StudioPal

Privacy Policy

Policy draft · updated September 14, 2026

This page describes the data flows visible in the current app source. Infinity Builds, represented by Daniel Francis, publishes this app. Operational retention practices and the intended age audience must be confirmed before this policy is published.

Account information

When you create or use an account, the app processes your email, account identifier, authentication information, and any profile details you provide. Authentication and hosted data services use Supabase.

Music, recordings, and community content

The app processes prompts, lyrics, generated tracks, uploaded audio, recordings, library metadata, studio listings, and collaboration content you provide. Content you mark public, along with public studio or collaboration information, may be visible to other users. Microphone access is used when you choose to record.

AI and connected providers

Prompts and relevant music or lyric inputs are sent to the selected generation service. Features use configured providers such as ElevenLabs and the Lovable AI gateway. Connected-provider credentials are processed to make requests to the provider you choose. Do not put API keys in prompts or public posts. Provider handling of submitted content is governed by that provider’s policies.

Payments

The web app integrates Stripe for subscriptions. Account email, customer identifiers, subscription details, and payment status may be processed for billing. Payment information entered into Stripe’s payment interface is handled by Stripe.

Studio search

Location coordinates or place names submitted for studio search may be sent to Nominatim and Overpass services.

Device storage and technical data

Browser storage is used for sessions and selected preferences. Hosting and service providers receive network request information such as IP addresses and may maintain operational logs. Clearing browser data may sign you out or remove locally cached information.

Why information is processed

Information is used to authenticate accounts, provide requested features, store content where the feature supports it, operate integrations, resolve errors, and respond to account requests.

Your choices

You can revoke microphone or location permissions in device or browser settings, edit supported profile fields, and remove content using available app controls. Contact the publisher for access, correction, or deletion requests. Requests may require identity verification. Provider-held records and any legally required billing records may follow separate retention rules.

Retention and security

Locally held data lasts until the session ends or browser storage is cleared, depending on the feature. The publisher must confirm hosted-data retention and deletion schedules. Do not share passwords or provider credentials. No system can guarantee absolute security.

Children and policy updates

The publisher must confirm the intended age audience and procedures for children’s data before release. This page will be updated when app data practices change.