Privacy policy

Your account

Signing in only needs an email address: chipvoice sends a one-time link, valid for 30 minutes, and no password is stored. Your email identifies your account and is never shown on a public page; only the display name or handle you choose for a profile is public.

Your songs

A saved or published song stores its score, title and console choice, and, once you publish it, a public profile and a visibility you choose: public, unlisted or private. The account that owns a song is never exposed in that song's public API response or page.

Your prompts

If you generate a song from a text prompt, chipvoice stores that prompt, tied to your account. It is private by default: chipvoice never returns or displays a prompt to anyone but the account that wrote it, whether or not the resulting song is published.

Your prompt is sent to chipvoice's model provider, OpenAI, to check it against OpenAI's moderation and to produce the song. chipvoice does not use prompts to train any model.

chipvoice may refuse to generate a song: OpenAI's moderation can reject the prompt itself, and a separate check can reject a result that too closely matches a well-known melody.

See OpenAI's own description of how it handles API data for what that means on its side.

chipvoice keeps a generation's prompt for as long as its song exists. Withdrawing a generated song deletes its prompt too; the record that you generated a song (its model and token usage, which keep the beta's shared budget honest) stays, but the prompt text itself does not. A prompt whose song was never withdrawn is kept indefinitely.

Who else handles it

Running chipvoice depends on a few other services, each seeing only what its own job needs:

• Vercel hosts chipvoice.dev and keeps its own standard web server logs, which include IP addresses, for every request.
• Turso hosts the database that stores your account, songs, publications and prompts.
• domani sends your sign-in email, so it receives the address to deliver it to.
• OpenAI receives your prompt, as described above, to check it against OpenAI's moderation and to generate your song.

Deleting your data

There is currently no self-serve way to delete an entire account. Write to hello@chipvoice.dev and we will delete your account, songs and prompts by hand.

Who can see what

A public song, its title, console, tags and audio, is visible to anyone with the link, and listed in Explore. An unlisted song is visible only to whoever has its link. A private song, and every prompt, is visible only to its owner.

Cookies and browser storage

Signing in sets one cookie that keeps you signed in for 30 days. Your browser also keeps a couple of things locally on your device: any song or prompt you are still drafting, so a reload does not lose it, and a short-lived cache of your own signed-in account details, so the app does not have to re-check on every page. chipvoice runs no analytics or advertising trackers.

Changes and contact

This policy may change as chipvoice does; we will update the date above when it does. Questions: hello@chipvoice.dev.