Privacy Policy

1. Introduction

StarSinger ("we," "us," or "our") is operated by Veronata, Inc., a Delaware corporation based in San Francisco, California. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (Android and iOS), website, and related services (collectively, the "Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein.

2. Information We Collect

We collect the following types of information:

• Account Information: Email address, name, and profile photo when you create an account via Google, Apple, or email sign-in.
• Voice Data (biometric): Audio recordings you provide for voice cloning and voice model training. Voice samples are biometric data and are handled with the additional protections described in Section 5.
• Photos and Images (biometric when faces are present): Images you upload to create music videos. Photos containing your face are biometric data and are handled with the additional protections described in Section 5.
• Text and Creative Input: Lyrics, text prompts, creative direction, song preferences, and generation settings you provide.
• Audio Files: Songs you select from our catalog or upload from your own recordings.
• Usage Data: Information about how you interact with the Service — features used, content created, engagement patterns.
• Device Information: Device type, operating system, app version, unique device identifiers, and network information.
• Payment Information: Purchase history and transaction records. Payment details are processed by Apple, Google, Stripe, or PayPal and are not stored by us.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Create personalized music, music videos, and audio content using your photos, voice, and creative input.
• Process transactions and manage your account and credits.
• Send you technical notices, updates, and support messages.
• Display, feature, and promote content you create on the StarSinger platform and feed.
• Train, develop, and improve our AI models and technology using your uploads (photos, voice recordings, text prompts, and creative input) and Generated Content, as described in our Terms of Service.
• Analyze usage patterns to improve features and user experience.
• Detect, prevent, and address technical issues, fraud, and abuse.
• Comply with legal obligations.

4. AI Services and Third-Party Data Sharing

StarSinger uses advanced AI technology to create your personalized music and videos. To provide this service, we share certain data with third-party AI service providers. You must explicitly consent to this data sharing before uploading any photos or recording your voice.

What We Share

• Photos and Images: Your uploaded photos and generated images.
• Voice Recordings: Your voice samples (only if you choose voice cloning).
• Audio Files: Songs you select or upload.
• Text: Creative prompts, song lyrics, and generation preferences.

Who Receives Your Data

• Google (FAL, Gemini): Image generation, audio analysis, mood detection.
• Amazon (AWS): Audio processing, video stitching, file storage.
• Mureka, Kling, ByteDance Seedream, ElevenLabs: Music generation, video generation, lip-sync animation, and voice cloning.
• Convex: Real-time backend storage and synchronization.
• Firebase (Google): Authentication, crash reporting and app analytics. On Android, Firebase Analytics receives app events (including purchases and their price), the device advertising ID and an approximate, IP-derived location.
• Google Ads: If you installed the Android app from one of our ads, Google Ads receives those app events (for example, that a purchase happened and its value) so we can measure which ads lead to purchases.
• Apple Search Ads: On iPhone, we ask Apple's AdServices framework whether the install came from one of our Apple Search Ads campaigns. If it did, we store the campaign, ad group and keyword with your account to measure our ads. This does not use the advertising identifier and does not track you across other companies' apps or websites.
• Stripe / Apple / Google Play: Payment processing.
• Resend: Transactional email delivery.
• PostHog: Product analytics (in aggregated and anonymized form).

Purpose

These services process your content to generate music, create realistic videos, clone your voice, and produce professional content featuring you. Your data is shared with these providers solely for the purpose of delivering the Service.

Third-Party Data Protection

The third-party AI service providers we use maintain their own privacy policies and security practices. We carefully select providers that implement industry-standard security measures. Data shared with these providers for content generation is typically processed temporarily and deleted within 24-48 hours.

5. Biometric Data — Voice and Face

StarSinger collects two categories of biometric data: voice samples (for voice cloning) and facial images (for AI music videos featuring your face).

• Explicit consent required: Before recording your voice or generating any video featuring your face, the app presents an explicit consent screen explaining what is being collected and how it will be used.
• Voice clone use: Your voice clone is used solely to generate music featuring your voice. It is never used to impersonate you outside the Service or to make you say words you did not request.
• Face use: Your facial images are used solely to generate AI music videos in which you appear as the singer of a song you selected. Faces are not used to fabricate other content or to misrepresent your identity.
• Storage: Voice samples and facial images are encrypted at rest and in transit. They are stored only on infrastructure operated by us (AWS, Convex) and are processed temporarily by the third-party AI providers listed in Section 4.
• Right to delete: You can delete your voice clone and uploaded facial images at any time from the in-app Settings → Privacy menu, or by emailing privacy@starsinger.ai. Deletion is processed within 30 days.
• No sale of biometric data: We do not sell or rent your voice samples or facial images to any third party.

6. Generated Content

All content generated through the Service — including AI-created songs, music videos, audio tracks, and images ("Generated Content") — is owned by Veronata, Inc. as described in our Terms of Service. You receive Full Commercial Rights to use your Generated Content commercially.

• Generated Content is stored on our servers and may be displayed on the StarSinger platform, feed, and in promotional materials.
• We may use Generated Content to train, develop, and improve our own AI models and services.
• You can remove Generated Content from your profile and the StarSinger feed at any time.
• Veronata retains ownership of Generated Content as part of its content catalog, even if you remove it from your profile or close your account.
• Your Full Commercial Rights to use Generated Content you created survive account closure — content you have already downloaded or published remains yours to use commercially.
• AI labeling: All Generated Content is internally tagged as AI-generated. The StarSinger feed labels every track as AI-generated. Downloaded music videos include an in-frame "made with StarSinger" watermark unless you have purchased the Remove Branding upgrade.

For full details on content ownership and your Full Commercial Rights, please see our Terms of Service.

7. Reporting Offensive or Infringing AI Content

StarSinger publishes user-generated AI content to a community feed. We provide multiple ways to flag offensive or infringing material:

• In-app reporting: Every song and music video in the feed has a Report option (long-press the item or tap the share menu). Reports are reviewed by our trust & safety team within 24 hours.
• Email reporting: Email safety@starsinger.ai with a link to the offending content.
• DMCA / copyright takedown: Send a DMCA notice to dmca@starsinger.ai. We respond within 7 business days.
• Right of publicity / impersonation: If a piece of Generated Content uses your likeness without your consent, email privacy@starsinger.ai and we will remove the content within 48 hours pending verification.

Content that violates our Community Guidelines is removed and the responsible account is suspended. Repeat violations result in permanent account termination.

8. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256).
• Secure cloud infrastructure hosted on Amazon Web Services (AWS) and Convex.
• Access controls limiting employee access to personal data.
• Regular security assessments and monitoring.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain different types of data for different periods:

• Account Information: Retained while your account is active. Deleted within 30 days of account closure, except as required by law.
• Transaction Records: Records of your purchases and refunds (product, date, amount and the store's transaction reference) are kept for as long as tax and accounting law requires, including after you close your account. They do not include your payment card details, which we never receive.
• Your Uploads (photos, voice recordings, audio files): Stored securely in your account until you delete them or close your account. Upon account closure, uploads are deleted within 30 days.
• Generated Content: Retained indefinitely as part of Veronata's content catalog. You may remove Generated Content from your profile and the public feed, but Veronata retains the content for catalog, AI training, and archival purposes.
• Usage Data: Retained in anonymized or aggregated form for analytics. Identifiable usage data is deleted within 12 months of account closure.
• AI Processing Data: Data shared with third-party AI providers for content generation is processed temporarily and deleted by those providers within 24-48 hours.

10. Your Rights and Account Deletion

Depending on your jurisdiction (GDPR, CCPA, and similar regimes), you may have the right to:

• Access and receive a copy of the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of your personal data and uploads.
• Withdraw consent for AI processing (this prevents you from creating new content).
• Opt out of marketing communications.
• Reset or delete your Android advertising ID at any time in your device's settings (Settings → Privacy → Ads, or Google → Ads, depending on the device).
• In the European Economic Area, the UK and Switzerland, the Android app asks before any ad measurement data is sent to Google, and you can change your answer at any time in the app under Settings → Privacy choices.
• Request information about how your data has been used for AI model training.
• Lodge a complaint with a data protection authority.

To exercise any other right, contact us at privacy@starsinger.ai. We respond within 30 days.

11. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@starsinger.ai and we will delete such information.

12. International Data Transfers

StarSinger is operated from the United States. By using the Service, you understand and consent to your information being transferred to and processed in the United States and other jurisdictions where our service providers operate. We rely on Standard Contractual Clauses and similar safeguards for transfers from the European Economic Area, the United Kingdom, and Switzerland.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide at least 30 days' notice by posting the updated policy on this page, updating the "Last updated" date, and notifying you through the Service or by email. Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the changes.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Veronata, Inc.
San Francisco, California, USA
Email: privacy@starsinger.ai