Your music is yours.

What we store

• Your account: your email address and your password. The password is scrambled before it's stored, so nobody, including us, can read it.
• Your library: songs, charts, notes, practice logs, setlists, goals, and the links you add.
• Files you upload: recordings (audio and video) and chart files such as PDFs, Guitar Pro, MusicXML and MIDI. The app uses your microphone or camera only while you're recording.
• Shared setlists: when you share a set, the names your bandmates type in and any notes or marks they add.
• Sign-in cookies: one keeps you logged in, and a bandmate who opens a share link gets one that remembers their name for that set. They're the only cookies we set, and none are used for tracking.
• A copy on your device: so Songroost works offline, your library, including chart files, is also saved in your browser or the Songroost app on each device you use. Signing out removes it from that device, except changes made offline that haven't synced yet: those stay until you sign back in and they upload. Deleting your account removes all of it from the device you delete from.
• Account activity: which days your account was used and from which browser or app, sign-ins and failed sign-in attempts (kept for a year), and error reports (kept for 90 days). We use these only to keep accounts secure and to fix problems.
• Feedback you send: your message, plus the device and app details the feedback form shows you before you send it.

Who handles it for us

Songroost runs on a few services, each used only for its part of the job:

• Modal runs the app.
• Neon hosts the database that holds your account and library.
• Cloudflare serves this website and the app's address, and stores your recordings and chart files.
• Stripe (on the web), Apple (in the iOS app) and Google Play (in the Android app) handle payments when you buy something. Your card details go straight to them; we never see or store them. We receive a record of the purchase (what was bought, when, and whether it's still active or was refunded), linked to your account.
• Resend sends account emails: sign-up and password-reset links. We don't send marketing email.
• Anthropic powers the optional AI suggestions. Nothing is sent until you allow AI suggestions (the app asks the first time, and you can turn them off in Settings → AI), and then only when you use one: the details it needs (for example, a song's practice notes, or your song list for a setlist idea) are sent to Anthropic's Claude to produce the suggestion. Anthropic's commercial terms don't allow it to train its AI on what we send, and it deletes it within 30 days (it can keep something longer only if it's flagged as misuse, or if the law requires it).

Each of these services may use your data only to do its part for Songroost, and is bound by its terms with us to protect it at least as well as this policy does. We don't sell your data or share it with advertisers. These services are based in the United States. Like almost every website, they keep ordinary server logs, including your IP address (the number that identifies your internet connection), to keep things secure and fix problems.

Getting your data, and deleting it

You can download everything in your library at any time from Settings → Back up everything. You can delete your account yourself in Settings → Account → Delete account. It's immediate and permanent: your library, files and recordings are deleted, and so are any setlists you share, so your bandmates lose access to them. If you pay for Studio on the web, it won't renew; the current period isn't refunded. Studio bought in the iOS app is billed by Apple, and only you can cancel it, in your App Store account settings. Studio bought in the Android app is billed by Google Play, and only you can cancel it, in Google Play's subscription settings. Do that before deleting the account. If you can't sign in, email support@songroost.com from the address you signed up with and we'll delete it within 30 days. We also keep backups in case something goes badly wrong; anything deleted is gone from those within 90 days.

Other things to know

Songroost isn't meant for children under 13. If this policy changes in a way that matters, we'll say so in the app before it takes effect. Questions go to support@songroost.com.