Privacy Policy

When you create a LoveTune account we collect your email address, display name, and authentication identifiers. If you sign in with Apple or Google we receive only the identifiers those providers share with us - we do not receive your Apple or Google password.

To generate your personalised song we collect the story, occasion, music preferences, and names you provide in the creation wizard. This is the content used by our AI providers to produce your lyrics and audio. Generated lyrics and audio files are stored securely and linked to your account.

All purchases are processed through Apple’s App Store via StoreKit 2. We receive transaction identifiers and purchase receipts from Apple to verify entitlements. We never see or store your card number or billing address - Apple handles all payment data.

We collect anonymised usage events (such as which steps of the wizard you complete) through PostHog analytics. We also collect standard device information - device model, operating system version, and app version - to diagnose crashes via Sentry error tracking. IP addresses are processed transiently and are not stored in our database.

When you share a song via a unique link or QR code, the landing page is publicly accessible to anyone with the link. No account is required to listen. We log basic access metadata (timestamp and country) to detect abuse.

Under Article 6 of the UK/EU GDPR, we rely on the following lawful bases:

• Contract (Art. 6(1)(b)) - to create your account, generate and deliver your song, process your purchase, and provide customer support.
• Legitimate interests (Art. 6(1)(f)) - for anonymised analytics, fraud prevention, abuse detection, and maintaining service security. You may object to processing carried out on this basis at any time.
• Legal obligation (Art. 6(1)(c)) - to retain financial records for tax and accounting purposes.
• Consent (Art. 6(1)(a)) - for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Consent (Art. 6(1)(a)) - Community Feed - if you choose to opt a purchased song into the Community Feed, we rely on your consent to publicly stream that song’s audio, its name-scrubbed display title, and its genre and occasion within the app. This consent is given per song, is never pre-selected, and is entirely optional. You can withdraw it at any time by opting the song out. See Section 6 (Community Feed) for full detail.

We do not use your personal data, stories, lyrics, voice inputs, or generated songs to train, fine-tune, or improve any machine-learning or AI model - neither our own nor any third party’s. Our third-party AI providers process your inputs under strict zero-retention and no-training contractual terms. Your content is used solely to generate the song you requested.

What is made public is limited to:

• a 30-second preview of the song audio;
• a name-scrubbed display title;
• the genre and occasion; and
• your chosen profile display name, shown as the author of the song.

Your profile display name is published with each song you share. It is frozen at the time an admin approves the song for the feed, so a later change to your display name does not alter the byline on a song that is already public. The published name is refreshed only if you remove the song and submit it again. You can change your display name at any time in Manage Account.

What is never published:

• the song lyrics as text;
• your email address; and
• the name or email of the person the song is for or about (the recipient).

Anyone using the LoveTune app, including guests who have not yet created an account, can hear a 30-second preview of a community song. Hearing the full song, and liking or sharing a song, requires a registered (non-guest) LoveTune account. Community songs are play-only: listeners cannot download, save, or re-share the audio.

We publish a song to the Community Feed only on the basis of your explicit, opt-in consent (Article 6(1)(a) UK/EU GDPR). Consent is given per song through a dedicated, never pre-selected confirmation, and you can withdraw it at any time by opting the song out. Withdrawing consent does not affect the lawfulness of any streaming that took place before you withdrew.

Each time you opt a song in, we record the version of the consent notice you agreed to, the time, and your confirmation, in a tamper-evident log. If we materially change what the Community Feed publishes or how it works, we will ask for your consent again under the new version rather than relying on your earlier agreement.

A song shared to the Community Feed may describe or refer to a real person who is not the person who shared it. When a user opts a song in, they confirm to us that they have that person’s permission to share it publicly. This confirmation is the sharing user’s responsibility and is how we reduce the risk of someone’s song being shared without their knowledge. It does not, by itself, give LoveTune a separate legal basis to process that person’s information, so we give the people featured in shared songs a direct and reliable way to have a song removed.

You do not need a LoveTune account, and you do not need to know who shared the song. Contact us through our support page with enough detail to identify the song (for example, a description of it, the display title, or a link). We will remove the song from the Community Feed and delete the public audio copy promptly, normally within 72 hours of verifying your request, and ahead of any wider investigation. We treat this as a request you are entitled to make, and we will not require you to prove that you own the song before acting on a credible objection.

If a shared song contains your personal data, you have the same rights over it as any other personal data we hold, including the right to object to the processing and the right to erasure. To exercise these rights, contact us through our support page. We will respond within one month, as required by the UK/EU GDPR, and we may extend this by up to two further months for complex requests, in which case we will tell you within the first month.

If you shared the song, you can opt it out at any time from My Songs in the LoveTune app, which removes it from the Community Feed. If you are featured in a song someone else shared, use the removal route above by contacting us through our support page.

While a song is opted in, a copy of its audio is held in our content delivery storage (a dedicated Supabase Storage bucket) so it can be streamed to listeners. When you opt a song out, or when the song or your account is deleted:

• we stop the song appearing in the Community Feed and stop issuing new playback links for it straight away;
• we delete the public copy of the audio promptly; and
• we purge it from our content delivery cache.

Because of how streaming and content delivery networks work, we cannot guarantee that every copy disappears from every device or cache at exactly the same instant. A playback link that was already issued is short-lived and stops working within a few minutes (around 5 minutes), and any cached copy at a delivery network’s edge is removed within its cache lifetime (up to 24 hours). After that, the song is no longer available through the Community Feed. We keep a minimal, tamper-evident record that the song was opted in and later opted out, so we can demonstrate that consent was given and withdrawn.