Privacy Policy

Hi, I'm Roy, the developer of Cántala. This policy explains exactly what data Cántala collects, what it does with that data, and how you can control it. I've tried to write this in plain language. If anything is unclear, email me at royogev2@gmail.com and I'll fix it.

Cántala is built for a general audience aged 13 and up. It is not directed at children under 13, and I do not knowingly collect data from anyone under 13.

What Cántala collects

When you use Cántala, the following data is stored on my backend (Supabase):

• Account email. Used so you can sign in and so I can send you account-related messages (password reset, account deletion confirmation).
• Profile name and handle. What you choose to be called inside the app, and the @handle your friends use to add you.
• Learning progress. Your XP, streak count, streak freezes, badges, level, current target language, and the languages you've enrolled in.
• Vocabulary you save. Words you tap to save while listening, plus the mastery tier the app derives from your review history.
• Song play history. Which songs you've started, finished, or requested, so the app can show your stats and avoid re-recommending songs you've already mastered.
• Push notification token. A device-specific token issued by Apple or Google so Cántala can send you streak reminders and lesson nudges. You can turn this off in iOS or Android system settings.
• RevenueCat subscription receipts. If you subscribe to Cántala Plus, RevenueCat (my payments processor) stores the receipt and tells my backend whether your subscription is active. I never see your card number.
• Spotify display name and email (only if you link Spotify). When you link a Spotify account so Cántala can play music, Spotify shares a display name and email with the app. These are cached on your device, not stored on my backend. Cántala uses Spotify only to play music. It does not read your private playlists, follow lists, or listening history beyond what's required to play the songs you choose in the app.

What Cántala does NOT collect

• Audio recordings of you singing stay on your device. When the app listens to assess your singing, the audio is processed locally and never uploaded anywhere. There is no voice recording stored on my servers.
• I do not sell your data to anyone, ever.
• No third-party ad SDKs. Cántala does not contain Facebook SDK, AppsFlyer, Adjust, Branch, or any other advertising or cross-app tracking SDK. It does not use the iOS Advertising Identifier (IDFA).
• No location data. Cántala does not request or store your GPS location.
• No contacts, photos, calendar, or health data.

Third parties

Cántala relies on the following services to function. Each one only receives the minimum data it needs:

• Supabase (auth + database hosting). Stores your account, profile, and learning progress.
• Spotify (optional, only if you link it). Receives the OAuth tokens needed to play music on your device.
• RevenueCat (subscription billing). Receives a pseudonymous user id and your App Store or Google Play receipt to validate Cántala Plus status.
• Apple Push Notification service / Firebase Cloud Messaging via Expo (notifications). Receives only your device push token and the notification payload.
• Google Gemini API (AI chat). When you chat with the in-app mascot (Melody), your chat message text is sent to Google's Gemini API via my backend so Melody can respond. No personally identifying fields (email, name, user id) are sent in the prompt. Google's terms apply to that API call.

Third-party lyrics attribution

Lyrics displayed in Cántala are provided by LRCLib, a community-maintained synced-lyrics database. Cántala does not host an original lyrics catalog; line-by-line text is fetched from LRCLib at the time a song is added to our library and is displayed for educational use only (comprehension, translation, and vocabulary study).

Translations, vocabulary explanations, and comprehension quizzes shown alongside the lyrics are generated by Cántala's own systems and are not provided by LRCLib.

If you are a rights holder and believe content sourced via LRCLib should not appear in Cántala, please email royogev2@gmail.com and the affected song will be removed within 5 business days.

Your rights

• Delete your account in the app. Open Profile, scroll to Settings, tap your account and follow the delete flow. This wipes your profile, progress, chat history, and entitlement records from my backend. Subscription cancellation has to be done separately in your App Store or Google Play account.
• Export your data. Email royogev2@gmail.com and I will send you a copy of everything Cántala has stored about you within 30 days. This covers the right of access under GDPR, CCPA, and similar laws.
• Ask questions or complain. Email royogev2@gmail.com. If you're in the EU and unhappy with my response, you can also contact your local data protection authority.

Data retention

Account data persists until you delete the account. After deletion, residual backups roll off within 30 days. Aggregate analytics with no personal identifiers may be retained longer.

Children

Cántala is intended for users 13 and older. If you believe a child under 13 has signed up, email royogev2@gmail.com and I will delete the account.

Changes to this policy

If I change anything material, I'll update the effective date at the top and, for significant changes, post a notice inside the app before the change takes effect.

Contact

Roy Yogev, developer of Cántala
royogev2@gmail.com