Privacy Policy

When you create a LoveTune account we collect your email address, display name, and authentication identifiers. If you sign in with Apple or Google we receive only the identifiers those providers share with us - we do not receive your Apple or Google password.

To generate your personalised song we collect the story, occasion, music preferences, and names you provide in the creation wizard. This is the content used by our AI providers to produce your lyrics and audio. Generated lyrics and audio files are stored securely and linked to your account.

All purchases are processed through Apple’s App Store via StoreKit 2. We receive transaction identifiers and purchase receipts from Apple to verify entitlements. We never see or store your card number or billing address - Apple handles all payment data.

We collect pseudonymous usage events (such as which steps of the wizard you complete) through PostHog analytics. These events are keyed to your account’s internal identifier; they do not include your email address or name. We also collect standard device information - device model, operating system version, and app version - to diagnose crashes via Sentry error tracking. IP addresses are processed transiently for rate limiting. Our security and audit logs retain IP data (in raw form in our internal admin audit log, and in hashed form in security event records) for abuse detection; this processing is based on our legitimate interests.

When you share a song via a unique link or QR code, the landing page is publicly accessible to anyone with the link. No account is required to listen. We record only an aggregate view count per share link; we do not keep timestamps, locations, or a log of individual accesses.

When you contact support in the app, we store your message together with your account so our reply appears in My Tickets, and you can reply there to continue the conversation. Every message in that conversation (yours and ours) is stored with the ticket. Adding an email address is optional in the app - add one if you would also like the reply by email. You can also add a name so we know what to call you; it is optional and used only to address our reply. The web contact form on our website has no signed-in session, so it requires an email address so we can reply to you. Support tickets are retained while open, and personal content (your message, every reply in the conversation, name, and email) is permanently stripped from a ticket 90 days after it is resolved, keeping only the reference number, category, and status - see Section 7 (Data Retention).

Under Article 6 of the UK/EU GDPR, we rely on the following lawful bases:

• Contract (Art. 6(1)(b)) - to create your account, generate and deliver your song, process your purchase, and provide customer support.
• Legitimate interests (Art. 6(1)(f)) - for pseudonymous analytics, fraud prevention, abuse detection, and maintaining service security. You may object to processing carried out on this basis at any time.
• Legal obligation (Art. 6(1)(c)) - to retain financial records for tax and accounting purposes.
• Consent (Art. 6(1)(a)) - for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Consent (Art. 6(1)(a)) - Community Feed - if you choose to opt a purchased song into the Community Feed, we rely on your consent to publicly stream that song’s audio, its lyrics text with per-line timings, its name-scrubbed display title, and its genre and occasion within the app. This consent is given per song, is never pre-selected, and is entirely optional. You can withdraw it at any time by opting the song out. See Section 6 (Community Feed) for full detail.

We do not use your personal data, stories, lyrics, voice inputs, or generated songs to train, fine-tune, or improve any machine-learning or AI model - neither our own nor any third party’s. Our third-party AI providers process your inputs solely to generate the song you requested and do not use them to train their models; limited transient retention may apply under each provider’s terms.

What is made public is limited to:

• a 30-second preview of the song audio;
• a name-scrubbed display title;
• the genre and occasion;
• the song lyrics as text, with per-line timings used to display a synced lyric line during playback in the app; and
• your chosen profile display name, shown as the author of the song.

Because the lyrics are published, please review your song’s lyrics before opting it in: they are generated from the story and names you provided and may mention names or personal details.

Your profile display name is published with each song you share. It is frozen at the time an admin approves the song for the feed, so a later change to your display name does not alter the byline on a song that is already public. The published name stays as it was approved unless we are asked to update it. You can change your display name at any time in Manage Account.

What is never published:

• your email address; and
• the name or email of the person the song is for or about (the recipient).

Anyone using the LoveTune app, including guests who have not yet created an account, can hear a 30-second preview of a community song. Hearing the full song, and liking or sharing a song, requires a registered (non-guest) LoveTune account. Community songs are play-only: listeners cannot download, save, or re-share the audio.

We publish a song to the Community Feed only on the basis of your explicit, opt-in consent (Article 6(1)(a) UK/EU GDPR). Consent is given per song through a dedicated, never pre-selected confirmation, and you can withdraw it at any time by opting the song out. Withdrawing consent does not affect the lawfulness of any streaming that took place before you withdrew.

Each time you opt a song in, we record the version of the consent notice you agreed to, the time, and your confirmation, in a durable consent log. If we materially change what the Community Feed publishes or how it works, we will ask for your consent again under the new version rather than relying on your earlier agreement.

A song shared to the Community Feed may describe or refer to a real person who is not the person who shared it. When a user opts a song in, they confirm to us that they have that person’s permission to share it publicly. This confirmation is the sharing user’s responsibility and is how we reduce the risk of someone’s song being shared without their knowledge. It does not, by itself, give LoveTune a separate legal basis to process that person’s information, so we give the people featured in shared songs a direct and reliable way to have a song removed.

You do not need a LoveTune account, and you do not need to know who shared the song. Contact us through our support page with enough detail to identify the song (for example, a description of it, the display title, or a link). We will remove the song from the Community Feed and delete the public audio copy promptly, normally within 72 hours of verifying your request, and ahead of any wider investigation. We treat this as a request you are entitled to make, and we will not require you to prove that you own the song before acting on a credible objection.

If a shared song contains your personal data, you have the same rights over it as any other personal data we hold, including the right to object to the processing and the right to erasure. To exercise these rights, contact us through our support page. We will respond within one month, as required by the UK/EU GDPR, and we may extend this by up to two further months for complex requests, in which case we will tell you within the first month.

If you shared the song, you can opt it out at any time from My Songs in the LoveTune app, which removes it from the Community Feed. If you are featured in a song someone else shared, use the removal route above by contacting us through our support page.

While a song is opted in, a copy of its audio is held in our content delivery storage (a dedicated Supabase Storage bucket) so it can be streamed to listeners. When you opt a song out, or when the song or your account is deleted:

• we stop the song appearing in the Community Feed and stop issuing new playback links for it straight away;
• we delete the public copy of the audio promptly; and
• we purge it from our content delivery cache.

Because of how streaming and content delivery networks work, we cannot guarantee that every copy disappears from every device or cache at exactly the same instant. The 30-second preview copy is served from a public storage bucket and remains directly fetchable by anyone who already has its address until the file is deleted, which we do promptly on opt-out. A full-song playback link that was already issued is short-lived and stops working within about 90 seconds, and any cached copy at a delivery network’s edge is removed within its cache lifetime (up to 24 hours). After that, the song is no longer available through the Community Feed. We keep a minimal, durable record that the song was opted in and later opted out, so we can demonstrate that consent was given and withdrawn.