Privacy Policy — Song AI
Last updated: 12 September 2026
Song AI (“the app”) is published by Code Stellar LLC (“we”, “us”, “our”). We are the controller of the information described here. This policy explains what happens to information when you use the app.
The short version. The app has no accounts and never asks for your name, email address, phone number or contacts. The words you write are sent to an AI music service so it can compose your song. Your finished songs are saved on your device, not on our servers. We collect anonymous usage and crash information to keep the app working.
1. Information the app processes
1.1 The words you write
When you create a song, the lyrics or description you type — and, if you use a guided occasion, the short answers you give — are sent to a third-party AI music generation service so it can write and perform your song. The same applies when you ask the AI to write or extend lyrics for you.
Nothing that identifies you is sent with them. No name, email address, account identifier, contacts or device identifier accompanies the text.
The app asks for your explicit permission before this happens for the first time, and you can withdraw that permission at any time under Settings → AI & Privacy. Withdrawing it stops new songs from being created, because composing a song is not possible without sending the words.
Do not put information in your lyrics that you would not want processed by a third party — for example another person’s contact details, health information, or financial details.
1.2 Your songs
Finished songs, their artwork, and any lyric videos you render are downloaded to your device and stored there. They are not uploaded to an account, a public feed, or any server of ours. They are included in your device’s normal iCloud or computer backup, and are deleted when you delete the song in the app or delete the app itself.
The AI service temporarily holds the audio it generates on its own infrastructure so the app can download it. Its retention is governed by that provider’s own privacy policy.
1.3 Usage and diagnostic information
To understand whether the app works and where it fails, we collect:
- Events describing what happened, never what you wrote — for example “a song was created”, the musical style chosen, how long generation took, which screen was viewed, whether a purchase succeeded or failed, and the category of any error. Your lyrics, prompts, song titles and audio are never included in this data.
- Crash reports — the technical state of the app when it stopped working, plus the last screen you were on and the broad category of user you are (see below).
- Coarse grouping information — whether you have a subscription, a bucketed count of songs created (for example “5–9”), what you said you came to make during onboarding, and whether notifications are enabled. These are ranges and categories; they cannot identify you.
This is processed by Google Firebase (Analytics, Crashlytics and Remote Config), which also automatically collects standard technical information such as an app instance identifier, device model, operating system version, language and the country derived from your IP address.
1.4 Subscription information
Subscriptions are sold and billed by Apple. We never see or receive your payment details, card number or Apple Account credentials.
To know whether your subscription is active across reinstalls and devices, we use RevenueCat, which receives an anonymous, randomly generated identifier, your App Store purchase receipt, and two non-identifying attributes: how many songs you have created and which screen last led you to the subscription offer.
1.5 Advertising measurement
The app collects the Apple Search Ads attribution token so we can tell whether an advertisement led to an installation. If you allow tracking when iOS asks, advertising identifiers may also be used to measure advertising performance. If you decline, the app continues to work exactly the same way. You can change your answer at any time in iOS Settings → Privacy & Security → Tracking.
1.6 Notifications
Notifications are created and scheduled on your device — for example to tell you that your song is ready. There is no push server and no device token is sent to us. You can turn notifications off at any time in iOS Settings.
1.7 Information stored only on your device
A small amount of information never leaves your phone: your consent choice, counters such as how many songs you have made, a record of when songs were delivered (used to enforce fair use, stored in the device keychain), and the settings that control which prompts you have already seen.
2. Why we process this information, and on what basis
| Purpose | Information used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Composing the song you asked for | The words you write | Performance of a contract, and your explicit consent |
| Keeping the app working and diagnosing crashes | Usage events, crash reports | Legitimate interests |
| Knowing whether your subscription is active | Anonymous ID, purchase receipt | Performance of a contract |
| Measuring advertising | Attribution token, advertising identifier | Consent (the iOS tracking prompt) |
We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined under California law.
3. Who else receives information
| Recipient | What they receive | Their policy |
|---|---|---|
| Our third-party AI music generation provider | The lyrics or description you write, and the musical style | Available on request — see below |
| Google (Firebase Analytics, Crashlytics, Remote Config) | Usage events, crash reports, standard technical identifiers | https://firebase.google.com/support/privacy |
| RevenueCat | Anonymous identifier, purchase receipt, subscription state | https://www.revenuecat.com/privacy |
| Apple | Payment and subscription processing; advertising attribution | https://www.apple.com/legal/privacy/ |
We do not publish the identity of our AI music generation provider, because it is commercially confidential. This does not reduce your rights: we remain responsible for that processing, the provider acts on our instructions under a written data processing agreement, and if you make a formal request under section 5 we will tell you who it is.
These providers process information on servers that may be located outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or an equivalent safeguard.
We do not otherwise share information, except where we are legally required to do so.
4. How long information is kept
- Songs and their files: on your device until you delete them.
- The words you send for composition: retained by the AI service under its own policy.
- Usage events and crash reports: retained by Firebase under Google’s retention settings, up to 14 months.
- Subscription records: for as long as needed to honour your subscription and to meet our tax and accounting obligations.
- Information stored on your device: until you delete the app.
5. Your choices and rights
- Stop sending your words: turn off the toggle under Settings → AI & Privacy.
- Delete your songs: delete them in the app, or delete the app to remove everything stored on the device.
- Turn off notifications or tracking: in iOS Settings.
- Cancel your subscription: in your Apple Account subscription settings.
Depending on where you live, you may have the right to request access to, correction of, or deletion of personal information we hold about you, to object to or restrict processing, to data portability, and to withdraw consent. You also have the right to complain to your local data protection authority.
Because the app has no accounts, we usually hold nothing that identifies you personally, and we may be unable to locate records relating to a particular person. To make a request, email info@codestellar.co and include any information that could help us find the relevant records.
6. Children
The app is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us at info@codestellar.co and we will delete it.
7. Security
Information sent from the app travels over encrypted connections (HTTPS). Information stored on your device is protected by iOS and, where sensitive, by the device keychain. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Changes to this policy
If we change this policy we will update the date at the top and, where the change is significant, tell you in the app before it takes effect.
9. Contact
Code Stellar LLC info@codestellar.co
We answer privacy requests at this address. We do not publish a postal address; if a legal or regulatory process requires one, write to the address above and we will provide it through the appropriate channel.