Sing-Alo — Privacy Policy

Last updated: 2026-11-01

Sing-Alo ("Sing-Alo," "we," "us") makes personalized children's songs and stories that a parent or caregiver plays with their young child. This policy explains what we collect, why, and the choices you have. Sing-Alo is designed for a grown-up to set up and use — it is not intended for children to use on their own.

Who this is for

The account holder is always an adult (a parent or caregiver). You create the account, you enter your child's information, and you control it.

What we collect

Information you give us (stored on our servers):

• Your email address, provided through Sign in with Apple, to create and secure your account. If you chose Apple's "Hide My Email," we only ever see the private relay address.
• Your name, if Apple passes it along when you sign in.
• A credential from Sign in with Apple, kept against your login so that if you delete your account, we can also tell Apple that Apple ID is no longer linked to Sing-Alo. It is deleted the moment your account is.
• The names of the other grown-ups in your family, and the invitation codes used to add them. When you invite another grown-up to share the app with your family, we store the code we generate for them and, once they join, the name they go by. We use these so a notification can name who joined or left your family, and so your family's members can see each other in the app.
• Your child's first name, age band, and whether they're a boy or a girl — the age band is a year range, "0–1" through "5–8," and the boy-or-girl answer is kept as the pronouns to sing about your child, "he" or "she." That question can be left unanswered. All three are asked for only when you choose to have a song made, on the first step of the song request. Nothing about your child is asked for when you sign up, and none of it is needed to open the app, browse, or play anything. We use them to make the song you asked for, to use the right words for your child in it, to suggest songs that suit their age, and to show whose songs are whose.
• What you tell us about the song you want — the learning goal, in your own words; and how you'd like it to sound — a musical style, and whether you'd prefer a woman's or a man's voice. Everything but the learning goal can be skipped. We keep them so we can make the song and so you can see what you asked for.
• What you tell Owlie when you ask for a story — the notes you write, in your own words, for a story made for your child. We keep them so the story can be made and so you can see what you asked for. If instead you put your child into one of a world's stories, you write nothing: we use only your child's first name and the pronouns already given.
• Your in-app choices — favorites, your family's coin balance and what its coins were spent on, the line-ups you build, and any name you give a routine (for example renaming "Build your own" to "Car rides") — so the app works for your family.
• Basic usage information — which screens are opened and which buttons are tapped (for example "a song was played" or "a song was asked for"), with the time, your account's ID number, the ID number of the child profile in use, your device model, its operating system version and the app version. We use it to understand how the app is working and to improve it. It is kept in our own systems and also sent to our analytics provider, PostHog (see Who we share information with). It never includes your child's name, anything you type, your email, or your location, and we do not record your screen.
• Error diagnostics if something goes wrong — an error message, the technical detail of where in the code it happened, which screen you were on, your device platform and the app version. These records are tied to your account and never to a child's profile — the app has no way to attach a child to an error report. They are kept in our own systems and are not shared with anyone.
• A device push token. The app asks for notification permission right after you sign in, and stores a device push token only if you allow it, so we can tell you when a song is ready. You can turn it off in Settings.

Information that stays on your device and is never sent to us:

• Reaction photos. If you capture your child's reaction to a song, the photo is saved only to your phone's own Photos library. It is never uploaded to Sing-Alo or stored on our servers.

We do not collect precise location, we do not show ads, and we do not track you across other companies' apps or websites.

How we use information

• To provide the app: create your account, show your child's name and age-appropriate songs in the app, save your routines and choices, and deliver songs and stories.
• To notify you (only if you turn on notifications) when something you asked for is ready.
• To keep the app secure and to understand and improve how it works.

Children's privacy

Sing-Alo is a parent-operated app. A parent or caregiver creates the account and provides any information about their child. We collect the limited child information above — first name, age band, and the pronouns to sing about them — together with what you tell us about the song you want and how you'd like it to sound, including the musical style and the voice you choose, all of it only once you ask for a song, solely to make and personalize songs and stories, never to advertise to your child, and never to build a profile for marketing. Captured reactions of your child stay on your own device. If you believe a child's information has been provided to us without a parent's involvement, contact us at support@sing-alo.com and we will delete it.

Who we share information with

We do not sell your information. We share it only with service providers that help us run the app, under agreements that limit them to that purpose:

• Apple — for Sign in with Apple and app services.
• Supabase — our secure database and storage provider, where your account data and your family's private files are stored.
• Expo — the service we use to deliver app updates and, if you turn notifications on, to send them. It receives your device's notification token and the text of each notification we send you, which can include your child's first name (for example "Mateo's song is ready"), the name a grown-up in your family goes by (for example "Nana has joined your family"), or, when an invitation you made has expired, how many coins came back. It does not receive anything else about your child, and the only account information it receives is a grown-up's name or how many coins came back, when a notification includes one.
• PostHog — our analytics provider, in the United States. It receives the basic usage information described above — which screens and buttons are used, with your account's ID number, the ID number of the child profile in use, and your device model, system version and app version. It does not receive your child's name, your email, anything you type, any recording of your screen, or your location: we tell it not to work out a location from your connection. We use it only to understand and improve the app — never for advertising, and never to track you across other companies' apps or websites.
• Vercel — hosts this website (including the page you are reading). It does not receive anything from the app.
• Anthropic, Google and ElevenLabs — the services that write and perform your child's song. They receive what you tell us when you ask for a song — including the musical style and the voice you asked for — and your child's first name, so the song can be about them and use their name. They are never sent any recording of you or your child — the song's audio is made from written instructions, not from anyone's voice. We ask Google not to keep what you tell us once the song is made. For a story made for your child, Anthropic receives the notes you wrote for Owlie and your child's first name, so it can write the story, and ElevenLabs receives the story's words, with your child's first name in them, so it can voice them. When you put your child into one of a world's stories, Anthropic and ElevenLabs receive your child's first name and pronouns, so the lines that name your child can be rewritten and voiced. Nothing else about your family is sent for either kind of story.
• OpenAI — receives the finished song's audio so we can time the words to the music, and the app can follow along line by line as the song plays. For a song made for your child, their first name is sung in that audio, by a synthetic voice, and it is never a recording of you or your child. We send the song's words in writing along with the audio, with your child's first name in them, so it knows what to listen for. It also receives a short written description of the song's scene, drawn from what you told us when you asked for it, so it can paint the cover. For a story Owlie makes for your child, it receives only a short written description of one moment of the story, so it can draw the cover; it does not receive the story's audio. It does not receive your account details, and nothing you or your child says.
• GitHub — runs the process that makes a song or a story for your child. It holds the finished song or story and its working files for two weeks, then deletes them.

That is the complete list.

(If we add another provider, we will name it here before it receives anything.)

We may also disclose information if required by law.

Where your data is stored and how long we keep it

Your account data is stored securely with our database provider. We keep it for as long as your account is active.

Recordings. Nothing you or your child says is recorded and sent to us. Reaction capture takes a photo and nothing else — the app does not ask for microphone access at all — and the photo stays on your phone.

The shared catalogue — the songs and artwork every family sees — is stored publicly, the way any streaming catalogue is. Those songs are the same for everyone: they contain nothing about your family, and nothing you type is ever published there.

A song made for your child is kept differently, because it is not the same song for everyone — their name is sung in it. The song file itself is stored in private storage keyed to that child, and it is never placed in the public catalogue: no other family can reach it. Your app opens it through a short-lived link minted for your signed-in account, and the process that makes the song opens the file itself once it is finished, so the words can be timed to the music: that is why GitHub, which runs that process, and OpenAI, which does the timing, receive it.

A story made for your child, and your child's own copy of a world's story, are kept the same way: in private storage keyed to that child, never in the public catalogue, and opened only through a short-lived link minted for your family's signed-in accounts.

Nothing of your child's is uploaded from your phone. Reaction photos stay in your own Photos library (see above), and the app has no other upload or media feature.

When the grown-up who set up the family deletes their account (see below), we delete your family, your children's information, your routines and choices, the song requests you made and what you told us in them, every stored file belonging to your children, and your usage and error records. The copy of your usage information held by PostHog is deleted within 30 days of your account being deleted. The files are removed before the account records are, so nothing can be left behind with no account able to reach it. Any other grown-up in the family loses access to all of it. Their own accounts are not deleted.

When any other grown-up deletes their account, we delete their login, their name and their email. The songs and requests they made belong to the family and stay with it, with their name taken off.

When a grown-up leaves a family, they keep their login and lose access to everything of the family's.

The app also clears what it had kept on your phone — which child was selected, what was playing, the temporary copies of our own songs it keeps so playback does not stutter, and your app settings. Your reaction photos are not touched: they are in your own Photos library, they are yours, and deleting them is your choice to make (see Your choices and rights).

Deletion is permanent and cannot be undone.

Your choices and rights

• Delete everything, any time. The grown-up who set up the family goes to Settings → "Delete account & data." This permanently removes your account and the data associated with it, from our servers and from your phone.
• Delete just your own account. Any other grown-up goes to Settings → "Delete my account."
• Reaction media lives in your phone's Photos — manage or delete it there.
• Notifications can be turned off in the app or in your device settings.
• To ask a question or request help with your data, email support@sing-alo.com.

Security

We use industry-standard measures (encrypted connections, access controls, and row-level security in our database) to protect your information. No system is perfectly secure, but we work to keep your data safe.

Changes to this policy

If we change how we handle data, we'll update this page and the "Last updated" date, and — for material changes — let you know in the app.

Contact

Questions about privacy? Email support@sing-alo.com.