Sing-Alo — Privacy Policy

Last updated: 2026-09-15

Sing-Alo ("Sing-Alo," "we," "us") makes personalized children's songs that a parent or caregiver plays with their young child. This policy explains what we collect, why, and the choices you have. Sing-Alo is designed for a grown-up to set up and use — it is not intended for children to use on their own.

Who this is for

The account holder is always an adult (a parent or caregiver). You create the account, you enter your child's information, and you control it.

What we collect

Information you give us (stored on our servers):

• Your email address, provided through Sign in with Apple, to create and secure your account. If you chose Apple's "Hide My Email," we only ever see the private relay address.
• Your name, if Apple passes it along when you sign in.
• Your child's first name, age band, and whether they're a boy or a girl — the age band is a year range, "0–1" through "5–8," and the boy-or-girl answer is kept as the pronouns to sing about your child, "he" or "she." That question can be left unanswered. All three are asked for only when you choose to have a song made, on the first step of the song request. Nothing about your child is asked for when you sign up, and none of it is needed to open the app, browse, or play anything. We use them to make the song you asked for, to use the right words for your child in it, to suggest songs that suit their age, and to show whose songs are whose.
• What you tell us about the song you want — the learning goal, in your own words; and how you'd like it to sound — a musical style, and whether you'd prefer a woman's or a man's voice. Everything but the learning goal can be skipped. We keep them so we can make the song and so you can see what you asked for.
• Your in-app choices — favorites, the line-ups you build, and any name you give a routine (for example renaming "Build your own" to "Car rides") — so the app works for your family.
• Basic usage information (which features are used) to understand how the app is working and to improve it. This is kept in our own systems.
• Error diagnostics if something goes wrong — an error message, the technical detail of where in the code it happened, which screen you were on, your device platform and the app version. These records are tied to your account and never to a child's profile — the app has no way to attach a child to an error report. They are kept in our own systems and are not shared with anyone.
• A device push token. The app asks for notification permission right after you sign in, and stores a device push token only if you allow it, so we can tell you when a song is ready. You can turn it off in Settings.

Information that stays on your device and is never sent to us:

• Reaction photos. If you capture your child's reaction to a song, the photo is saved only to your phone's own Photos library. It is never uploaded to Sing-Alo or stored on our servers.

We do not collect precise location, we do not show ads, and we do not track you across other companies' apps or websites.

How we use information

• To provide the app: create your account, show your child's name and age-appropriate songs in the app, save your routines and choices, and deliver songs.
• To notify you (only if you turn on notifications) when something you asked for is ready.
• To keep the app secure and to understand and improve how it works.

Children's privacy

Sing-Alo is a parent-operated app. A parent or caregiver creates the account and provides any information about their child. We collect the limited child information above — first name, age band, and the pronouns to sing about them — together with what you tell us about the song you want and how you'd like it to sound, including the musical style and the voice you choose, all of it only once you ask for a song, solely to make and personalize songs, never to advertise to your child, and never to build a profile for marketing. Captured reactions of your child stay on your own device. If you believe a child's information has been provided to us without a parent's involvement, contact us at support@sing-alo.com and we will delete it.

Who we share information with

We do not sell your information. We share it only with service providers that help us run the app, under agreements that limit them to that purpose:

• Apple — for Sign in with Apple and app services.
• Supabase — our secure database and storage provider, where your account data and your family's private files are stored.
• Expo — the service we use to deliver app updates and, if you turn notifications on, to send them. It receives your device's notification token and the message we send you. It does not receive anything about your child, or your account data.
• Vercel — hosts this website (including the page you are reading). It does not receive anything from the app.
• Anthropic, Google and ElevenLabs — the services that write and perform your child's song. They receive what you tell us when you ask for a song — including the musical style and the voice you asked for — and your child's first name, so the song can be about them and use their name. They are never sent any recording of you or your child — the song's audio is made from written instructions, not from anyone's voice. We ask Google not to keep what you tell us once the song is made.
• OpenAI — receives the finished song's audio so we can time the words to the music, and the app can follow along line by line as the song plays. For a song made for your child, their first name is sung in that audio, by a synthetic voice, and it is never a recording of you or your child. We send the song's words in writing along with the audio, with your child's first name in them, so it knows what to listen for. It also receives a short written description of the song's scene, drawn from what you told us when you asked for it, so it can paint the cover. It does not receive your account details, and nothing you or your child says.
• GitHub — runs the process that makes the song. It holds the finished song and its working files for two weeks, then deletes them.

That is the complete list.

(If analytics are enabled in a future version, we will name the analytics provider here and update this policy before turning it on. The same goes for any other provider: we will name it here before it receives anything.)

We may also disclose information if required by law.

Where your data is stored and how long we keep it

Your account data is stored securely with our database provider. We keep it for as long as your account is active.

Recordings. Nothing you or your child says is recorded and sent to us. An earlier version of the app could record a parent saying their child's name; if you used one, that clip may still be in private storage — not published, no public link, and readable by nobody but your own signed-in account. Deleting your account removes it (see below). Reaction capture takes a photo and nothing else — the app does not ask for microphone access at all — and the photo stays on your phone.

The shared catalogue — the songs and artwork every family sees — is stored publicly, the way any streaming catalogue is. Those songs are the same for everyone: they contain nothing about your family, and nothing you type is ever published there.

A song made for your child is kept differently, because it is not the same song for everyone — their name is sung in it. The song file itself is stored in private storage keyed to that child, and it is never placed in the public catalogue: no other family can reach it. Your app opens it through a short-lived link minted for your signed-in account, and the process that makes the song opens the file itself once it is finished, so the words can be timed to the music: that is why GitHub, which runs that process, and OpenAI, which does the timing, receive it.

Nothing of your child's is uploaded from your phone. Reaction photos stay in your own Photos library (see above), and the app has no other upload or media feature.

When you delete your account (see below), we delete your family, your children's information, your routines and choices, the song requests you made and what you told us in them, every stored file belonging to your children — including a name recording left behind by an earlier version of the app — and your usage and error records. The files are removed before the account records are, so nothing can be left behind with no account able to reach it.

The app also clears what it had kept on your phone — which child was selected, what was playing, the temporary copies of our own songs it keeps so playback does not stutter, and your app settings. Your reaction photos are not touched: they are in your own Photos library, they are yours, and deleting them is your choice to make (see Your choices and rights).

Deletion is permanent and cannot be undone.

Your choices and rights

• Delete everything, any time. In the app, go to Settings → "Delete account & data." This permanently removes your account and the data associated with it, from our servers and from your phone.
• Reaction media lives in your phone's Photos — manage or delete it there.
• Notifications can be turned off in the app or in your device settings.
• To ask a question or request help with your data, email support@sing-alo.com.

Security

We use industry-standard measures (encrypted connections, access controls, and row-level security in our database) to protect your information. No system is perfectly secure, but we work to keep your data safe.

Changes to this policy

If we change how we handle data, we'll update this page and the "Last updated" date, and — for material changes — let you know in the app.

Contact

Questions about privacy? Email support@sing-alo.com.