Privacy Policy

1. Introduction

Song Spirit ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use the Song Spirit mobile application and website (the "Service"). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Information You Provide

• Profile information: Name, age range, gender (optional).
• Personalization data: Stressors, goals, and personal context you select during onboarding.
• Music preferences: Genre selections and listening preferences.
• Account information: Email address and authentication tokens when signing in via Apple, Google, or email.

Information Collected Automatically

• Usage data: Songs played, streak history, feature interactions, and listening patterns.
• Device information: Device type, operating system version, app version, and language settings.
• Subscription data: Subscription status, plan type, and trial information (managed by Apple and RevenueCat).

3. How We Use Your Information

We use the information we collect to:

• Personalize songs: Generate AI-crafted affirmation songs tailored to your goals, stressors, and music preferences.
• Track progress: Maintain your listening streaks and daily play counts.
• Manage subscriptions: Process payments and manage your subscription status through Apple and RevenueCat.
• Improve the Service: Analyze usage patterns to enhance features and fix issues.
• Communicate with you: Send notifications about your streak, new features, or account-related information.

4. AI Processing Disclosure

We use AI to craft personalized affirmation songs based on your responses. Your data stays on your device and is never sold or shared.

Your personalization data (stressors, goals, music preferences) is used as input to generate song content. Currently, song generation occurs locally. If we introduce server-side processing in the future, this policy will be updated accordingly, and you will be notified.

5. Third-Party Services

We use the following third-party services:

• Supabase: Authentication and data storage. Supabase Privacy Policy.
• RevenueCat: Subscription management and payment processing. RevenueCat Privacy Policy.
• Apple / Google: OAuth authentication and App Store billing. See their respective privacy policies.
• Google Analytics (GA4): Website analytics with Consent Mode v2 — only activated after you accept cookies. Google Privacy Policy.
• Microsoft Clarity: Behavioral analytics including heatmaps and session replay to improve our website — only activated after you accept cookies. Microsoft Privacy Statement.

6. Data Storage & Security

We implement appropriate technical and organizational security measures to protect your data. Personalization data is stored locally on your device. Account and subscription data is stored securely in our cloud infrastructure with encryption at rest and in transit.

7. Data Retention & Deletion

We retain your data only as long as your account is active or as needed to provide the Service. When you delete your account:

• Your profile and personalization data are permanently deleted.
• Your generated songs are removed from your account.
• Subscription records may be retained as required by Apple and applicable law.

You can request account deletion at any time by contacting support@ionjolt.com or through the app's settings.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate personal data.
• Deletion: Request deletion of your personal data and account.
• Opt-out: Opt out of non-essential communications at any time.
• Data portability: Request your data in a machine-readable format.

To exercise any of these rights, contact support@ionjolt.com.

9. Children's Privacy

Song Spirit is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

Users between 13 and 18 must have parental or guardian consent to use the Service.

10. GDPR / CCPA Compliance

For European Users (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation, including the right to access, rectify, erase, restrict processing, and data portability. Our legal basis for processing your data is your consent (provided during onboarding) and legitimate interest in providing the Service.

For California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

We do NOT sell or share your personal information. We do not sell, rent, or share your personal data with third parties for monetary or other valuable consideration.

Your California Privacy Rights:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information. You can do this through the "Delete My Data" option in the app's settings or by contacting us.
• Right to Opt-Out of Sale/Sharing: Although we do not sell your data, you can enable "Do Not Sell My Personal Information" in the app's settings to disable all third-party analytics and tracking.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Limit Use of Sensitive Information: We only use sensitive personal information for purposes permitted under CCPA.

Categories of Personal Information Collected:

• Identifiers (name, email address, device identifiers)
• Internet or electronic network activity (app usage, feature interactions)
• Commercial information (subscription status, purchase history via Apple/RevenueCat)
• Inferences (personalization preferences such as goals and stressors)

To exercise any of these rights, contact support@ionjolt.com. We will respond to verifiable consumer requests within 45 days.

11. What We DON'T Collect

We want to be transparent about what we do not collect or do:

• We do not collect your location data.
• We do not access your contacts, photos, or camera.
• We do not access your microphone.
• We do not track you across other apps or websites.
• We do not sell, rent, or share your data with advertisers.

12. Analytics

Our website uses Google Analytics (GA4) and Microsoft Clarity to understand how visitors interact with our site. These tools use first-party and third-party cookies and are only activated after you consent via our cookie banner.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization and fraud/security purposes. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

In-app analytics are limited to aggregated usage metrics (e.g., songs played, features used) and do not include personal identifiers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at:

support@ionjolt.com