Privacy policy

Effective October 27, 2026. Songwell is operated by Whitecap Interactive. Contact info@whitecap.io for privacy questions or requests.

Songwell is a private songwriting workspace. We use your information to save and sync your work, provide the features you request, protect accounts, and respond to support requests. We do not sell personal information, use your writing for advertising, or track you across other companies’ apps or websites.

Information we handle

• Account information: your name, email address, password hash, invitation records, account settings, and authentication tokens. Passwords are hashed rather than stored as readable passwords.
• Your work: ideas, lyrics, song sheets and saved versions, tags, collections, imported text and source filenames, practice entries, recordings, and related dates and identifiers. Saved work is linked to your account and stored on our servers so you can sync and retrieve it.
• Device and service information: a device identifier and device name associated with sign-in, network IP addresses, request times and paths, error information, and storage/AI usage counters used for operation, security, and limits. Hosting and security providers also process connection information.
• Support: your email address, messages, and any attachments you choose to send. Please avoid sending private writing or recordings unless needed to resolve your issue.

Recordings and microphone access

The iPhone asks for microphone permission to record a melody when you choose to record. Songwell saves audio locally before uploading it to your private account. It stops an active recording when the app leaves the foreground or audio is interrupted, keeping the partial clip available to replay or save. We do not send recordings to AI or transcribe them. You can withdraw microphone permission in iPhone Settings; text features remain available.

Local data, browser storage, and exports

The iPhone retains local writing, unsynced captures, and recording files for offline use. The browser stores your session, appearance choices, and unsaved song recovery drafts in its profile. Signing out does not necessarily erase local work. These are functional storage features; Songwell does not add advertising cookies or an advertising analytics SDK. Protect access to your device and browser profile.

Songwell’s web library export lets you download saved account content, including recordings. Unsynced phone work and unsaved browser edits must be saved/synced or exported separately. Files you download and device backups remain under your control.

Optional AI and OpenAI

Before new AI requests, Songwell requires permission in Settings to share text with OpenAI. The beta may keep AI unavailable even after permission is granted. You can use capture, editing, recordings, imports, and reference tools without AI.

• Topic suggestions send the chosen text idea, limited to its first 4,000 characters.
• Library organization sends up to 25 eligible text ideas per request, up to 1,200 characters each, their idea identifiers, and existing topic labels.
• Possible ideas sends the selected Free Writing entry to identify exact excerpts.

Requests include instructions for the tool. We do not include your account name, email address, password, or recording audio in those requests. Your writing itself can contain personal information, so review what you choose to send. Results are saved with your account until removed or the account is deleted.

OpenAI states that API data is not used to train its models by default. Songwell requests that response storage be disabled. This is not zero retention: OpenAI may retain abuse-monitoring logs containing request/response content for up to 30 days, with limited exceptions such as legal obligations. Songwell does not promise immediate erasure of provider logs. See OpenAI’s API data controls. Turning off permission in Settings stops future AI requests; it cannot recall processing already underway or erase prior provider logs.

Service providers and disclosure

We use Render to host the application and database, Cloudflare for security, access control, recording and recovery storage, Resend for account email delivery, and OpenAI only for optional AI requests. Our support mailbox provider processes messages sent to us. We use these providers to deliver and protect Songwell, and require appropriate protections for personal information they handle on our behalf. Authorized operators may access information when necessary for support, maintenance, recovery, or security.

We may disclose information when legally required or reasonably necessary to protect people, investigate abuse, or defend legal rights. If the service changes ownership, we will require continued protection of personal information and provide notice where required. Providers may process information in the United States and other countries where they operate; protections may differ from those where you live.

Retention and deletion

We keep account information and saved work while your account remains active. Archiving or moving an idea to a recoverable deleted state does not permanently erase it. To remove the account and its live writing and recordings, use Settings → Delete account on web or iPhone, enter your current password, and type DELETE. If deletion encounters an outage, retry; do not assume it completed until Songwell confirms it.

Existing recovery backups expire under a 14-day retention rule; they are not edited immediately when an account is deleted. Minimal deletion receipts retain an internal account ID, deletion time, and hashes of revoked random tokens to prevent deleted accounts from reappearing during recovery and to notify reconnecting devices. They do not contain your name, email, writing, or audio. Security records, support correspondence, and records required by law may be kept as necessary for those purposes.

Updated apps on other devices erase that account’s local copies, including unsynced work, when they reconnect with a session that was active at deletion. Offline devices cannot be remotely erased. Older apps and signed-out devices need local cleanup. The updated iPhone sign-in screen offers Erase local data on this iPhone; this erases all local accounts’ work on that phone and does not delete the server account. Downloaded exports and user-controlled backups are not remotely erased.

Your choices and requests

You can edit account content, export your saved library, withdraw optional AI permission, revoke microphone access, and delete your account. Contact info@whitecap.io to request access, correction, deletion, or help with privacy rights available where you live. We may verify your identity before acting. Where applicable, you can also object to or restrict processing, request portability, or complain to your local privacy regulator. We will not penalize you for exercising applicable privacy rights.

We process information to provide the service you request, protect its security and reliability, meet legal obligations, and, for optional AI sharing, with your permission. We use reasonable access controls and private storage, but no service can guarantee absolute security. Songwell is not designed for children under 13; contact us if you believe a child under 13 has provided personal information.

Changes

We will update this page and its effective date when practices change. We will provide additional notice or request new permission when required for material changes.