Privacy Policy

1. Who we are

SoundLab AI is operated by Klipx Limited, a company registered in England and Wales (Company Number 17221685), with its registered office at 66 Paul Street, London EC2A 4NA, United Kingdom ("we", "us", "our").

This policy explains what personal data we collect when you use the SoundLab AI apps for iPhone and Android, our website at createmusic.net, and related services (together, the "Service"); why we collect it; who we share it with; and the choices you have. We are the data controller for your personal data and process it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). If you are in the European Economic Area, the EU GDPR also applies (section 13).

2. Information we collect

2.1 Information you give us

• Account details: email address, password, display name, username and profile photo. Passwords are stored in hashed form by Firebase Authentication; we never see them.
• Profile details you choose to add, such as a bio and links.
• Content you create: prompts, lyrics, titles and style settings; the songs, artwork and music videos you generate; and the albums, playlists, comments, chat messages, likes, follows and reports you make.
• Voice samples: if you create a custom voice, the recordings you make or upload, including the short verification phrase we ask you to read aloud.
• Photos: images you take with your camera or choose from your photo library for your profile, albums or songs.
• Purchases: which plan or credit pack you bought, when, and its status. Card and bank details are handled by Apple, Google or Stripe, and we never receive them.
• Messages to us: support emails, contact form messages and questions you ask the in-app help assistant.

2.2 Information from sign-in providers

If you sign in with Apple or Google, we receive your name, email address and an account identifier from that provider. With Sign in with Apple you can choose to hide your email address, in which case we receive an Apple relay address that forwards messages to you.

2.3 Information collected automatically

• Device and app information: device model, operating system and version, app version, language and time zone.
• Identifiers: your SoundLab user ID; a Firebase app-instance ID; a push notification token; a device identifier we use to limit how many free accounts can be created on one device (section 8); and, with your permission, your device's advertising identifier (section 5).
• Usage information: screens you visit, features you use, songs you play, like or share, and your song generation activity.
• Crash and performance data: when the app crashes or hits an error, Firebase Crashlytics records the error, the state of the device at the time (such as free memory and screen orientation) and the app events leading up to it.
• Log data: your IP address and the approximate location (country or city) it indicates. We don't collect precise location.
• App integrity checks: Apple App Attest and Google Play Integrity confirm that requests come from a genuine copy of our app. These checks don't give us personal information about you.

2.4 Device permissions

The apps ask for your permission before using:

• Microphone: only while you record a voice sample for a custom voice.
• Camera and photos: only when you take or choose a picture for your profile or artwork.
• Notifications: to tell you when your songs are ready and when people interact with your music (section 7).
• Tracking (iPhone): to use your advertising identifier for personalised ads and ad measurement (section 5).

You can withdraw any of these permissions in your device settings. The rest of the app keeps working.

3. How we use your information

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time (section 12). Where we rely on consent, you can withdraw it at any time without affecting processing that happened before.

4. AI features and the services that power them

SoundLab AI uses AI models run by us and by other companies. When you use a feature, we send the provider only what that feature needs. The provider processes it to return a result. We don't send these AI services your email address, password or payment details.

Custom voices

• Voice cloning is a Pro feature, and you can keep up to five voices.
• Only record or upload your own voice. Our Terms explain the rules.
• Voice samples are stored in our cloud storage and sent to Kie.ai to create the voice model used for your songs.
• Apart from checking that your verification recording matches your sample, we don't use your recordings to identify you or for any other biometric purpose.
• Deleting a voice in the app deletes its samples from our storage, and deleting your account deletes all of them. Copies held by Kie.ai are handled under Kie.ai's own terms.

We don't make decisions about you by automated means that have legal or similarly significant effects.

5. Advertising and measurement

5.1 Ads in the apps

Free accounts see banner ads from Google AdMob in the iPhone and Android apps. Paid plans don't see banner ads. Anyone can also choose to watch a short rewarded video ad to collect free credits, which is available again every 6 hours. AdMob may use your device's advertising identifier (IDFA on iPhone, Advertising ID on Android), device information and IP address to deliver ads, limit how often you see them, and detect fraud.

• In the UK, the EEA and Switzerland, Google's consent form asks whether you agree to personalised ads before any ads load. You can change your answer at any time in the app under Settings > Privacy & consent options.
• On iPhone, the app asks for permission to track. If you don't allow it, your advertising identifier isn't shared and ads aren't personalised using information from other companies' apps and websites. You can change this in iPhone Settings > Privacy & Security > Tracking.
• On Android, you can reset or delete your Advertising ID under Settings > Google > Ads (the path varies by device).

See how Google uses information from sites or apps that use its services.

5.2 Measuring our advertising

We advertise SoundLab AI on Meta (Facebook and Instagram), TikTok and Google. To learn which ads work, we share limited event information with them:

• Meta, Android app: the app includes Meta's App Events SDK. It records app installs and app opens, and the app records sign-ups, sign-ins, checkouts started, credits spent and songs viewed. These events are sent with your device's Google Advertising ID.
• Meta, iPhone app: Meta's SDK is set not to record app events and not to collect your advertising identifier.
• Meta, our servers: purchase, subscription and free-trial events are sent through Meta's Conversions API, with your email address and user ID hashed (SHA-256) before they are sent.
• TikTok: our servers send an account-created event through the TikTok Events API, with your email address hashed.
• Google: sign-up and purchase events through Google Analytics and Google Ads.
• iPhone: for accounts created in the iPhone app, we only share these events with Meta and TikTok if you allow tracking.
• Website: these partners' pixels and cookies only load after you accept marketing cookies (section 15).

Hashing hides the original value, but these companies can match a hashed email address to an account they already hold. That matching is how ad measurement works.

6. Who we share information with

We don't sell your personal data. We share it only with:

• Service providers that run parts of the Service for us: Google (Firebase and Google Cloud, for hosting, databases, file storage, sign-in, analytics, crash reporting, push notifications, remote configuration and app integrity checks); Namecheap (our email provider); and the AI services listed in section 4.
• Payment providers: Apple (App Store), Google (Google Play) and Stripe (website). They process your payment under their own policies and send us a record of the purchase.
• Advertising and measurement partners described in section 5: Google AdMob, Meta, TikTok and Google.
• Other users and the public: your profile and anything you make public, such as songs, albums, playlists, comments, chat messages and likes, can be seen by other users and by anyone on the web, and may be indexed by search engines. Songs you keep private are visible only to you.
• Legal and safety: when required by law, regulation or legal process, or to protect the rights, property or safety of our users, the public or us.
• Business transfers: if Klipx Limited is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner. We will tell you before that happens.

We only share your data with the providers and partners named in this policy, and only for the purposes described here. We require each of them, by contract or through their published terms, to protect your data to at least the standard set out in this policy and required by the app stores we distribute through, including Apple's App Store Review Guidelines and Google Play's policies.

7. Push notifications and emails

Push notifications

If you allow notifications, we store your device's push token and use Firebase Cloud Messaging to tell you when a song or voice is ready or has failed, and when people like, comment on or follow your music. We don't send marketing push notifications. You can turn notifications off in the app under Settings > Notifications or in your device settings. The token is deleted when you delete your account.

Emails

• Service emails: password reset emails (sent by Firebase Authentication) and purchase confirmations.
• Tips and reminders: a short series of tips over your first days after sign-up, and a reminder if you haven't made a song yet. Every one of these emails has an unsubscribe link that takes effect immediately, or you can email help@klipx.app to opt out.
• Our emails come from support@soundlabai.live. We never ask for your password or card details by email.

8. One account per device

To stop people collecting free credits with many accounts, we limit how many accounts can be created on one device. On iPhone we use Apple's identifier for vendor (an ID that is the same for all our apps on your device and changes if you remove them all); on Android the app creates an identifier from random numbers and your device's software build. We store it with the user IDs and number of accounts created on that device and, if we have blocked the device for abuse, a blocked flag. We don't use this identifier for advertising or share it with anyone. Our legal basis is legitimate interests. When you delete your account, your user ID is removed from the device record, but a blocked device stays blocked. Email help@klipx.app if you think a device was blocked by mistake.

9. How long we keep information

• Account, profile and content: until you delete them or delete your account.
• Voice samples: until you delete the voice or your account.
• Push token: until you delete your account or uninstall the app.
• Purchase records attached to your account: until you delete your account.
• Sales records held in Apple's, Google's and Stripe's reporting and in our accounts: 7 years, as UK tax law requires.
• Device record: kept to enforce the one-account-per-device limit, without your user ID once you delete your account.
• Crash reports: 90 days.
• Analytics data: up to 14 months.
• Help assistant conversations: stored on your device and cleared after 6 hours without activity. Chatora keeps them under its own policy.
• Support messages: as long as needed to handle your request and any follow-up.
• Copies held by AI providers, Apple, Google, Stripe, sign-in providers and advertising partners are kept under their own policies.

10. Deleting your account

You can delete your account at any time in the app under Settings > Delete Account, or on the website under Settings > Delete Account. You can also email us at help@klipx.app and we will do it for you. Deletion permanently removes:

• your account, profile and credit balance;
• your songs, audio files, artwork, music videos, albums, playlists and voice samples;
• your comments, chat messages, likes, follows and reports;
• your notifications, push tokens and purchase records.

If you signed in with Apple, we also revoke SoundLab AI's access to your Apple ID. We keep only the statutory sales records and the device record described in section 9.

Deleting your account doesn't cancel an App Store or Google Play subscription. Cancel it in your App Store or Google Play account settings first; our Support page has the steps.

11. Security

We protect your data with encryption in transit (TLS) and at rest, access controls, app integrity checks and secure cloud infrastructure on Google Cloud Platform. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

12. Your rights

You have the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase your data (see section 10).
• Port your data to another service in a structured, machine-readable format.
• Restrict how we process your data.
• Object to processing based on legitimate interests, including ad measurement and tips emails.
• Withdraw consent at any time where we rely on it.

To use these rights, email help@klipx.app. We will reply within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

13. If you are in the European Economic Area

Because we offer the Service to people in the European Economic Area, the EU General Data Protection Regulation also applies to how we handle your data, and you have the same rights described in section 12. You can complain to the data protection authority in the EU country where you live or work, or where you think a breach happened, as well as to the ICO. Contact us first at help@klipx.app and we will try to help.

14. Children

The Service is not intended for children under 13, and we don't knowingly collect personal data from them. Users aged 13 to 17 need a parent's or guardian's permission to accept our Terms and to make purchases. If you believe a child under 13 has given us personal data, email help@klipx.app and we will delete it.

15. Cookies on the website

This section applies to createmusic.net. Essential cookies keep the site working. Analytics and marketing cookies only load after you accept them in the cookie banner, and you can change your choice at any time with "Cookie Settings" in the site footer or in your browser settings.

16. International transfers

Some of our providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with safeguards such as encryption.

17. Changes to this policy

We will update this policy when our practices change. If a change is significant, we will tell you in the app or by email before it takes effect. The date at the top shows the latest version. The September 2026 update added the iPhone app, Sign in with Apple and App Tracking Transparency.

18. Contact us

Klipx Limited (Company Number 17221685)
66 Paul Street, London EC2A 4NA, United Kingdom
Email: help@klipx.app
In the app: Settings > Send Feedback