Bei Abweichungen zwischen den Versionen gilt die spanische Fassung.
Zoundroom Privacy Policy
Last updated: November 2, 2026
This policy explains what data Zoundroom processes when you use our mobile
application, web application and website (together, the “Service”), why we use
it and the choices available to you. Reading this policy does not mean that
you consent to optional analytics.
Controller and contact
The controller is Eliseu Bellés Martí, owner of Zoundroom, Spanish tax ID
(NIF) 20907184T, with address at Sc Puerto, 6, Poblats Marítims, 46024 València
(Valencia), Spain. For questions or to exercise your rights, write to
info@zoundroom.com.
Data we process
Depending on the features you use, we may process:
- Account and profile: user identifier, name, surname, email address, date
of birth, language, profile picture and preferences.
- Content and collaboration: projects, recordings, files, notes, lyrics,
tags, comments and content shared with a band. We process this content to
provide the features you request.
- Access and security: sessions, sign-in provider, IP address, technical
logs and information needed to prevent abuse or investigate incidents.
- Device and permissions: operating system, app version and permissions
you choose to grant, such as microphone, camera, photos, files or
notifications.
- Error diagnostics: when the app or the website fails, a technical report
with the type of error, the screen, the app and operating system version, the
general device model (not its identifier) and your user ID if you are signed
in. Before sending it we remove email addresses, keys and the content of your
notes, lyrics and files. We only use it to find and fix errors. In the app you
can turn it off in My profile → Send diagnostics.
- Subscriptions: plan, status, store, country, price and transaction
identifiers. Zoundroom does not receive your full payment-card details.
- Notifications: device token, language, time zone, notification
preferences and whether each notification was delivered or opened.
- Support: information you choose to provide when contacting us.
If you sign in with Apple or Google, we receive the account information that
provider authorizes, normally an identifier, name and email address. We do not
request your contacts or social-account activity.
Purposes and legal bases
- To create and manage your account, synchronize content, enable
collaboration and provide contracted features: performance of a
contract.
- To process and verify subscriptions: performance of a contract and
legal obligations.
- To send you service notices by notification: performance of a contract
(see “Notifications”).
- To send you tips and reminders by notification: consent or, depending on
where you are, the existing-customer exception in Article 21.2 of the
Spanish Information Society Services Act (LSSI) and our legitimate
interests (see “Notifications”).
- To record whether notifications are delivered or opened, and avoid sending
more than necessary: legitimate interests.
- To protect the Service, prevent fraud and diagnose failures:
legitimate interests, subject to your rights.
- If you cancel a free trial, to send you a single email asking why and to
keep your answer and, if you write one, your comment, together with the
store, plan, language and days of trial used: legitimate interests in
understanding why people cancel and improving the Service. It contains no
offers or advertising, and you can unsubscribe from the email itself.
- If you agree, to send you at most one email a week with ideas to take your
songs further in Zoundroom (for example, going back to the idea you saved
yesterday): your consent, which you can withdraw at any time (see "Tips
by email").
- If you tick the box for emails to pick up your ideas when you create your
account, to write to you at most twice in your first days with a link to
your latest idea: your consent (Article 6(1)(a) GDPR and Article 21.1 of
the Spanish LSSI). We keep what you chose, when, and the text you saw, so we
can prove it. You can withdraw it at any time with the unsubscribe link in
each email. We don't track opens or clicks per person; we only count total
clicks.
- To produce internal, aggregate usage statistics for the Service (for
example, how many people record, write in their notes or use each feature),
using data we already process to provide it and without sending it to third
parties: legitimate interests in understanding and improving the Service.
They are not used for advertising or for decisions about you, and you can
object by writing to info@zoundroom.com.
- If you complete your creative DNA, we keep your answers (for example, what
time you usually feel inspired, which genres and emotions move you and what
you use Zoundroom for) to personalize tips, the time of notifications and
Auralis's replies: performance of a contract. Multiple-choice answers are kept anonymously if you delete
your account; any text you write is deleted with it. You can change them at
any time in «My creative DNA». We only send our subscription provider
categories (for example, «ideas» or «lyrics»), never your texts. We use those
categories to adapt the text of the Pro and Band plans screen we show you in
the app; prices and plans don't change: legitimate interest in presenting
our plans better.
- To answer requests and comply with tax, accounting or legal requirements:
legal obligation or performance of a contract.
- For product analytics, campaign measurement and non-essential
technologies: only with your consent, where required.
Tips by email
If you say yes in the app or on the web (after saving an idea, or in My
profile → Notifications), we email the address on your account at most once
a week with ideas to get more out of Zoundroom. They are tips about the
Service itself: no offers, prices or ads, and nothing about other companies.
If we ever wanted to send you offers, we would ask for separate permission.
- Legal basis: your consent (Article 6(1)(a) GDPR and Article 21 of the
Spanish LSSI). It is optional, and the Service works the same if you say no.
- How to unsubscribe: with the "Unsubscribe" link in every email, without
signing in; in My profile → Notifications; or by writing to
info@zoundroom.com. It takes effect immediately and does not affect your
account emails (verification, security, billing or trial notices), which are
part of the Service.
- What data we use: your email address, language and time zone (to write
at a reasonable hour), and whether you have come back to the app or saved
ideas (so we don't write when there's no need). Never the content of your
recordings or notes. We don't track whether you open the emails or which
links you click.
- What we keep about your choice: what you chose, when, where (app, web or
an email) and which text you saw, so we can prove it, and which emails we
have sent you, to respect the limit of one a week. It is deleted when you
delete your account.
- The emails are sent through Resend (see "Providers and recipients").
Analytics and measurement in the application
Mobile analytics is optional and remains disabled until you accept it. If you
accept, we may process usage events, screens visited, interactions, app
version, platform, technical device information, an internal user identifier
and campaign-attribution information.
We use:
- Amplitude, to understand product usage and diagnose errors.
- AppsFlyer, to attribute installations and measure campaigns.
- Meta App Events, to measure campaigns and conversions.
- Microsoft Clarity, to understand interactions and sessions within the
application.
When Meta App Events data and the campaign events that AppsFlyer forwards to
Meta are used to show and measure ads, Meta Platforms Ireland Limited is a joint
controller with us for collecting and transmitting them. Meta's Privacy
Policy explains how it processes this
data and how you can exercise your rights with Meta. We don't send Meta your
name, your email or your account identifier.
Our event layer excludes free-text fields, names, email addresses, lyrics,
notes, creative content, file paths, full URLs and credentials. To measure
campaigns and journeys across Zoundroom's public pages, we may process limited
public paths, such as a language or article identifier. Providers may also
process technical identifiers under their own privacy policies.
On iOS, the advertising identifier is enabled only if you also authorize
tracking through Apple's system prompt. Refusing that prompt does not prevent
you from using Zoundroom.
You may refuse analytics and continue using the application. You can also
change your choice at any time under Profile → Analytics and privacy.
Withdrawing consent stops future optional collection on that device; it does
not affect processing lawfully performed before withdrawal.
Artificial intelligence features
Zoundroom offers artificial intelligence features, such as the Auralis
assistant and, in the web version, writing tools. They are enabled only if you
give your permission: the application asks you the first time you use them, and
you can withdraw it at any time in My profile → AI features.
To generate each response we send to Google Cloud (Vertex AI, Gemini
models), which acts as a processor on behalf of Zoundroom, only the content
that is needed:
- in Auralis, your messages and the conversation, the text of the open note, the
names of your recordings (never the audio), your artist profile and the
project description;
- in the web tools, the text you type into them.
Auralis is processed on servers in the European Union. The web tools are
processed in the European Union.
Google does not use this data to train its models. It may keep it temporarily
(a cache of up to 24 hours) and log it to detect abuse, in accordance with its
terms.
Your conversations with Auralis are saved in your account and you can delete
them in My profile → Conversations with Auralis. If we detect in a
conversation that you are going through a hard time, that exchange is not kept.
Legal basis: your consent, and the performance of a contract to provide the
feature you request.
Notifications
If you allow notifications on your device, Zoundroom may send you three types
of notifications:
- Service notices: activity in your projects and your band, invitations,
the upcoming end of your free trial and payment problems. They are part of
the Service: performance of a contract. You can turn off activity and
invitation notices under My profile → Notifications, and all of them by
revoking the notification permission in your system settings.
- Tips and reminders: to help you save, come back to and finish your ideas
while you use Zoundroom. They come more often in your first days and during
a Pro or Band trial; after that, at most one or two a week. If you stop
opening the app, fewer and fewer (after a week, two weeks and a month, then
at most one a month for three months) and then none until you come back. At
most one a day and between 10:00 and 21:30 local time, or from the time you
choose in «My creative DNA». They are only about Zoundroom features,
including those in your plan or your Pro or Band trial, and never include
offers, prices or ads.
- If your device's time zone is in Europe (inside or outside the European
Union), Brazil, a European Union territory on another continent or a time
zone between UTC−1 and UTC+3, or if we do not know it, we send them only
if you expressly accept them in the app: consent.
- Elsewhere, we tell you in the app before the first tip and you can refuse
them with one tap; if you do not refuse, we send them. Legal basis: the
existing-customer exception in Article 21.2 of the Spanish Information
Society Services Act (Law 34/2002, LSSI) and our legitimate interests
in helping you get the most out of a service you already use.
- We use your device's time zone, not your location. Because a time zone
does not always match a country, we ask for your consent in borderline
cases.
- We choose which tip to send with automated rules, based on the days since
you signed up, when you last used Zoundroom and whether you opened
previous tips, whether and how many ideas you have saved (also in the last
week), what you use most in the app (recording, notes…) and the features
you have not tried yet (if you have accepted analytics, also the ones you
have already used), your latest idea, new activity from people who share
projects or a band with you, your plan, whether you have an active Pro or
Band trial, the time you choose in «My creative DNA», your language and
your time zone. A tip may include the name of your audio, your project or
a collaborator; it travels in the notification through OneSignal and we do
not store that text. We do not send the content of your ideas to third
parties to personalize them.
- Every tip includes a one-tap way to opt out (“No more tips”), in the
notification itself or when you open it. You can also turn them on or off
at any time under My profile → Notifications, or stop all
notifications by revoking the permission in your system settings.
Withdrawing consent does not affect notifications already sent.
- Offers and promotions: we do not currently send them by notification. If
we ever do, it will only be with your express consent, which we will ask for
separately.
We send notifications through OneSignal, which acts as our processor. To
manage them, we process your device token, user identifier, language and time
zone, which we use to send them at reasonable hours. We also record whether
each notification was delivered or opened, to avoid sending more than
necessary and to measure their usefulness. If you have accepted analytics in
the mobile app, OneSignal also receives your email address.
To measure whether tips really help, a randomly chosen group of people does
not receive them for a while.
We keep your choice about tips and reminders and a history of its changes
(date, screen, platform, region and version of the text you saw) so that we
can demonstrate it.
Cookies and website measurement
The website uses strictly necessary storage to operate and remember your
choices. Google Analytics and Meta Pixel load only according to the options
selected in the cookie panel. You can reopen that panel through “Cookie
settings”.
If you accept analytics, we store in your browser, only on zoundroom.com and
app.zoundroom.com, how you first arrived: the type of source (for example, a
search engine or an AI assistant), the referring site without its full
address, the landing page and the campaign parameters of the link. It is
deleted after 90 days or when you withdraw your consent. If you create an
account, we store that source with it to learn which channels bring sign-ups,
trials and subscriptions, and we pass it to RevenueCat as part of your
subscription data. It never includes your email, your name or what you write,
and it is deleted if you withdraw your consent or delete your account.
Providers and recipients
We share data only when needed to provide the Service, comply with law or
when you authorize us. Our providers include:
- Supabase, for authentication, databases and backend functions.
- Google Cloud, for storage, technical services and, if you authorize it,
the artificial intelligence features (Vertex AI).
- RevenueCat, Apple, Google Play and Stripe, for subscriptions and
payments. RevenueCat also receives the source of your account if you
accepted analytics.
- OneSignal, for notifications.
- Resend, to send the Service's emails and, if you have agreed to them,
tips by email and emails to pick up your ideas.
- Cloudflare, to host the website and the server that syncs note editing in
real time (it keeps a copy of the notes you edit).
- Amplitude, AppsFlyer, Meta and Microsoft, for the optional analytics
described above.
We may also disclose data when legally required, to protect rights and safety,
or as part of a corporate transaction with appropriate safeguards. We do
not sell your personal data.
International transfers
Some providers may process data outside the European Economic Area. Where
applicable, we rely on adequacy decisions, standard contractual clauses or
other safeguards recognized by applicable law.
Retention
We retain your account and content while the account remains active or as
needed to provide the Service. After a deletion request, we delete or
anonymize data except where temporary retention is necessary for security,
backups or legal obligations. What you delete in the app (notes, audio, files,
projects and Auralis conversations) is kept for up to 30 days (notes stay in
the trash, where you can restore them) and is then permanently deleted. If you
delete your account, we delete your content straight away. In both cases,
database and file backups are gone within 7 more days at most. If you delete your account, we keep your answers to the welcome
questionnaire and to the exit survey (your reason and, if you wrote one, your
comment) in anonymous form, with no link to you or your account, together with
general details such as the platform, app version or plan type. We use them
only for aggregate statistics that help us improve the Service. Subscription
records are retained for
applicable tax and accounting periods. The history of your choice about tips
and reminders is kept while you have an account and, if you delete it, blocked
for three years, the maximum period during which liability for this
processing can be claimed; it is then erased. Notification delivery and open
records are retained only for as long as needed for the purposes described.
When you delete your account, we also delete the copies of your notes on the co-editing server and ask Amplitude, OneSignal, RevenueCat and, if you delete it from the app on a device where you accepted analytics, AppsFlyer to delete your data. Microsoft Clarity and Meta don't allow deleting a single person's data: Clarity keeps session recordings for 30 days (those marked as favourites and a random sample, for up to 9 months) and Meta keeps event data for up to 2 years. Other analytics data is retained according to each provider's settings and only for as long as needed for the purposes described. Error diagnostics data is deleted after 90 days.
Your rights
Where applicable, you may request access, correction, deletion, restriction,
portability or objection, and may withdraw consent without retroactive
effect. You can delete your account from the application or contact
info@zoundroom.com. For the data Meta processes as a joint controller, you can also exercise your rights directly with Meta; if you ask us, we'll pass your request on to Meta. You may also lodge a complaint with the Spanish Data
Protection Agency or your local supervisory authority.
Security, children and changes
We apply reasonable technical and organizational safeguards, although no
system can guarantee absolute security. The Service is not intentionally
directed to children who cannot legally provide consent; their legal
representatives may contact us to request data deletion.
We may update this policy to reflect legal or Service changes. We will update
the date above and communicate material changes when required.
