SoundRRPrivacy policy
Last updated: 14 November 2026
This policy explains what personal data SoundRR collects, why, and what your rights are. We try to keep it short and plain.
1. Who is responsible
The controller of your data is Przemek Bednarek, a private person in Poland who runs SoundRR as a free, non-commercial project. Contact: contact@soundrr.app.
2. What data we process
- Account data: your Google account e-mail address and name, received through our sign-in provider Clerk.
- Your content: audio files you upload, and what we derive from them: stems, lyrics, chords and beat data, covers or titles you add.
- Settings and library data: mix settings, key and speed, loops, setlists and app preferences.
- Usage and job logs: which songs you processed, when, and how much of your monthly limit you used.
- Technical logs: IP address, browser type and request details, which our hosting provider records when you use the service.
We do not ask for payment details, because the service is free.
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create your account, store your songs, run the processing you ask for, apply plan limits | Contract, art. 6(1)(b) |
| Keep the service secure, prevent abuse and automation, handle reports of unlawful content, debug problems | Legitimate interest, art. 6(1)(f) |
| Keep records we are legally required to keep, if any | Legal obligation, art. 6(1)(c) |
Our legitimate interest is running a safe service that is not misused or overloaded. You can object to it (see section 8).
4. Who processes data for us
- Cloudflare hosts the website and API, stores your files in R2 object storage (EU location) and your account and library data in its D1 database.
- Modal Labs (United States) runs the GPU processing that separates stems and analyses songs. Your audio is sent there and processed transiently; it is not kept for longer than the job needs.
- Clerk (United States) provides authentication and sign-in.
- Google provides the "Sign in with Google" login. Google acts under its own privacy policy for your Google account.
Where data goes to the United States, transfers rely on the EU-US Data Privacy Framework or standard contractual clauses (SCCs), as set out in each provider's data processing terms. We do not sell your data, we do not show ads, and we do not use your music to train models.
5. How long we keep data
- Account, songs and settings: until you delete your account (Preferences, Delete account), which removes them.
- Songs you delete go to the trash and are removed for good after 30 days.
- Backups of the database may keep copies for a limited time after deletion before they expire.
- Technical logs are kept for a short period, only as long as needed for security and debugging: a few days.
- Reports of unlawful content and our decisions on them may be kept as long as needed to document them.
6. Cookies and local storage
We only use strictly necessary cookies for sign-in and your session, and your browser's local storage for app preferences and the offline cache of your songs. We use no advertising or tracking cookies and no third-party analytics. Because of this, no cookie consent banner is needed.
7. Children
SoundRR is for people aged 16 and over. If you believe a younger child has created an account, contact us and we will delete it.
8. Your rights
You have the right to access your data, correct it, have it erased, restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. To use these rights, write to contact@soundrr.app; you can also delete your account yourself in the app. You may complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl, or to the authority in your own EU country.
9. Changes
We may update this policy. For important changes we will tell you in the app or by e-mail, and the date at the top will change.