Privacy

In short

Hum to Lyrics keeps your account, your credit balance, and anonymous-by-default usage analytics. It does not keep your recordings or your lyrics. There are no ads, and your data is never sold.

Your account

When you sign up, Google Firebase Authentication stores your email address. If you sign in with Google, it also stores the name and profile photo address from your Google account. Your password is held by Firebase in hashed form; the app never sees it.

Credits

Writing lyrics and listening for sung words use credits. The app stores your credit balance and, if you press Buy, which credit pack you chose. Payments aren't open yet: pressing Buy never charges you and never asks for card details. This is kept in Google Cloud Firestore.

Analytics

The app uses PostHog product analytics to learn which steps people use: pages opened, buttons pressed (for example "Find the notes" or "Write lyrics"), and your browser, device type and approximate location from your IP address. Before you sign in, these events are anonymous. Once you sign in, they are linked to your account so we can see the whole journey. The content of your recordings and lyrics is never sent to analytics.

Your recordings, words and lyrics

• Audio you upload or record is processed to find the notes and is deleted when the request finishes.
• To write lyrics, the app sends an AI provider the melody's rhythm (note counts and beats), your description and any words you typed. The default provider is Anthropic; OpenAI or Google may also be used.
• If you turn on Listen for sung words, your audio is sent to OpenAI to turn the singing into text.
• These providers process the data under their own API terms. The app itself does not store your audio, your words or the lyrics it writes.

Your browser

Signing in keeps a sign-in token in your browser's storage so you stay signed in. PostHog keeps an identifier in your browser's storage to recognize returning visits. If you press Write before signing in, your recording and inputs are saved in your browser (not on our servers) until you finish signing in. There are no advertising cookies.

Where it runs

The app runs on Google Cloud in Belgium (europe-west1); its database is in Google Cloud's Tel Aviv region. Firebase Authentication and the AI providers may process data in other countries.

Deleting your data

Signed in, choose Delete account at the top of the app. It deletes your account, your credits and your Buy clicks immediately.

Children

The app is not meant for children under 13.

Changes

If this page changes, the date at the top changes with it.