Privacy Policy

Effective Date: April 11, 2026

GiftSong ("we," "our," or "the App") is a mobile application that lets you create personalized AI-generated songs using your own voice. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We built GiftSong with privacy in mind — no account creation is required, and we limit data collection to what is necessary for the App to function.

1. Information We Collect

1.1 Voice Recordings

When you record a voice sample in the App, the audio is uploaded to our servers and forwarded to a third-party AI music service for voice cloning. We retain a copy of your original recording on our servers so that your voice profile can be rebuilt if needed, without requiring you to re-record. You can delete your voice recording at any time through the App's Settings.

1.2 Messages & Lyrics

When you write a message to generate a song, that text is sent to our servers and used as lyrics for AI music generation. We store your message alongside the generated song so you can view your song history within the App.

1.3 Generated Songs

The AI-generated songs (audio files) are stored on our servers. This allows you to replay your songs, view your history, and share them via gift links. Songs remain stored until you delete them or your data is removed per our retention policy.

1.4 Analytics & Performance

We collect pseudonymous usage data to understand how the App is used and to improve it. This includes:

• Device model and operating system version
• App performance metrics and crash diagnostics
• Usage events (e.g., songs generated, features used) — linked to a random device identifier, not your identity

1.5 Subscription & Payments

All subscriptions and payments are processed exclusively through Apple's App Store. We never receive, process, or store your payment card details, billing address, or Apple ID. We only receive a confirmation of your subscription status to unlock premium features.

1.6 Push Notifications

If you grant notification permission, we receive a device token from Apple to send you alerts when your song is ready. This token is not linked to your identity and is used solely for delivering notifications related to your song generation.

1.7 Technical Data

Like most internet services, our servers automatically receive certain technical information when you use the App, including your IP address and general network information. IP addresses are not stored long-term and are not used to identify you.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Core functionality — processing your voice recording, generating songs from your messages, and delivering your musical gifts
• Song history — allowing you to replay and share previously generated songs
• Notifications — alerting you when a song generation is complete
• App improvement — diagnosing technical issues, measuring engagement, and identifying areas to improve
• Subscription management — verifying your subscription status to provide access to premium features

We do not sell your personal information. We do not use your voice recording or messages for any purpose other than generating your requested songs.

3. Voice Recording & AI Processing

Your voice is central to the GiftSong experience, and we want to be transparent about how it is handled:

• What happens when you record: Your voice sample (15–60 seconds) is uploaded to our servers, then forwarded to our AI music generation provider to create a voice profile.
• Server storage: We keep a copy of your original recording on our servers. This backup allows us to restore your voice profile automatically if it needs to be rebuilt — so you never have to re-record.
• Automatic cleanup: Voice profiles that have not been used for 30 days are automatically removed from the AI provider's systems. Your original recording remains on our servers until you choose to delete it.
• Your control: You can replace or delete your voice recording at any time from Settings within the App. When you delete it, both the server copy and the AI voice profile are removed.

4. Sharing & Gift Links

When you share a song, a unique link is created (e.g., giftsong.net/gift/...). Please be aware:

• Gift links are publicly accessible — anyone with the link can listen to the song, view its title, and read the lyrics.
• Gift links do not reveal your name, device information, or any personally identifiable information.
• Links use a cryptographically random identifier that cannot be guessed or enumerated.
• Once shared, a link cannot currently be revoked. Please share thoughtfully.

5. Third-Party Services

We use a minimal set of third-party services to operate the App:

• Mureka (via useapi.net) — AI music generation and voice cloning. Your voice recording and song lyrics are processed by this service. mureka.ai
• Mixpanel — pseudonymous analytics to understand app usage patterns. No personally identifiable information is sent. Mixpanel Privacy Policy
• Cloudflare — infrastructure hosting (servers, database, file storage). Data is processed on Cloudflare's global edge network. Cloudflare Privacy Policy
• Apple App Store — subscription and payment processing. Apple Privacy Policy

We do not use additional analytics, advertising, or crash reporting services beyond those listed above.

6. Data Retention

• Voice recordings: Stored on our servers until you delete them via Settings. AI voice profiles unused for 30 days are automatically cleaned up from the AI provider.
• Songs & messages: Stored as long as your song history is maintained. You may request deletion at any time.
• Analytics data: Retained according to Mixpanel's data retention policies.
• Push notification tokens: Stored until replaced by a new token or until you uninstall the App.
• Security nonces: Temporary anti-replay tokens are automatically purged within minutes of expiry.

7. Data Security

We implement the following measures to protect your data:

• All communication between the App and our servers is encrypted via HTTPS.
• API requests are authenticated using cryptographic signatures to prevent tampering and replay attacks.
• Audio files are served via time-limited URLs that expire after 2 hours, preventing unauthorized long-term access.
• Rate limiting is enforced on all API endpoints to prevent abuse.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

GiftSong is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your data (voice recordings can be deleted in-app; for full data deletion, contact us)
• Object to or restrict certain processing activities

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

10. International Data Processing

Our servers are operated on Cloudflare's global edge network. Your data may be processed in the United States or other countries where Cloudflare operates. By using the App, you consent to the transfer of your information to these locations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top. We encourage you to review this page periodically. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: support@giftsong.net
Website: giftsong.net