we never do with your voice:

• Sell it.
• Use it to train AI models.
• Share it with anyone other than Mureka AI for song generation.
• Keep it after you ask us to delete it (beyond the 30-day processing window).

Data Retention

How to Delete Your Data

You can delete your account and all associated data at any time:

1. In the app: Go to Settings > Account > Delete Account.
2. By email: Send a request to privacy@songrise.app from your registered email.

When you delete your account, we delete your voice recording from Cloudflare R2, your voice clone from Mureka AI's systems, all your generated songs, and your account information. Deletion is processed within 30 days. It is permanent and cannot be undone.

Your Rights Under GDPR

If you're in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights to: access, rectification, erasure, portability, restriction, objection, and withdrawal of consent. To exercise any right, email privacy@songrise.app. We respond within 30 days.

Your Rights Under CCPA

If you're a California resident: you have the right to know what personal information we collect, the right to delete, the right to opt out of sale (we do not sell your personal information), and the right to non-discrimination.

Children's Privacy

SongRise is not intended for children under 13. We do not knowingly collect personal information, including voice recordings, from children under 13. Users between 13 and 17 may use SongRise with parental consent.

Cookies and Tracking

We use essential cookies for session authentication and PostHog for anonymous session tracking (first-party cookie, no cross-site tracking). We do not use third-party advertising cookies, ad networks, or tracking pixels.

Data Security

All data transferred uses TLS 1.2+. Voice recordings and songs stored in Cloudflare R2 are encrypted at rest. Access controls restrict voice data access to authorized systems only. If we discover a data breach affecting your voice data, we will notify you within 72 hours.

International Data Transfers

Your data may be processed in the United States (our servers on Railway), on Mureka AI's servers, and on Cloudflare's global infrastructure. For EEA/UK users, we rely on Standard Contractual Clauses (SCCs) and adequacy decisions.

Changes to This Policy

We may update this policy. For material changes (especially anything affecting voice data handling), we'll notify you by email or in-app notification at least 30 days before the change takes effect.

Contact Us

• Email: privacy@songrise.app
• General support: support@songrise.app
• Website: songrise.app

Summary