Privacy Policy
1. Who we are
Songlet is an iOS and iPadOS app that writes original songs, and optionally music videos, from what you give it. It is operated by BlueFriday Limited (“we”, “us”).
BlueFriday Limited is the controller of the personal data described in this policy.
Website: songlet.app · Support: songlet.app/about · This policy: songlet.app/privacy
2. Summary
- No account. No sign-up, email, password or Sign in with Apple. The app uses an anonymous, randomly generated device identifier.
- No ads, no tracking, no third-party analytics. We do not include advertising, third-party analytics or crash-reporting SDKs, and we do not track you across other apps or websites.
- Your content is deleted within 24 hours. Uploaded photos and generated audio and video are deleted from our servers within 24 hours; prompt text is kept no longer than 24 hours after a generation completes.
- Dictation stays on your device. Speech recognition runs on the device; your voice is never uploaded.
- Your library stays on your device. Your songs, lyrics and settings are stored only on your device.
- We do not sell your personal data.
3. Information we process
Content you provide
To make a song or video, you give the app some of the following: a recipient’s name, up to three keywords, a short description (up to 300 characters), lyrics you wrote, 1–10 photos, an “inspiration” card (an occasion or scene), and choices such as genre, vocals and language. This content is sent to our backend and to our AI service providers to generate your song or video.
Photos
You choose photos with Apple’s photo picker, so the app never has access to your full photo library. Photos are resized on your device (to at most 1024 pixels, JPEG) and then uploaded for generation, including as optional reference photos for music videos.
Device identifier and request metadata
The app creates a random identifier (a UUID) and stores it in the iOS Keychain. It serves as your anonymous account key. Each request to our backend also carries: that identifier, platform, app version and build, operating-system version, device model, app language, time-zone offset, your App Store storefront country and your device region. The storefront country and region are used only to choose musical culture and language defaults; the app never blocks anything based on region.
The app may use Apple’s App Attest / DeviceCheck to confirm that requests come from a genuine copy of the app.
Purchase information
Payments are handled entirely by Apple; we never receive your card details. The device identifier is passed to the App Store as the purchase’s account token, so your purchases are linked to it. We verify purchases using Apple’s signed transactions and App Store Server Notifications, and we keep transaction IDs and a ledger of your credits.
Processing that happens only on your device
- Dictation: uses Apple’s on-device speech recognizer. Audio is never uploaded.
- Description polishing: an optional on-device Apple language model may tidy your description before it is sent. This step runs on the device only.
- Your library: songs, lyrics and settings are stored only on your device. There is currently no cloud sync (iCloud sync is not offered). Deleting the app deletes your library.
- Notifications: the app may show a local reminder when a video is expected to be ready. No push notification service is used.
What we do not collect
We do not collect your name as an account holder, email address, phone number, contacts, precise location or full photo library. The app has no social features — no feed, comments or public profiles.
4. How we use information
- To make what you ask for — generating songs and music videos from your content, and allowing retries.
- To run your purchases and credits — verifying App Store purchases, granting credits and keeping your credit balance.
- To keep the service safe — before submission we check for real artists’ names, imitation requests and copied lyrics; photos are screened by an AI image-safety check, and prompts pass through the model’s safety filters. App Attest / DeviceCheck helps prevent fraud and abuse.
- To tailor defaults — your storefront country and region pick suitable lyric language, genres and festivals.
Legal bases (EEA / UK): we process your content, identifier and purchase data because it is necessary to perform our contract with you (making the songs you ask for). We process data for fraud prevention and abuse protection on the basis of our legitimate interests.
Every song carries an invisible AI watermark embedded by the model, which cannot be removed, and is labelled “AI generated” in the app, on share cards and in file metadata; videos carry a visible “AI” badge.
5. AI processing
Songs and videos are generated with third-party AI models operated by our AI service providers. The content you provide for a generation is sent to them for that purpose only. Songlet uses these providers under a paid tier, under which they do not use your submitted content to train or improve their models.
7. How long we keep information
- Uploaded photos and generated audio and video: deleted from our servers within 24 hours. Download anything you want to keep.
- Prompt text (names, keywords, descriptions, lyrics): kept for up to 24 hours after a generation completes, so it can be retried.
- What our backend keeps otherwise: your device identifier, purchase transaction IDs, your credit ledger and task metadata. Task metadata does not include prompt text. You can ask us to delete this data (see Your choices and rights).
- On your device: your library stays until you delete it or delete the app.
8. Security
Information sent between the app, our backend and our AI service providers is encrypted in transit with TLS. Server copies of your content are short-lived, as described above. No method of transmission or storage is completely secure, but we limit what we keep to reduce risk.
9. Your choices and rights
- Choose what you share. Photos and lyrics are optional, and the app sees only the photos you pick.
- Delete your library by deleting the app; the library exists only on your device.
- Delete server data. Contact us through our support page at songlet.app/about to request deletion of server-side data tied to your device identifier. Server copies of your content expire within 24 hours anyway.
- Notifications can be turned off at any time in iOS Settings.
EEA and UK residents
Under the GDPR and UK GDPR you have the right to access, correct or delete your personal data, to restrict or object to its processing (including processing based on legitimate interests), and to data portability. To exercise these rights, contact us through our support page at songlet.app/about. Because we do not hold your name or email, we may ask you to help us identify the data tied to your device. You also have the right to lodge a complaint with your local data protection supervisory authority.
California residents
Under the CCPA you have the right to know what personal information we collect and how we use it, to request its deletion, and to not be discriminated against for exercising your rights. We do not sell or share personal information (as those terms are defined in the CCPA), and we do not use it for cross-context behavioural advertising.
10. Children
Songlet is rated 4+ on the App Store, but the service is not designed for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us through our support page at songlet.app/about and we will delete it.
11. International transfers
Our service providers may process data in countries other than the one where you live. Where this happens, we rely on appropriate safeguards, including standard contractual clauses where required.
12. Changes to this policy
We may update this policy as Songlet changes. We will post the new version at songlet.app/privacy and update the “Last updated” date above.
13. Contact us
BlueFriday Limited
Support: songlet.app/about