← Back

Privacy Policy

Last updated: October 6, 2026

StudioMode ("we", "us") is a music creation app: you discover beats, write lyrics over them, record vocal takes, and — if you are a producer — upload, price and sell your own beats. This policy explains what data we collect, why, and how it is handled.

It is written to match, category by category, the privacy manifest shipped inside the iOS app and the privacy answers on our App Store listing. If you find a disagreement between the three, email us and we will fix it.

What we collect

• Account data: your email address, and a password hash if you sign up with a password (managed by Supabase Auth — we never see your raw password). If you sign in with Apple or Google, we receive the email address that provider releases to us and no password at all.
• Audio you record: StudioMode's studio records through your microphone. Your takes, your project files and the masters you export are stored in our cloud storage so they survive reinstalls and sync across your devices. We do not listen to them, we do not use them to train any model, and they are not shared with anyone unless you choose to share or publish them yourself. The microphone is only ever opened while you are recording, and iOS asks your permission the first time.
• Lyrics and writing you type: your bars, notes and sticky notes are saved to your account. When you use a writing tool — continue the verse, write a hook, rewrite a bar, rhyme finder, ghostwriter, vocal-preset suggestions — the text you are working on and the beat's tempo and key are sent to Anthropic's Claude API to generate the suggestion.
• What you search for: the searches you run in the app are saved to your account. Each query is sent to Anthropic's Claude API to parse it into filters, and your search history then feeds what we show you — recommendations, the artists we add to the catalog on demand, and the beats we pick for notifications. You can clear it: Account → “Reset my algorithm” deletes your search history outright, along with the play history behind your recommendations.
• What you do in the app: beats you play, save, finish, click through to, and how long you listen; projects and takes you create; searches you run; your subscription tier. We use this to run the app and to decide which beats to show you next — your Daily Mixes, recommendations and notifications are built from it. We also record lightweight product-funnel events (for example "started a recording", "exported a master") so we can see where the app is confusing or broken.
• A device identifier: a random string the app generates on first launch and stores in your device's keychain, attached to those product-funnel events so a single person's steps can be followed through a session. It is ours, it is not an advertising identifier, and it is not your device's hardware or Apple identifier. It is discarded when you delete the app.
• Purchases and licences: which subscription or licence you bought, when, at what price, and the licence document generated for it. Card details are handled by Stripe or by Apple's App Store and never reach us — we receive a customer or transaction id and a status.
• If you sell as a producer: your listings and prices, your orders and payouts, and the identity and bank details Stripe requires to pay you. Those identity and bank details are collected by Stripe directly, on Stripe's pages; we never see or store them.
• Photos you choose: when you add cover art for a beat, or an avatar or banner for your artist page, you pick that image from your photo library and it is uploaded to our storage. We ask iOS for photo access at the moment you tap to choose one, we only ever receive the single image you pick, and we never browse your library.
• A push token: if you allow notifications, the token iOS issues for your device is stored against your account so we can reach that device, and is sent to Expo's push service to deliver each message. Turning notifications off stops it being used.
• On the web: studiomode.app keeps your signed-in session and your local preferences in your browser's own storage (localStorage / sessionStorage). It is first-party and essential to signing in — we set no advertising or cross-site tracking cookies, which is why you see no cookie banner. Clearing your browser storage signs you out.
• Technical data: IP address, user agent and referer when you click through to a beat — used to count clicks and detect abuse.
• Error and diagnostic data: failures we need to see to fix them (a failed upload, a failed purchase, a sync error), recorded as rows in our own database.

What we do not do

• We do not track you across other companies' apps or websites, and we do not use Apple's advertising identifier. The app ships with tracking explicitly declared as off.
• We do not share or sell your data with advertisers or data brokers.
• We do not use your recordings, your lyrics or your masters to train any model of our own, and we do not sell or license them to anyone to train theirs. Text sent to Anthropic for a writing or search suggestion is covered by Anthropic's own commercial terms, linked below.
• We run no third-party analytics, advertising or crash-reporting SDKs. Product analytics are our own rows in our own database.
• We do not use your camera, your contacts, or your music library, and we do not write anything into your photo library.

How we use your data

• To run the app: keep you signed in, sync your saved beats, projects, takes and lyrics across your devices, deliver what you bought, generate licence documents, pay producers, enforce rate limits.
• To personalise what you see: what you play, save and finish shapes your Daily Mixes, your recommendations and the beats we surface in notifications. This is the main reason we keep listening history.
• To power the writing and search tools: by sending the text you are working on to Anthropic for that one request, as described above.
• To improve the app: aggregate, anonymised query and funnel patterns help us tune search parsing and find the places people get stuck.
• To send you messages: transactional email (receipts, password resets, order and payout notices) and, if you allow notifications, push notifications about new beats, orders and your writing streak. You can turn push off in Account → Notification settings or in iOS Settings. We never send marketing without your opt-in.

Third-party services

These are every outside service that receives any of your data, and what each one gets.

• Supabase — our database, authentication and file storage. Holds your account, your projects, your lyrics and your recordings. Privacy policy.
• Anthropic — the Claude API. Receives the lyrics or search text you are actively working on, plus beat tempo and key, for that one request. Privacy policy.
• Apple — the App Store handles in-app purchases and subscriptions, and Sign in with Apple handles that sign-in option. Privacy policy.
• RevenueCat — reconciles your App Store subscription with your account so your access is correct on every device. Receives your user id. Purchase status reaches it from Apple, not from us. Privacy policy.
• Stripe — payment processing for web purchases and beat licences, and payouts to producers. Receives payment and, for producers, the identity details it is legally required to collect. Privacy policy.
• Expo — delivers push notifications. Receives a push token tied to your device, and the notification text. Privacy policy.
• Google / YouTube — many beats are streamed from or linked to YouTube, and we use the YouTube Data API for discovery. Sign in with Google handles that sign-in option. Privacy policy.
• Vercel — hosting and serverless functions. Processes requests to our API. Privacy policy.

Your rights

You can:

• Export your data — sign in, go to Account → "Download my data (.json)". The download contains every row tied to your account: saved beats, folders, notes and lyrics, follows, listening history, projects, purchases and profile. Or email hello@studiomode.app if you'd prefer a manual export.
• Delete your account — sign in, go to Account → "Delete my account". Confirmed twice before it fires. In one transaction it removes your sign-in record and your profile, and with them your saved beats, folders, follows, reactions, projects, takes, lyrics and play history. Your stored files — your recordings, masters and uploaded photos — are then removed from our storage by a sweep that runs every day, so they are gone within 24 hours rather than in the same instant. Your beat-click, beat-search and product-funnel log rows are permanently detached from you instead of deleted: the user id is erased and cannot be re-linked, and the de-identified row is kept for aggregate counts. Records we are legally required to keep — a completed purchase, a licence you were issued, a payout — are retained as described under Data retention.
• One current limitation, stated plainly. If you have bought a beat licence, or set up producer payouts, the self-serve delete will fail with an error rather than complete — those records are tied to your account in a way the automatic flow cannot unpick yet. Email hello@studiomode.app and we will do it by hand. We are fixing this; when it is fixed this paragraph goes away.
• Opt out of any non-essential email at any time using the unsubscribe link in any email we send, or via Account → Notification settings.

EU/UK residents have rights under GDPR including data portability (Art. 20 — covered by the JSON export above), rectification (Art. 16 — email us), and erasure (Art. 17 — covered by Delete my account). California residents have rights under CCPA including the right to know (covered by the JSON export) and the right to delete (covered by Delete my account). The export and the account-deletion transaction run instantly, with no manual review. Removal of your stored files follows within 24 hours, on the daily sweep described above. The one exception is the limitation noted above, where erasure is currently a manual request.

Data retention

We keep your account data, projects, recordings, lyrics and photos while your account exists, and delete them when you delete your account. Activity logs are treated in two ways, and it is worth being exact. Your play and click-through history inside the app is deleted with your account. Your beat-click, beat-search and product-funnel rows are de-identified instead — the user id is erased and the row is kept only as an anonymous count. You can also delete your search and play history at any time without deleting your account, using Account → “Reset my algorithm”. We do not currently run a fixed-window purge of de-identified aggregate logs; if we introduce one, we will say so here. Purchase, licence and payout records are kept for as long as tax and accounting law requires, even after an account is deleted, because they are records of a completed transaction between you and a producer.

Children

StudioMode is not directed to children under 13, and we do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we will remove it and its data.

Changes

We'll post any changes here and update the "Last updated" date. If a change materially affects how we handle your data, we'll tell you in the app before it takes effect.

Contact

Questions? Email hello@studiomode.app.