Privacy Policy

What we collect

• Your email— used to sign you in with a one-time code. We don't use passwords.
• What you write — your journal entries (title and body), and whether you ask each track to mirror or lift the mood.
• Your preferences— the genres you choose to shape your music, and whether you've finished onboarding.
• Your music — the tracks we generate and their details (an abstract title, genre, length, and waveform).
• Basic usage data— timestamps and a counter of how many free tracks you've used, to run your account and prevent abuse.

We do notcollect payment details (billing isn't live yet), and we don't run advertising trackers.

How we use it

We use your information for one purpose: to give you Sinattra. That means generating music from your entries, keeping your library and account working, preventing abuse of the free tier, and — only with your permission — looking at a specific entry if you report a bug.

Where your data lives, and how it's protected

Your data is stored with Supabase (database) and in a private storage bucket (your audio). It's encrypted at rest and in transit, and protected by per-account access rules so other users can never see your entries or tracks. Audio plays through short-lived, single-use links.

To be honest about the limits: Sinattra is not end-to-end encrypted— that isn't possible while a server-side AI reads your words to compose music. By default, no one on our side reads your entries. The only exception is if you report a problem and explicitly ask us to look at a specific entry to fix it.

Who we share it with

We don't sell your data, and we never share it for advertising. We rely on a small set of trusted service providers to run Sinattra, and we send each only what it needs:

• Supabase — Database, authentication, and file storage. Holds your account, entries, and the audio files for your tracks.
• Anthropic (Claude) — Reads your entry text to sense its mood and theme and to check for signs of distress. Instructed not to copy personal details, and your entries are never used to train its models.
• ElevenLabs — Generates the music. Receives only a derived, instrumental composition plan (a genre and structure) — never your actual words.
• Sentry — Error monitoring. Receives technical error reports only — not your journal content. Session replay is disabled.
• Web3Forms — Delivers messages you send through our contact form (your name, email, and message) to our inbox.
• Vercel — Hosts and serves the application, and provides cookieless, aggregate traffic analytics (page views and referrers) — no cookies, no cross-site tracking, and never tied to your identity or your entries.

AI and training

Your journal entries are never used to train, fine-tune, or improve any AI model. The music is instrumental — no lyrics are generated from your words.

How long we keep it

We keep your entries and tracks until you remove them. Deleting an entry erases its text but keeps the music it inspired. Deleting your account permanently removes your entries, your tracks, their audio files, and your profile.

Your controls

You stay in control of your data. From Settings you can:

• Exporteverything we hold for you as a single file (“Download my data”).
• Delete your account and all of it, or remove individual entries.
• Correct your data by editing entries or changing your genre preferences.

We honour these rights for everyone, wherever you are, consistent with Singapore's Personal Data Protection Act (PDPA).

Children

Sinattra isn't intended for children under 16. If you believe a child has given us their data, contact us and we'll remove it.

Changes to this policy

We may update this policy as Sinattra evolves. When we do, we'll change the “Last updated” date above, and we'll flag material changes.

Contact

Questions about your privacy? Email us at santosh@mostlyrwong.com.