Privacy Policy

Your songs belong to you. We store them so you can write offline and pick up on another device. When you ask Cloud for help, the words you send are passed to an AI provider so it can answer. We never sell your lyrics or your data.

• Account information — your email address and password (stored hashed by our authentication provider), or the account details returned by Google if you sign in with Google.
• Your songwriting — song titles, lyrics, bars, sections, notes and song settings you create in the app.
• AI requests — the lyrics, lines or words you send when you use a Cloud feature, plus a count of how many AI requests you have used.
• Word lookups — the word you highlight when you ask for rhymes.
• Subscription information — your plan, subscription status, renewal date and payment event records. Card details are never seen or stored by Woosho.
• Feedback — anything you type into the in-app feedback box, and the contact email you optionally add.
• Usage and diagnostics — page views, page leaves and error reports, including technical information your browser sends such as IP address, device type and browser version.

• Lovable Cloud (Supabase) — hosts our database and authentication. Your account, songs and subscription records live here.
• Lovable AI Gateway — receives the text you send to Cloud and forwards it to the underlying AI model provider so a reply can be generated. We do not control, and therefore cannot promise anything about, how long the model provider retains that text. Do not paste anything into Cloud that you would not be comfortable sending to a third-party AI service.
• Datamuse — a public word API used for rhyme, synonym and related-word lookups. Only the single word you searched is sent. No account information is attached.
• Stripe — processes subscription payments and holds your billing details. Woosho receives only the subscription status, plan and identifiers needed to unlock your plan.
• PostHog — product analytics. It records page views, page leaves and JavaScript exceptions, and identifies you by your user ID and email once you are signed in. It stores identifiers in your browser.

We do not sell your data, and we do not use your lyrics to train our own models.

Cloud only ever receives what a feature needs: the line, verse or song you asked it to work on, plus the instructions for the task. Your email address and password are never included in an AI request. Your songs are not sent to any AI service in the background — only when you press a Cloud button.

Woosho is offline-first. Your songs are saved into your browser's storage (IndexedDB, with a localStorage fallback) before they are uploaded, so you can keep writing with no signal. This local copy is kept in a separate store per account, and it stays on the device until you delete your account, clear your browser data, or delete the songs.

We use browser storage for your session (so you stay signed in), your interface preferences, and analytics identifiers. We do not use advertising cookies.

To provide the service you asked for (your account, your songs, your subscription); to meet legal and accounting obligations (payment records); and, for analytics and error reporting, our legitimate interest in keeping the app working and improving it. Where your local law requires consent for analytics cookies, you can block them with your browser or a content blocker; the app works without them.

Your account and songs are kept until you delete them or delete your account. Payment and invoice records are kept as required for tax and accounting, even after deletion, because they are financial records rather than profile data. Analytics and error data are kept according to our analytics provider's retention settings.

Access to your data is enforced in the database with row-level security, so one account cannot read another's songs. Paid features and AI limits are checked on the server, not in the browser. All traffic is encrypted in transit. No service can promise perfect security, but we treat unreleased lyrics as sensitive.

You can delete your account at any time from your account page. Deletion is permanent. It removes your login, your songs stored in the cloud, your AI usage records, trial and promo records, and referral records, and it clears the copy on the device you delete from. If you have a live subscription, it is cancelled immediately as part of the deletion; there is no refund for the remainder of the period you already paid for. Payment records are retained for accounting.

If you are in the UK or EU you can ask for a copy of your data, ask for it to be corrected or deleted, object to certain processing, or complain to your data protection regulator (in the UK, the ICO). Email Wooshoapp@gmail.com and we will respond.

Woosho is not intended for children under 13. If you believe a child has created an account, email us and we will remove it.

If this policy changes we will update the date at the top of this page, and tell you in the app if the change is significant.