Privacy Policy - Studio

Last Updated: July 14, 2026

Overview

Studio is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information.

Information We Collect

Information You Provide

  • Email address and display name
  • Audio generation prompts and preferences
  • Generated audio files and metadata
  • Subscription and billing information

Information Collected Automatically

  • Device information (model, OS version)
  • Usage analytics and app performance
  • IP address and network information

How We Use Your Information

We use information to:

  • Provide TTS and music generation services
  • Manage your account and subscriptions
  • Improve our services
  • Communicate with you
  • Prevent fraud and ensure security

Third-Party Services

We share information with:

  • Music API: For music generation
  • Google Cloud: For TTS and storage
  • Firebase: For authentication
  • RevenueCat: For subscription management

Before your first transmission to a third-party AI (MiniMax, Suno, Google), the app shows an in-app consent dialog naming the provider, listing the data types being sent, and requiring explicit tap-to-accept. You can withdraw this consent at any time from Settings.

AI Voice Cloning & Biometric Data

The voice cloning feature records a sample of your voice and sends it to MiniMax to generate a personal voice model. Voice data is biometric data in many jurisdictions (Illinois BIPA, EU GDPR Art. 9, Texas Capture or Use of Biometric Identifier Act, Washington biometric law). We treat it accordingly:

  • We require explicit consent (two checkboxes) before recording or uploading any voice sample: (1) "I confirm I am the person whose voice is being recorded or I have their written consent," (2) "I consent to my voice being used to train an AI voice model."
  • The voice sample is stored on our servers (Prisma Database + Tigris S3) only as long as needed to provide the service. You can delete any cloned voice and all its derivatives at any time from Settings or via the voice browser.
  • Account deletion (Settings → Delete Account) permanently removes your voice sample, cloned voice model, and all generated audio. This is irreversible and required by Apple App Store guideline 5.1.1(v).
  • We do not sell, share, or transfer your voice data to any third party other than MiniMax for the explicit purpose of generating your voice model.
  • Generated audio outputs are marked with a visible "AI-generated" label in the player and (where required by EU AI Act Article 50 effective August 2, 2026) with an inaudible machine-readable watermark.

Data Retention

We retain your data only as long as needed to provide the service or as required by law:

  • Account profile (email, display name, photo): while your account is active
  • Voice samples and cloned voice models: until you delete them or delete your account
  • Generated audio and music: 90 days from generation (after which you can still play from your history but the storage file may be reaped)
  • Credit transaction log: 7 years (tax / accounting requirement)
  • Subscription records: 7 years (tax / accounting requirement)
  • Access logs (IP, user agent, endpoint): 30 days

Your Rights

You have the right to:

  • Access your personal data
  • Delete your account and data
  • Request data portability
  • Opt-out of analytics
  • Withdraw consent anytime

Do Not Sell or Share My Personal Information

Dropabyte Studio does not sell or share your personal information with third parties for cross-context behavioural advertising, and we have not done so in the preceding 12 months.

California residents (and Virginia, Colorado, Connecticut, Utah residents under similar state privacy laws) have the right to opt out of the sale or sharing of their personal information at any time. Because we do not sell or share personal information, opting out is a no-op — but you can still exercise your right to access, delete, or correct your data:

  • Access your data — visit Settings → Download my data to get a JSON export.
  • Delete your data — visit Settings → Delete my account to permanently remove all your data.
  • For any other CCPA / CPRA request, contact us at [email protected]. We respond within 45 days as required by law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Full Policy DocumentView full policy at dropabyte.com