Privacy Policy

1. Overview

SongRight, operated by Soundscape Entertainment LLC, is a songwriting and collaboration app that lets users create accounts, manage profiles, share posts, upload audio, comment, follow other users, exchange messages, and interact with moderation and safety tools. This Privacy Policy explains what information SongRight collects, how it is used, when it may be shared, and what choices users have.

2. Information We Collect

SongRight may collect the following categories of information:

• Account information, such as email address, authentication identifiers, display name, username, and account timestamps.
• Profile information, such as bio, profile image, creator roles, and optional professional metadata you choose to provide.
• Public social content, such as feed posts, captions, lyrics, comments, follows, likes, saves, profile counts, and related moderation status.
• Audio and Vault content, including audio files you upload to the feed, SongRight Vault, or other supported collaboration surfaces, plus related file names, tags, folder names, and sharing settings.
• Direct interaction data, such as messages, collaboration activity, shared-link opens and file interactions, report submissions, review requests, mute/block actions, support requests, and notifications.
• Purchases and subscription data, such as subscription status, trial usage, purchase platform, StoreKit transaction verification data, Stripe customer or subscription identifiers, and billing metadata needed to manage premium access.
• Device and app data, such as push notification tokens, app integrity signals, technical logs, and technical information needed to operate, secure, and improve the service.

3. Public and Private Information

Some information in SongRight is public by design. Public information may include display name, username, bio, profile image, public creator roles, approved public website links, public post and follower counts, feed posts, comments, and other social content you choose to publish.

Other account information is private and intended to remain restricted to you and authorized backend services. Private information may include email address, internal account metadata, subscription or trial metadata, legal name, optional professional identifiers, publishing identifiers, and moderation records not intended for public display.

4. How We Use Information

• create and maintain user accounts
• show public profiles and feed content
• support posts, comments, follows, likes, saves, and messaging features
• store and deliver uploaded audio, Vault files, and profile images
• process collaboration, file sharing, and shared-note features across iOS, web, and sync infrastructure
• verify, restore, and manage premium access and trial usage
• send product and moderation-related notifications
• review reports, enforce community rules, and respond to safety issues
• protect the app from abuse, spam, fraud, and policy violations
• support, troubleshoot, and improve the service

5. Vault, Audio, and Shared Files

SongRight may store audio, recordings, and other creator files in private Vault storage areas associated with your account. Vault files may include metadata such as file names, tags, folders, project names, and upload timestamps.

When you choose to share a Vault item or other supported file, SongRight may generate a share link, temporary access token, download setting, or public share page needed to deliver that item. Anyone with a valid share link may be able to access the shared content according to the settings you selected.

A sender may protect a Vault link with a passcode. SongRight stores a one-way protected verifier rather than the passcode itself. SongRight may also provide the sender with anonymous link activity, such as link opens, anonymous browser or app sessions, per-file play starts, downloads, and copies saved to Vault. This activity does not identify the recipient by name or email, and SongRight does not show the sender a recipient IP address or device fingerprint.

6. AI-Assisted Features

RhymeRight processes requested words or phrases locally in the app or browser to provide rhyme-dictionary results; those rhyme lookups are not sent to an AI provider. Idea Dice requests a generic AI-generated prompt without sending lyric or note content. Songwriting Ideas may process lyric context, prompts, or other creative inputs to provide suggestions. The iOS app asks for explicit permission before sending the first such request.

Songwriting Ideas sends the submitted creative context through SongRight's backend to OpenAI. SongRight may retain limited request metadata, rate-limit usage records, and troubleshooting information for these AI-assisted features. For more detail, see the AI Creative Tools disclosure.

7. Moderation and Safety

SongRight includes reporting, blocking, muting, moderation review, and content status controls. When content is reported or reviewed, SongRight may create internal moderation records, case notes, audit trails, and user notifications needed to investigate and resolve the issue.

Safety and support workflows may also create support-request records, report-rate-limit records, review-request records, and internal case follow-up messages.

8. Audio, User Content, and Rights

Users are responsible for the content they upload or publish, including audio, lyrics, profile text, and comments. By sharing content in public or social areas of the app, you understand that other users may be able to view or interact with that content.

Do not upload content unless you own it or have the rights needed to share it.

SongRight may also offer speech-to-text or transcription-related workflows for audio you choose to process. Those workflows may require device permissions and may create text output derived from your audio.

9. Payments, Subscriptions, and Trials

Premium purchases may be handled through Apple on iOS and through Stripe or other payment providers on supported web surfaces. SongRight does not store your full payment card number. SongRight may receive and store subscription state, customer identifiers, purchase platform, plan status, renewal state, and related verification records needed to grant access, restore purchases, prevent abuse, and provide support.

10. Diagnostics, Security, and App Integrity

SongRight may use logging, push-token storage, app-integrity systems, and related technical safeguards to secure the service, investigate failures, prevent abuse, and improve reliability. These measures may include Firebase services, App Check, App Attest, DeviceCheck, and similar infrastructure protections.

11. Sharing of Information

• with other users when you publish public profile or social content
• with people you choose to collaborate with or share files with through supported sharing features
• with service providers and infrastructure vendors that help operate authentication, storage, sync, subscriptions, notifications, technical operations, AI-assisted features, and security systems
• when needed to investigate abuse, safety issues, fraud, copyright complaints, or legal requests
• in connection with a merger, acquisition, financing, or sale of assets

SongRight does not treat private account fields as public profile information.

SongRight requires service providers that process user information on its behalf to protect that information consistently with this Privacy Policy and applicable data-protection requirements. SongRight does not authorize service providers to use user information for their own unrelated purposes.

12. Notifications and Communications

SongRight may use push notifications and in-app notifications for social activity, moderation outcomes, review request updates, and operational or safety messages.

13. Data Retention

SongRight retains information for as long as reasonably necessary to operate the service, comply with legal obligations, resolve disputes, enforce policies, and maintain security and moderation records.

Retention periods depend on the type of information and why it is needed. Account and creator content is generally retained while the account is active. Shorter-lived operational records may expire or be replaced as the service operates. SongRight may retain limited safety, fraud-prevention, transaction, legal, moderation, or deletion-audit records after account deletion where reasonably necessary.

14. Account Deletion, Consent, and User Choices

Users can initiate permanent account deletion from the account settings inside SongRight. Account deletion removes the account and personal data associated with it unless limited retention is required for safety, fraud prevention, transactions, legal compliance, or audit purposes. Content and files associated only with the deleting user are deleted.

A shared collaborative document may remain available to its remaining participants so their joint work is not destroyed. In that situation, SongRight removes the deleted user from the document's account, participant, collaborator, and invitation records and may transfer document ownership to a remaining participant. If no other participant remains, the shared document is deleted.

Deleting a SongRight account does not automatically cancel an Apple subscription. Users should manage or cancel Apple billing through their Apple Account subscription settings before deletion.

Users may withdraw optional permissions, such as microphone, photo, or notification access, through device settings. Users can stop optional sharing by removing public content, disabling supported share links, or changing available sharing settings. Privacy, correction, consent, and deletion questions may also be sent to support@songrightapp.com.

15. Security

SongRight uses technical and organizational measures intended to protect user information, including authentication, access controls, security rules, moderation systems, and app integrity protections. No system can guarantee absolute security.

16. Children and Age Requirements

SongRight is intended for users age 13 and older. Users under 13 may not create or maintain an account. If local law where a user lives requires a higher minimum age, that higher minimum age applies.

SongRight does not require users to provide date of birth during signup. If SongRight learns that an account belongs to someone under the minimum required age, SongRight may disable or delete the account and related personal information, except for limited records needed for safety, legal, or audit purposes.

17. Privacy Requests and Contact

For privacy questions, support issues, or account requests, contact support@songrightapp.com.

18. Changes to This Policy

SongRight may update this Privacy Policy from time to time. When material changes are made, SongRight may update the in-app policy center, revise the effective date, or provide additional notice where appropriate.