Privacy Policy

Last updated: 4 July 2026

This is a good-faith, plain-English policy describing how the app actually works. It is a starting template, not legal advice — please have it reviewed by qualified counsel and adjust the contact and operator details before a public launch.

LOVE Studio Pro (“the app”) is a tool for creating original music, voiceovers, and cover art, and for narrating public-domain Scripture. This policy explains what data the app handles and why.

Data we handle

Data	Why	Where it lives
Your email address	Optional account sign-in (one-time code) so your library can sync across devices	Supabase (auth). Only if you choose to sign in.
Your creations (audio, cover art, lyrics, metadata)	To build your personal library	On your device (browser IndexedDB) by default; also in Supabase storage if you sign in to sync.
The text you enter (prompts, briefs, lyrics, voiceover text, song links)	To generate what you ask for	Sent to the AI providers below to fulfil the request; not stored by us beyond the request.
Basic technical logs (IP address, request time)	Security, abuse-prevention, and reliability	Our hosting provider (Vercel), transiently.
Preferences (theme, defaults, translation)	To remember your settings	Your browser’s localStorage — never sent to us.

Third-party AI processors

To generate content, the text and links you submit are sent to whichever providers the deployer has configured. These may include: OpenAI, ElevenLabs, Google (Gemini/Lyria), xAI (Grok), Hugging Face, Replicate, AI/ML API, and Spotify (for reference-track lookups). Each processes your input under its own terms and privacy policy. We send only what is needed to fulfil your request.

Your own API keys (bring-your-own-key)

If you choose to paste your own provider API keys in Settings, those keys live only in this browser (localStorage). On each generation a key is sent as an encrypted-in-transit request header to our /api function, which uses it in-memory solely to make your own provider call and then discards it — it is never written to disk, logged, or stored on our side. Each key is sent only to the single feature that powers it (e.g. an ElevenLabs key goes only to the voice/music route, never to the lyrics route). A strict Content-Security-Policy prevents any script on the page from sending your keys anywhere other than this app. You can wipe them any time with “Clear my keys from this browser” in Settings. The deployer’s own keys are stored encrypted at the host (Vercel) and are never sent to your browser.

What we do NOT do

We do not sell your data, prayers, or creations.
We do not run advertising or third-party ad-tracking cookies.
We do not use voice cloning or imitate real artists.

Your choices & rights

Delete on-device data: Settings → Data & storage → “Clear library,” or clear your browser’s site data.
Delete synced data: delete tracks in the Library (removes the cloud copy), or contact us to delete your account and cloud data.
Access/portability: download any creation from your Library at any time.
Depending on your location (e.g. GDPR/CCPA), you may have rights to access, correct, delete, or port your data — contact us to exercise them.

Children

The app is not directed to children under 13, and we do not knowingly collect their personal information. Family/kids content is intended for use by adults with children.

Changes

We may update this policy; material changes will be reflected in the “Last updated” date above.

Contact

Questions or data requests: andrewinverts@gmail.com.