Zoundroom — Privacy policy

Zoundroom Privacy Policy

Last updated: November 2, 2026

This policy explains what data Zoundroom processes when you use our mobile application, web application and website (together, the “Service”), why we use it and the choices available to you. Reading this policy does not mean that you consent to optional analytics.

Controller and contact

The controller is Eliseu Bellés Martí, owner of Zoundroom, Spanish tax ID (NIF) 20907184T, with address at Sc Puerto, 6, Poblats Marítims, 46024 València (Valencia), Spain. For questions or to exercise your rights, write to info@zoundroom.com.

Data we process

Depending on the features you use, we may process:

Account and profile: user identifier, name, surname, email address, date of birth, language, profile picture and preferences.
Content and collaboration: projects, recordings, files, notes, lyrics, tags, comments and content shared with a band. We process this content to provide the features you request.
Access and security: sessions, sign-in provider, IP address, technical logs and information needed to prevent abuse or investigate incidents.
Device and permissions: operating system, app version and permissions you choose to grant, such as microphone, camera, photos, files or notifications.
Error diagnostics: when the app or the website fails, a technical report with the type of error, the screen, the app and operating system version, the general device model (not its identifier) and your user ID if you are signed in. Before sending it we remove email addresses, keys and the content of your notes, lyrics and files. We only use it to find and fix errors. In the app you can turn it off in My profile → Send diagnostics.
Subscriptions: plan, status, store, country, price and transaction identifiers. Zoundroom does not receive your full payment-card details.
Notifications: device token, language, time zone, notification preferences and whether each notification was delivered or opened.
Support: information you choose to provide when contacting us.

If you sign in with Apple or Google, we receive the account information that provider authorizes, normally an identifier, name and email address. We do not request your contacts or social-account activity.

Purposes and legal bases

To create and manage your account, synchronize content, enable collaboration and provide contracted features: performance of a contract.
To process and verify subscriptions: performance of a contract and legal obligations.
To send you service notices by notification: performance of a contract (see “Notifications”).
To send you tips and reminders by notification: consent or, depending on where you are, the existing-customer exception in Article 21.2 of the Spanish Information Society Services Act (LSSI) and our legitimate interests (see “Notifications”).
To record whether notifications are delivered or opened, and avoid sending more than necessary: legitimate interests.
To protect the Service, prevent fraud and diagnose failures: legitimate interests, subject to your rights.
If you cancel a free trial, to send you a single email asking why and to keep your answer and, if you write one, your comment, together with the store, plan, language and days of trial used: legitimate interests in understanding why people cancel and improving the Service. It contains no offers or advertising, and you can unsubscribe from the email itself.
If you agree, to send you at most one email a week with ideas to take your songs further in Zoundroom (for example, going back to the idea you saved yesterday): your consent, which you can withdraw at any time (see "Tips by email").
If you tick the box for emails to pick up your ideas when you create your account, to write to you at most twice in your first days with a link to your latest idea: your consent (Article 6(1)(a) GDPR and Article 21.1 of the Spanish LSSI). We keep what you chose, when, and the text you saw, so we can prove it. You can withdraw it at any time with the unsubscribe link in each email. We don't track opens or clicks per person; we only count total clicks.
To produce internal, aggregate usage statistics for the Service (for example, how many people record, write in their notes or use each feature), using data we already process to provide it and without sending it to third parties: legitimate interests in understanding and improving the Service. They are not used for advertising or for decisions about you, and you can object by writing to info@zoundroom.com.
If you complete your creative DNA, we keep your answers (for example, what time you usually feel inspired, which genres and emotions move you and what you use Zoundroom for) to personalize tips, the time of notifications and Auralis's replies: performance of a contract. Multiple-choice answers are kept anonymously if you delete your account; any text you write is deleted with it. You can change them at any time in «My creative DNA». We only send our subscription provider categories (for example, «ideas» or «lyrics»), never your texts. We use those categories to adapt the text of the Pro and Band plans screen we show you in the app; prices and plans don't change: legitimate interest in presenting our plans better.
To answer requests and comply with tax, accounting or legal requirements: legal obligation or performance of a contract.
For product analytics, campaign measurement and non-essential technologies: only with your consent, where required.

Tips by email

If you say yes in the app or on the web (after saving an idea, or in My profile → Notifications), we email the address on your account at most once a week with ideas to get more out of Zoundroom. They are tips about the Service itself: no offers, prices or ads, and nothing about other companies. If we ever wanted to send you offers, we would ask for separate permission.

Legal basis: your consent (Article 6(1)(a) GDPR and Article 21 of the Spanish LSSI). It is optional, and the Service works the same if you say no.
How to unsubscribe: with the "Unsubscribe" link in every email, without signing in; in My profile → Notifications; or by writing to info@zoundroom.com. It takes effect immediately and does not affect your account emails (verification, security, billing or trial notices), which are part of the Service.
What data we use: your email address, language and time zone (to write at a reasonable hour), and whether you have come back to the app or saved ideas (so we don't write when there's no need). Never the content of your recordings or notes. We don't track whether you open the emails or which links you click.
What we keep about your choice: what you chose, when, where (app, web or an email) and which text you saw, so we can prove it, and which emails we have sent you, to respect the limit of one a week. It is deleted when you delete your account.
The emails are sent through Resend (see "Providers and recipients").

Analytics and measurement in the application

Mobile analytics is optional and remains disabled until you accept it. If you accept, we may process usage events, screens visited, interactions, app version, platform, technical device information, an internal user identifier and campaign-attribution information.

We use:

Amplitude, to understand product usage and diagnose errors.
AppsFlyer, to attribute installations and measure campaigns.
Meta App Events, to measure campaigns and conversions.
Microsoft Clarity, to understand interactions and sessions within the application.

When Meta App Events data and the campaign events that AppsFlyer forwards to Meta are used to show and measure ads, Meta Platforms Ireland Limited is a joint controller with us for collecting and transmitting them. Meta's Privacy Policy explains how it processes this data and how you can exercise your rights with Meta. We don't send Meta your name, your email or your account identifier.

Our event layer excludes free-text fields, names, email addresses, lyrics, notes, creative content, file paths, full URLs and credentials. To measure campaigns and journeys across Zoundroom's public pages, we may process limited public paths, such as a language or article identifier. Providers may also process technical identifiers under their own privacy policies.

On iOS, the advertising identifier is enabled only if you also authorize tracking through Apple's system prompt. Refusing that prompt does not prevent you from using Zoundroom.

You may refuse analytics and continue using the application. You can also change your choice at any time under Profile → Analytics and privacy. Withdrawing consent stops future optional collection on that device; it does not affect processing lawfully performed before withdrawal.

Artificial intelligence features

Zoundroom offers artificial intelligence features, such as the Auralis assistant and, in the web version, writing tools. They are enabled only if you give your permission: the application asks you the first time you use them, and you can withdraw it at any time in My profile → AI features.

To generate each response we send to Google Cloud (Vertex AI, Gemini models), which acts as a processor on behalf of Zoundroom, only the content that is needed:

in Auralis, your messages and the conversation, the text of the open note, the names of your recordings (never the audio), your artist profile and the project description;
in the web tools, the text you type into them.

Auralis is processed on servers in the European Union. The web tools are processed in the European Union.

Google does not use this data to train its models. It may keep it temporarily (a cache of up to 24 hours) and log it to detect abuse, in accordance with its terms.

Your conversations with Auralis are saved in your account and you can delete them in My profile → Conversations with Auralis. If we detect in a conversation that you are going through a hard time, that exchange is not kept.

Legal basis: your consent, and the performance of a contract to provide the feature you request.

Notifications

If you allow notifications on your device, Zoundroom may send you three types of notifications:

Service notices: activity in your projects and your band, invitations, the upcoming end of your free trial and payment problems. They are part of the Service: performance of a contract. You can turn off activity and invitation notices under My profile → Notifications, and all of them by revoking the notification permission in your system settings.
Tips and reminders: to help you save, come back to and finish your ideas while you use Zoundroom. They come more often in your first days and during a Pro or Band trial; after that, at most one or two a week. If you stop opening the app, fewer and fewer (after a week, two weeks and a month, then at most one a month for three months) and then none until you come back. At most one a day and between 10:00 and 21:30 local time, or from the time you choose in «My creative DNA». They are only about Zoundroom features, including those in your plan or your Pro or Band trial, and never include offers, prices or ads.
- If your device's time zone is in Europe (inside or outside the European Union), Brazil, a European Union territory on another continent or a time zone between UTC−1 and UTC+3, or if we do not know it, we send them only if you expressly accept them in the app: consent.
- Elsewhere, we tell you in the app before the first tip and you can refuse them with one tap; if you do not refuse, we send them. Legal basis: the existing-customer exception in Article 21.2 of the Spanish Information Society Services Act (Law 34/2002, LSSI) and our legitimate interests in helping you get the most out of a service you already use.
- We use your device's time zone, not your location. Because a time zone does not always match a country, we ask for your consent in borderline cases.
- We choose which tip to send with automated rules, based on the days since you signed up, when you last used Zoundroom and whether you opened previous tips, whether and how many ideas you have saved (also in the last week), what you use most in the app (recording, notes…) and the features you have not tried yet (if you have accepted analytics, also the ones you have already used), your latest idea, new activity from people who share projects or a band with you, your plan, whether you have an active Pro or Band trial, the time you choose in «My creative DNA», your language and your time zone. A tip may include the name of your audio, your project or a collaborator; it travels in the notification through OneSignal and we do not store that text. We do not send the content of your ideas to third parties to personalize them.
- Every tip includes a one-tap way to opt out (“No more tips”), in the notification itself or when you open it. You can also turn them on or off at any time under My profile → Notifications, or stop all notifications by revoking the permission in your system settings. Withdrawing consent does not affect notifications already sent.
Offers and promotions: we do not currently send them by notification. If we ever do, it will only be with your express consent, which we will ask for separately.

We send notifications through OneSignal, which acts as our processor. To manage them, we process your device token, user identifier, language and time zone, which we use to send them at reasonable hours. We also record whether each notification was delivered or opened, to avoid sending more than necessary and to measure their usefulness. If you have accepted analytics in the mobile app, OneSignal also receives your email address.

To measure whether tips really help, a randomly chosen group of people does not receive them for a while.

We keep your choice about tips and reminders and a history of its changes (date, screen, platform, region and version of the text you saw) so that we can demonstrate it.

Cookies and website measurement

The website uses strictly necessary storage to operate and remember your choices. Google Analytics and Meta Pixel load only according to the options selected in the cookie panel. You can reopen that panel through “Cookie settings”.

If you accept analytics, we store in your browser, only on zoundroom.com and app.zoundroom.com, how you first arrived: the type of source (for example, a search engine or an AI assistant), the referring site without its full address, the landing page and the campaign parameters of the link. It is deleted after 90 days or when you withdraw your consent. If you create an account, we store that source with it to learn which channels bring sign-ups, trials and subscriptions, and we pass it to RevenueCat as part of your subscription data. It never includes your email, your name or what you write, and it is deleted if you withdraw your consent or delete your account.

Providers and recipients

We share data only when needed to provide the Service, comply with law or when you authorize us. Our providers include:

Supabase, for authentication, databases and backend functions.
Google Cloud, for storage, technical services and, if you authorize it, the artificial intelligence features (Vertex AI).
RevenueCat, Apple, Google Play and Stripe, for subscriptions and payments. RevenueCat also receives the source of your account if you accepted analytics.
OneSignal, for notifications.
Resend, to send the Service's emails and, if you have agreed to them, tips by email and emails to pick up your ideas.
Cloudflare, to host the website and the server that syncs note editing in real time (it keeps a copy of the notes you edit).
Amplitude, AppsFlyer, Meta and Microsoft, for the optional analytics described above.

We may also disclose data when legally required, to protect rights and safety, or as part of a corporate transaction with appropriate safeguards. We do not sell your personal data.

International transfers

Some providers may process data outside the European Economic Area. Where applicable, we rely on adequacy decisions, standard contractual clauses or other safeguards recognized by applicable law.

Retention

We retain your account and content while the account remains active or as needed to provide the Service. After a deletion request, we delete or anonymize data except where temporary retention is necessary for security, backups or legal obligations. What you delete in the app (notes, audio, files, projects and Auralis conversations) is kept for up to 30 days (notes stay in the trash, where you can restore them) and is then permanently deleted. If you delete your account, we delete your content straight away. In both cases, database and file backups are gone within 7 more days at most. If you delete your account, we keep your answers to the welcome questionnaire and to the exit survey (your reason and, if you wrote one, your comment) in anonymous form, with no link to you or your account, together with general details such as the platform, app version or plan type. We use them only for aggregate statistics that help us improve the Service. Subscription records are retained for applicable tax and accounting periods. The history of your choice about tips and reminders is kept while you have an account and, if you delete it, blocked for three years, the maximum period during which liability for this processing can be claimed; it is then erased. Notification delivery and open records are retained only for as long as needed for the purposes described. When you delete your account, we also delete the copies of your notes on the co-editing server and ask Amplitude, OneSignal, RevenueCat and, if you delete it from the app on a device where you accepted analytics, AppsFlyer to delete your data. Microsoft Clarity and Meta don't allow deleting a single person's data: Clarity keeps session recordings for 30 days (those marked as favourites and a random sample, for up to 9 months) and Meta keeps event data for up to 2 years. Other analytics data is retained according to each provider's settings and only for as long as needed for the purposes described. Error diagnostics data is deleted after 90 days.

Your rights

Where applicable, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without retroactive effect. You can delete your account from the application or contact info@zoundroom.com. For the data Meta processes as a joint controller, you can also exercise your rights directly with Meta; if you ask us, we'll pass your request on to Meta. You may also lodge a complaint with the Spanish Data Protection Agency or your local supervisory authority.

Security, children and changes

We apply reasonable technical and organizational safeguards, although no system can guarantee absolute security. The Service is not intentionally directed to children who cannot legally provide consent; their legal representatives may contact us to request data deletion.

We may update this policy to reflect legal or Service changes. We will update the date above and communicate material changes when required.