Privacy Policy

This policy explains what personal data Squidbrain ("we", "us") collects, why, and your rights over it. Questions: [email protected].

1. What we collect

• Account details — the email address and basic profile from your chosen sign-in (email, Google, or Apple). If you use Apple's "Hide My Email", we only ever see the relay address.
• Audio you create — the recordings and audio files you upload, together with related metadata (filename, duration, size, a content checksum, timestamps, and edit history linking edits to their original). When you use the Chrome extension, Squidbrain may use the active tab title as the default filename for a recording you choose to make; we do not collect URLs, browsing history, tab activity, or lists of pages you visit.
• Device & pairing data — device labels and pairing records used to connect your phone, desktop app, and the web editor to your account.
• Operational logs — limited technical records needed to run and secure the service.
• Usage analytics — how you interact with the app (events such as signing in, capturing, and delivering audio), used to understand and improve the product. Processed in the EU via PostHog.

2. How we use it

To provide the core service (storing your audio and syncing it between your devices and your DAW), to keep the service secure, and to respond to support requests. We do not sell your data or use your audio to train models.

3. Legal basis (UK GDPR)

Performance of our contract with you (providing the service you sign up for); our legitimate interests in keeping the service secure and reliable; and your consent where it applies.

4. Where your data is stored

Audio files are stored in Cloudflare R2 and metadata in Cloudflare D1, hosted in the European Union. Authentication is handled by Google Firebase. Sign in with Apple is provided by Apple.

5. How long we keep it

We do not permanently store your recorded audio. Cloud copies are temporary: once delivered to your device they expire automatically — and in any case after 7 days at the latest — at which point the audio bytes are permanently deleted from our servers. The copies on your own devices are unaffected; your audio ultimately lives locally on your own device. Account and metadata are kept until you delete your account.

6. Processors we rely on

• Cloudflare — storage and compute.
• Google Firebase — authentication.
• Apple — Sign in with Apple.
• PostHog (EU region) — product analytics, to understand how the service is used and improve it.

7. Your rights

You can access, correct, export, or delete your data, and object to or restrict certain processing. You can permanently delete your account and all of your audio at any time using "Delete account" in the app, or by emailing us. You may also complain to the UK Information Commissioner's Office (ICO).

8. Security

Data is encrypted in transit and at rest, access is scoped to your account, and downloads use short-lived signed URLs tied to your authenticated session. Our servers route your audio as opaque files to move it between your devices; we do not listen to, analyse, or otherwise inspect the content of your recordings.

9. Children

Squidbrain is not directed at children under 16 and we do not knowingly collect their data.

10. Changes

We may update this policy; material changes will be reflected by the date above.

Monosonic · [email protected]