Privacy Policy

Boing runs on your computer. Your audio is processed locally and is never uploaded to us. We hold your account details, your licence, and a summary of each render so it can appear in your history and on your phone.

Two things — your Track Info sheet and your lyrics — are never sent to us unless you switch on paperwork sync, which is off by default.

Account information. Your email address, Stripe customer record, subscription status, licence key and activation information, and anything you send us in support correspondence.

Render summaries. When a render finishes, Boing sends a summary so it can appear in your history and, if you use the mobile app, on your phone. That summary is: the song title you entered, the number of files delivered, how long it took, the total size, counts of mixes, alternates and stems, whether the measured peaks passed, which DAW you used, the name of the delivery specification, and for each file its name, measured true-peak value, the groups that contributed to it and its position in the delivery. The delivery manifest — the list of file names and numbers — is included.

Track Info sheets and lyrics — only if you turn them on. Paperwork sync is off by default. If you switch it on, the Track Info document and lyrics document for each delivery are sent along with the summary. Track Info sheets can contain writer names, IPI numbers and royalty splits. Lyrics are often unreleased. That is why the setting exists and why it is off until you choose otherwise. Turning it back off stops future syncing; to remove what has already synced, delete those renders or email us.

Mobile notifications. If you use the Boing mobile app and enable notifications, we store the push token Apple issues for your device so we can tell you when a render finishes.

Storage connections. If you connect a third-party storage provider, we store the connection record needed to keep that integration working.

We do not upload your audio. Mixes, stems, instrumentals, alternates, project sessions, MIDI and samples all stay on your computer. Rendering, summing, loudness and true-peak measurement, and — where you use it — lyric transcription all run locally on your machine.

When you upload deliverables to a connected storage provider, the files go directly from your computer to that provider using a short-lived credential scoped to that upload. They do not pass through us and we keep no copy.

We do not sell personal information. We do not serve advertising. We do not use your audio, sessions or lyrics to train machine learning models.

Account information: to create and secure your account and provide your subscription. Render summaries: to give you a history of your deliveries and notify you when one completes. Track Info and lyrics, where enabled: so the complete delivery including its paperwork is visible in your history. Device tokens: to deliver notifications. Storage connections: to keep your chosen integration working. Support correspondence: to help you and improve the product.

Where the GDPR applies, we rely on: performance of a contract, for account, licence, subscription and render-summary processing; your consent, for paperwork sync and for push notifications, which you may withdraw at any time in settings; and our legitimate interests, for preventing unauthorised use of licences and for securing the service.

We use Stripe for payments, Supabase for database, authentication and backend functions, Lovable for our web front end, and Apple for delivering push notifications. Each processes data on our behalf under its own terms.

Account and licence records are kept while your account is active and for a period afterwards as required for accounting and tax purposes. Render summaries, and any synced paperwork, are kept until you delete the render or your account. Device tokens are kept until they expire or you disable notifications. Support correspondence is kept so we can follow up on ongoing issues.

When you delete your account we delete or anonymise your data, except where we are legally required to keep it.

We use encryption in transit, access controls, and database rules that restrict each user's data to that user. No system is perfectly secure and we cannot guarantee absolute security. If a breach affects your personal data and presents a risk to you, we will notify you and the relevant authority as required by law.

If you are in the UK or EEA you may request access to your data, correction of inaccurate data, deletion, restriction of or objection to processing, and a portable copy. Where we rely on consent you may withdraw it at any time. You may also complain to your local data protection authority.

To exercise any of these, email info@useboing.com.

If you are a California resident you may request to know what personal information we hold, request its deletion or correction, and opt out of sale or sharing. We do not sell or share personal information as those terms are defined under California law. We will not treat you differently for exercising these rights.

Our infrastructure providers may process data outside your country. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards, including Standard Contractual Clauses where applicable.

Boing is not intended for children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, email info@useboing.com and we will delete it.

We will post changes to this policy on this page and update the date above. Where changes are material we will give notice by email or in the app before they take effect.

Privacy questions or requests? Email info@useboing.com.