Privacy Policy

The controller of your personal data is Combat Defender s. r. o., Martina Granca 3669/20, 841 02 Bratislava – Dúbravka, Slovak Republic, Company ID (IČO) 56 631 944, registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, Insert No. 182978/B.

For anything about your data, including exercising your rights, write to info@combatdefender.com. We have not appointed a Data Protection Officer because the law does not require one for our activities.

• Account data: your name, email address and password. We store the password only as a one-way cryptographic hash.
• What you send us to make a song: the ideas you type, voice notes you record in the app or send over WhatsApp, their transcripts, your answers in the song set-up (for example who sings, genre, pace, mood), and requests to change a song.
• WhatsApp data: if you create songs over WhatsApp, your phone number, your WhatsApp profile name and the messages you send to our business number.
• The songs we make for you: Song Sheets, lyrics, recordings, and the automated quality reviews of those recordings.
• Taste data: how you rate songs in Discover (like, pass, love) and how long you listened.
• Sharing data: share links you create and how many times they were opened.
• Technical data: your IP address and basic request data, used briefly to protect the service against abuse and kept in our hosting provider's logs for a short period.

We do not ask for, and ask you not to send us, special categories of data such as health information. If you mention other people in a song idea (for example a name for a birthday song), please only include what you are comfortable sharing.

We do not sell your personal data, we do not use it for advertising, and we do not use it to train AI models.

Song Factory uses AI services to transcribe voice notes, write lyrics, generate music and listen to each recording to check its quality. The quality check decides which recordings are good enough to publish to you. These automated steps only affect which versions of a song you receive; they do not produce legal or similarly significant effects on you within the meaning of Art. 22 GDPR.

We use trusted providers (processors) who handle data only on our instructions and under data processing agreements:

Other users can see songs you publish in Discover (title, genre and the recording) unless you make your songs private, and anyone with a share link you created can play that song. We may also disclose data where the law requires it.

Some providers process data outside the European Economic Area. Where that happens, we rely on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified US companies) or on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for a copy of the relevant safeguards.

• Account data, songs, voice notes and ratings: for as long as you have an account. When you ask us to delete your account, we delete these within 30 days, including recordings and voice notes in storage.
• Song ideas you typed on the homepage but never turned into a song: linked to no account and deleted on request, or when we clean up unused drafts.
• Accounting records for paid plans: for the period required by Slovak law (currently 10 years).
• Security logs: for a short period set by our hosting provider, typically no more than 30 days.

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we process it;
• receive the data you gave us in a portable format;
• object to processing based on our legitimate interests, including showing your songs in Discover;
• withdraw any consent you have given, without affecting earlier processing.

To use any of these rights, email info@combatdefender.com from the address on your account. We reply within one month. You can make your songs private yourself at any time in Account.

You also have the right to complain to the Slovak supervisory authority: Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk, or to the authority in the EU country where you live.

Data is encrypted in transit, passwords are hashed, access to the database is restricted to the application and a small number of authorised staff, and recordings are served through short-lived signed links.

Song Factory is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

We only use cookies that are needed for the service to work. See our Cookie Policy.

We may update this policy when the service or the law changes. We will show the new date at the top, and tell you by email or in the app about significant changes.