LEGAL

Privacy policy

Last updated: October 13, 2026

What we process

When you use music search, we process the audio clip or text you submit, basic request metadata, and technical logs needed to operate and secure the service. We also process your email address, Google account identifier, credit balance, subscription status, saved matches, and search history. If you rate whether a result was the right song, we store that rating with the search so we can measure and improve accuracy.

Accounts and payments

Google Identity Services provides account login and shares your verified email and basic profile after you consent. Stripe processes website checkout, subscription management, and payment details. Apple, Google Play, and RevenueCat process mobile in-app purchases and may provide us with purchase, subscription, app-user, and transaction identifiers. We use these records to provide paid features, restore purchases, prevent fraud, and provide support. We do not receive or store your full card number.

Recognition diagnostics and local analysis

Song-identification uploads are stored in a private Amazon S3 bucket for recognition and short-lived troubleshooting, then automatically deleted within 24 hours. For the same period, we retain the submitted lyrics or description, recognition method, provider, returned candidates, timing, and any error needed to investigate a failed search. These diagnostics stay in private operational storage and are not sent to analytics or advertising services. Audio is sent to our music-recognition provider solely to identify the track. Files selected for BPM, key, music profile, or mix analysis are decoded locally by your browser and are not uploaded to us.

Text and catalog searches

Lyrics and descriptions may be processed by Google Gemini, Google Search grounding, and music catalog services to return possible matches. Similar-song queries and supported public music links may be processed by MusicBrainz, Spotify, YouTube, and Apple catalog endpoints to resolve tracks and return related music. Do not submit personal or sensitive information.

Mobile app data and installed applications

The Android app does not access, collect, transmit, or share the inventory or list of applications installed on your device. The Android app does not include or use Umeng Analytics. We do not use installed-application information for analytics, advertising, fraud prevention, or any other purpose.

When you choose to record or select audio or video, the mobile app accesses only the microphone or media item needed for that action. It does not continuously record in the background. Selected media and recordings are used to perform the music-identification request described above.

Security, analytics, and advertising

Traffic is encrypted in transit. We store a one-way hash derived from your account identifier for short-lived abuse prevention; we do not use it to build an advertising profile.

We use Sentry for browser error monitoring. It may receive a technical error message, code stack trace, page path, browser and device details, and a release identifier. We disable session replay, performance tracing, and default personal-data collection, and remove query strings, account identity, search text, lyrics, song descriptions, filenames, audio, and analysis measurements from error reports.

With your permission, Google Analytics measures website visits and aggregate feature usage and may store analytics cookies. We also send our private operations dashboard random first-party visitor and session IDs, path-only page visits, a two-letter country code, broad device and traffic-source categories, the referring hostname, and any UTM source or campaign supplied in the landing URL. We do not send uploaded audio, lyrics, song descriptions, filenames, or analysis measurements for analytics.

The iOS app uses Umeng Analytics to measure screen views, purchase or identification events, and aggregate feature usage. These events may be associated with our app-specific account identifier after you link an account. Umeng may process device and network information needed to provide analytics. This integration is not present in the Android app.

The mobile app uses Google Mobile Ads to offer optional rewarded advertising. Subject to your consent choices and device settings, Google may process advertising identifiers, IP address, device information, ad interactions, and diagnostics to select, deliver, measure, secure, and limit ads. Where required, the app displays Google's consent choices before the ads SDK is initialized. The website does not currently load third-party advertising scripts. You can change website Google Analytics choices using “Analytics settings” in the footer.

Your choices

You can decline optional advertising consent where offered and can reset or limit your device advertising identifier in the operating-system settings. You can manage a paid subscription through the relevant app store or website billing portal. Deleting your account also deletes retained recognition diagnostics and linked uploads, subject to limited legal, security, and transaction-record retention. To request account deletion or exercise an applicable privacy right, contact us from the email address associated with your account.

Contact

Questions or deletion requests can be sent to support@findmusicbysound.com.