Legal
Privacy Policy
This policy explains how Prompt Maschine handles information across its website and apps for iPhone, iPad, Mac and Android.
Effective: October 17, 20261. Scope
This Privacy Policy applies to the Prompt Maschine mobile and desktop applications, promptmaschine.com, and related support services. It covers both the Apple and Android versions of the app.
Available features and sign-in methods depend on your platform and app version. The AI Mastering details below apply where that feature is available, including Apple app version 1.5.0; they do not mean that an update is already available in your store.
Prompt Maschine is an independent songwriting and prompt-assistance product. It is not affiliated with Suno, Udio, ElevenLabs, MiniMax, Mureka, Anthropic, Google, Apple or YouTube.
2. Information we handle
| Category | What it includes and why it is handled |
|---|---|
| Account information | Name, email address, user identifier and sign-in provider when you sign in with Google, Apple or email. Guest mode can be used without a named account. In the Apple app, local email sign-in stores a one-way password hash on your device, not a readable password. |
| Phone number during Google sign-in | Google may collect a phone number on its own pages during account creation, verification or multi-factor authentication. Prompt Maschine does not request or receive that phone number. This provider-side collection is included in our Apple privacy disclosure because it can occur within the sign-in experience. |
| User content | Prompts, lyrics, song descriptions, reference lyrics, style profiles, vocal personas, exclusions and YouTube links that you enter or create, plus optional AI Mastering genre and notes. Saved copies remain on your device; text submitted to an online feature is sent to perform that request. In the Apple app, persona photos and imported audio are stored locally; online audio analysis uses extracted measurements and relevant metadata rather than the audio file. |
| AI Mastering measurements | Numerical measurements of loudness, dynamics, stereo image, tonal balance and track duration. After your agreement, these and any optional genre or notes are sent to obtain suggested mastering settings. The track audio is not uploaded. |
| Usage and diagnostics | Product interactions and other usage data, such as feature events, sign-in method and subscription tier; device or installation identifiers; app, device and operating-system details; crash reports; request timings; and other SDK diagnostic and operational information. These support app functionality, reliability and analytics. Technical request timings are used to operate and troubleshoot the service. |
| IP addresses and approximate location | Our backend processes IP addresses, request counts and timestamps to limit abuse and protect the service. Security logs may include IP addresses, routes and events such as failed access checks or exceeded limits. Google sign-in and analytics services may derive approximate location, such as country or region, from an IP address for security, functionality or analytics. Our backend does not use IP addresses to locate you, and the Apple app does not request precise GPS location. |
| Purchase information | Subscription product, entitlement and transaction status supplied by Apple or Google, plus purchase events and purchase history processed by analytics services. Store information unlocks paid features; analytics helps us understand purchases and use of the app. Apple and Google process payments. Prompt Maschine does not receive your full card number or payment credentials. |
| Website technical data | Our website host receives IP addresses and browser/request information when serving pages and uses operational monitoring to support delivery, security and performance. |
| Support communications | Your email address and the information you include when you contact us for help, privacy requests or feedback. |
Information linked to you
Account details are linked to your account. Sign-in, usage, purchase, approximate-location and crash information may be associated with a user, device or installation identifier; an identifier can count as linked data even when it does not include your name. Free-form content may itself identify you, so we do not describe submitted text as anonymous. Technical request timings and other diagnostic records that are not associated with a user or device are handled as unlinked data.
The Apple app does not automatically add your name, email address or sign-in account identifier to AI requests. This does not remove information you put in the text yourself or the IP address received by our server.
3. How we use information
- Provide prompt generation, lyric generation, style analysis, audio analysis, AI Mastering suggestions and related editing features.
- Save your work locally and restore your selected app settings.
- Authenticate users and maintain subscription entitlements.
- Diagnose crashes, prevent abuse, protect the service and improve reliability.
- Understand feature usage, purchases and app quality through analytics.
- Respond to support, deletion and privacy requests.
- Comply with legal obligations and enforce our Terms.
We do not use your prompts, lyrics or reference material to train a Prompt Maschine AI model, and we do not sell personal information.
The Apple app does not use the data described here to track you across other companies' apps or websites for targeted advertising, or share it with data brokers. Analytics and abuse prevention are separate from advertising tracking.
4. Services and recipients
Information is disclosed only as needed to operate requested features, maintain the app or comply with law.
Prompt Maschine backend
AI requests are sent through a Prompt Maschine backend hosted by Render. The backend routes the request to the relevant AI routing and model providers and returns the result to your app. It also processes IP addresses and security information to prevent abuse.
AI providers
Text submitted for generation or analysis may be processed by our AI routing providers and model providers, including Anthropic and Google AI services. The text can include your prompt, lyrics, style settings, persona description, exclusions and instructions needed for the result. Providers' privacy and retention practices also apply; sending a request does not guarantee immediate deletion after processing.
AI Mastering and your agreement
Before the first AI Mastering request, the Apple app asks you to agree to sending the track's numerical measurements and any optional genre or notes to our server and the AI providers we use. The audio remains on your device. You can decline and still use manual mastering, local rendering, My Masters and export without that AI request.
Google, YouTube and Firebase
YouTube links and related metadata may be processed through YouTube or Google services for extraction and analysis. Google Sign-In handles authentication and related security information, including provider-side phone-number collection in the circumstances described above.
Google Analytics for Firebase and Firebase Crashlytics process app interaction, usage, purchase, crash, device, installation and other technical information. Approximate location can be derived from IP addresses. The Apple app does not send the text of your prompts, lyrics or mastering notes as custom analytics event data, or set your account name or email as an analytics user identifier.
Apple and Google Play
Apple and Google process app downloads, purchases, renewals, refunds and subscription management. Store purchase and entitlement information supports paid features; purchase events are also processed through analytics as described above.
Website hosting
GoDaddy hosts promptmaschine.com and provides hosting-related traffic and performance monitoring. Its handling of website request information is separate from the Apple app's advertising-tracking disclosure.
Legal and operational disclosures
We may disclose information when required by law, to protect users or the service, or as part of a merger, acquisition or transfer of the service, subject to applicable safeguards.
5. Storage and retention
- On-device content: saved prompts, lyrics, personas, style profiles and preferences remain until you delete them, reset app data or uninstall the app. Local mastering audio and exports remain under your control; copies saved outside the app or in device backups must be managed separately.
- AI and analysis requests: our backend does not maintain a saved-content database of your prompts, lyrics or mastering notes. Routine generation logs record operational metadata rather than the full submitted text. AI routing and model providers can retain operational metadata, and model providers may retain request or response content for caching, safety or abuse prevention under their applicable policies. Retention depends on the provider and model; this is not a guaranteed zero-retention service.
- IP addresses for security: in-memory rate-limit records contain IP addresses, counts and timestamps. A one-hour counting window is not a one-hour deletion deadline: records can remain until conditional cleanup or a server-process restart. IP addresses may also appear in security-event logs. Application logs are currently available in our Render dashboard for seven days; that period does not describe all independent infrastructure or security records retained by hosting providers.
- Analytics: the Apple app's Google Analytics property is currently configured for 14 months of event- and user-level retention, with the user-identifier retention period reset on new activity. This setting does not set the retention period for aggregated reports. See Google Analytics retention information.
- Crash diagnostics: Firebase describes a 90-day retention period for crash traces and associated identifiers before it starts removing them from live and backup systems. Other SDK operational records follow the relevant service policies. See Firebase privacy and retention information.
- Website and provider records: hosting, authentication and other providers may retain their own technical, security and account records under their service policies and legal obligations. Deleting local app data does not automatically remove those records.
- Purchases: Apple and Google retain transaction records under their own legal and accounting obligations.
- Support: support messages are kept only as long as reasonably needed to resolve the request, protect the service and meet legal obligations.
6. Your choices and deletion
- Delete individual saved prompts or lyrics from the Saved section.
- Use Settings > Reset All Data to remove locally stored creative content and profiles.
- Use Settings > Delete Account where available to remove local account data. In the Apple app, this local action does not by itself send a deletion request to every provider; contact us for requests concerning remotely processed information.
- Decline AI Mastering or stop using its AI option to avoid future AI Mastering submissions. In the Apple app, Reset All Data or Delete Account also clears the saved AI Mastering agreement, so the app asks again before the next request; these actions also delete local data.
- Uninstall the app to remove its local storage from your device.
- Adjust analytics and device permissions through your operating-system settings where those controls are available.
- Email hello@promptmaschine.com for access, correction or deletion requests that cannot be completed in the app.
Deleting information from Prompt Maschine does not automatically delete information that Apple, Google or another provider must retain independently. You can contact those providers through their privacy controls.
7. Security
We use reasonable technical and organizational measures designed to protect information, including encrypted network transport and restricted service access. No system can guarantee absolute security. Protect your device and do not submit confidential, financial, medical or other highly sensitive information in prompts or lyrics.
8. Children
Prompt Maschine is not directed to children under 13, or the higher minimum age required in their country. We do not knowingly collect personal information from children below the applicable age. Contact us if you believe a child has provided personal information.
9. International processing
Our service providers may process information in the United States and other countries. Data-protection laws in those locations may differ from the laws where you live. We use the protections required by applicable law when transferring personal information.
10. Privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, request portability, or withdraw consent. You may also complain to your local data-protection authority. We may need to verify your request before acting on it.
11. Changes to this policy
We may update this policy as the app, providers or legal requirements change. We will post the revised policy here and update the effective date. Material changes may also be communicated in the app or through the relevant app store.