Privacy Policy

1. What We Collect

Account Information

• — Email address (if you create an account via magic link or Google sign-in)
• — Display name and avatar image (optional, if you choose to add them)

Your Contributions

• — Phrases you submit to shape the daily world song
• — Written reflections you submit to generate personal songs
• — Voice recordings you submit, which are transcribed to text via OpenAI's Whisper service
• — Photos you upload to inspire personal songs, which are sent to Anthropic's Claude vision service for analysis
• — Emoji reactions and comments
• — Songs you favorite or save

Usage Data

• — Anonymous session IDs to remember your reactions and contributions
• — Timestamps of your activity
• — Songs you've played or generated
• — Streak and contribution counts

2. What We Don’t Collect

• — We do not sell your data
• — We do not share your data with third parties except as required to operate the service
• — We do not track you across other websites
• — We do not collect payment information (we have no paid features currently)

3. How We Use Your Data

• — To generate the daily world song from contributed phrases
• — To generate personal songs from your written reflections, voice transcripts, and photo descriptions
• — To display your saved library and contribution history
• — To send you emails when songs are ready (only if you have an account)
• — To moderate content for community safety
• — To improve the service and develop new features

4. Third-Party Services

We rely on the following services to operate hearasong.ai. Content you submit may be temporarily processed by these providers solely for the purpose of generating outputs or operating the service. Where supported by the provider, we configure these services to limit use of your data to operating the service. Each provider has its own privacy practices we encourage you to review.

Infrastructure

• — Vercel: Hosting and infrastructure
• — Supabase: Database, authentication, and file storage
• — Resend: Transactional email delivery
• — Google: Sign-in via Google OAuth (if you choose this option)

AI Services

• — Anthropic Claude: Text generation for lyrics, phrase interpretation, and vision analysis of uploaded photos
• — Suno (via EvoLink): AI music audio generation
• — OpenAI: Voice transcription (Whisper) and content moderation

5. Voice Recordings and Photos

We treat voice recordings and uploaded photos with extra care:

• — Voice recordings are transmitted to OpenAI Whisper for transcription. They are not permanently stored on our servers and are deleted shortly after transcription.
• — Uploaded photos are transmitted to Anthropic Claude for vision analysis. They are not permanently stored on our servers and are deleted shortly after processing.
• — Photos are never sent to music generation services and are never used as album art.

Due to standard operational practices (logs, queues, retries), some content may exist briefly in temporary storage during processing, but it is removed automatically through normal system cleanup.

6. Personal Songs

Personal songs are generated from content you provide about your own life. We treat this content with extra care:

• — Generated personal songs remain in your account until you delete them
• — Personal songs are private by default — only you can see them unless you explicitly share them via a public share link
• — If you share a personal song via a public link, anyone with the link can view it
• — Personal song content (text reflections, transcripts, derived prompts) is stored to allow you to revisit and replay your songs

7. World Song Contributions

Phrases you submit to shape the daily world song become part of the collective archive. Once a world song is generated incorporating your phrase, that song and its underlying contributions become part of the long-term hearasong collective archive. You can request your account be deleted, which removes your association with past contributions, but the songs themselves remain part of the archive.

8. Data Retention

• — Anonymous session data: retained for product improvement
• — Account data: retained until you delete your account
• — Personal song content: retained until you delete the song or your account
• — World song contributions: retained as part of the long-term hearasong collective archive
• — Voice recordings and uploaded photos: deleted shortly after processing

9. Account Deletion

You can request deletion of your account by emailing hello@hearasong.ai. Deleting your account removes your personal songs and account-associated data within a reasonable period, except where retention is required for legal, security, or fraud prevention purposes. World song contributions remain part of the collective archive but are no longer associated with your account.

10. Your Rights

You have the right to:

• — Access the data we have about you
• — Correct inaccurate data
• — Delete your account and associated personal data
• — Export your data
• — Withdraw consent for data processing

To exercise these rights, email hello@hearasong.ai.

For users in the European Union, you have additional rights under the General Data Protection Regulation (GDPR). For users in California, you have rights under the California Consumer Privacy Act (CCPA). We honor these rights regardless of your location.

11. Children’s Privacy

hearasong.ai is intended for users aged 13 and older, consistent with our Terms of Service. If you are between 13 and 17, you should review this policy with a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact hello@hearasong.ai.

12. Cookies and Tracking

We use minimal cookies for essential functions:

• — Authentication (keeping you logged in)
• — Session preferences (remembering your settings)

We do not use third-party advertising cookies or cross-site tracking.

13. Security

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS) and secure authentication. However, no system is perfectly secure. You use the service at your own risk.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.

15. Contact

Questions about this policy or your data: hello@hearasong.ai