In short
This page is the reference document. This summary replaces none of its lines, but it gives you the essentials in four points.
- Your songs are private — Nothing is published until you decide it, and publishing is reversible at any time.
- We sell no data — Neither your contact details, nor your briefs, nor your songs are sold or rented to third parties.
- Analytics wait for your consent — No measurement tool starts before you have accepted the banner.
- You stay in control — Access, correction, erasure, portability: one email address is enough to exercise your rights.
1. Who processes your data
The processing described here is carried out by the publisher of the Woyla service, reachable at the address given at the end of this document. It alone determines the purposes and means of that processing: it is the controller within the meaning of the General Data Protection Regulation.
For any question about this policy or about exercising your rights, the contact address in section 13 is the single point of entry. We impose no particular form.
2. The data we collect
We only collect what the service needs to work. Nothing is asked for “just in case”.
- Account data — Email address, phone number, hashed password where applicable, display name, profile picture if you add one, country, preferred language and currency, how you discovered Woyla, and the musical preference you provide during onboarding. With Google, we receive your email address, name and profile picture. With Sign in with Apple, we receive a stable Apple identifier for Woyla (sub) and, if you share them, your name and email address, which may be an Apple Private Relay address. We never receive your Google or Apple password.
- Content you create — The brief you write, your answers to the questions asked, lyrics you write, paste, or edit, the recipient’s first name, your relationship to them, Explorer reviews and reports, the gift page message, and profile, song-cover, or clip images you choose. If you request voice cloning, we also collect two recordings—the source sample and verification phrase—and data about the derived voice model. An uploaded image may contain embedded metadata, including precise location, which is retained with the original file.
- Songs produced — The generated audio files, the video where one exists, the waveform, the duration, the title and the style selected.
- Billing data — The history of your purchases, amounts, currency, payment method used, transaction status, and a billing address when the payment provider requests it and returns it to Woyla. Card numbers never pass through our servers: they are entered directly with the payment provider.
- Usage and technical data — IP address, device and browser type, pages viewed, actions taken, error logs, installation identifier, push-notification token and permission status, notification preferences, locale, time zone, and app version. Usage events are sent to analytics only after your consent. This data exists to run, secure, and repair the service.
- Support exchanges — The content of the messages you send us and of our replies, kept so we can follow up on your request.
3. Why we use it
Every processing operation answers an identified purpose and a specific legal basis. Here they are, with no exceptions.
- Providing the service — Creating your account, generating your songs, producing gift pages, and giving you access to your files. Legal basis: performance of the contract between us. For voice cloning and sending recordings to the provider, the legal basis is your explicit consent, which you may withdraw for future processing.
- Handling payments — Collecting note purchases and subscriptions, issuing receipts, processing refunds. Legal basis: performance of the contract and accounting obligations.
- Keeping the service secure — Detecting abuse, limiting automated attempts, protecting accounts against unauthorised access, and diagnosing technical failures. Legal basis: our legitimate interest in protecting the service, keeping it reliable, and protecting its users.
- Moderating content — Checking that a brief does not ask for unlawful or hateful content before a generation starts. Legal basis: legitimate interest and legal obligations.
- Improving the product — Understanding which screens cause trouble and which features are actually used. Legal basis: your consent, collected through the analytics banner.
- Keeping you informed — Sending you the emails tied to your account and your orders. Promotional messages only go out if you accepted them, and every send carries an unsubscribe link.
4. What happens to your briefs and songs
To create a song, your brief and detailed answers are sent to an AI service that writes lyrics. Lyrics you approve, edit, write, or paste yourself are your content and are then sent to the provider that composes and performs the audio. Before the first transfer, the app asks for explicit permission and identifies the data, recipients, and purpose. If you decline or withdraw that permission, no new transfer takes place and the affected generation stops.
Woyla does not use your briefs, lyrics, songs, or recordings to train its own models. For voice cloning, both recordings are uploaded to the provider to verify the voice and create a derived voice model. According to the provider, these temporary files are deleted within no more than three days; the derived model remains with the provider until the provider deletes it. Woyla does not currently have a documented mechanism to trigger and verify that remote deletion. This limitation is shown before creation and your explicit consent is required.
A song stays private until you publish it. Publishing a song in the Explorer, or creating a gift page, makes it playable by anyone holding the link: that is a decision you make, and one you can undo at any time.
5. How long we keep it
No data is kept indefinitely. The durations below run from the last relevant event.
- Account and content — For as long as the account exists. Deleting the account deletes the profile, songs, audio files, and gift pages held by Woyla. It cannot yet guarantee deletion of a derived voice model already held by the provider, so that model may remain with the provider after account deletion.
- Deleted songs and voice data — Songs are removed from the interface immediately and cleared from storage within days. For voice cloning that already started, the provider states that both temporary recordings are deleted within no more than three days, but it keeps the derived voice model until it performs deletion. Verifiable remote deletion of that model is not currently available.
- Accounting records — Ten years, in line with the legal retention obligations applicable to accounting documents.
- Technical and security logs — Error and security logs are kept for at most twelve months, then deleted or anonymised. Installation identifiers and push tokens are kept while the installation remains registered; invalid tokens are disabled when notification services report them.
- Support exchanges — Three years after the last contact, so a case history can be picked back up.
6. Who it is shared with
We neither sell nor rent your data. It is passed to technical providers, only for what they carry out on our behalf, and under contract.
- Third-party artificial intelligence services — Specialist artificial-intelligence providers are involved depending on the step. To write or rewrite the lyrics: the brief, your detailed answers, the name or subject, the relationship, the occasion and your choices of language, style, tone and structure. To produce the audio: the title, the lyrics — including any you write or paste — and the production settings (language, style, tone, voice and length). For voice cloning: the two recordings, from which the derived voice model is created. To generate cover art: the occasion, the style, the tone, a relationship category, plus a title and a scene filtered to limit direct identifiers. No password and no payment data is sent to these services. The identity of these providers is disclosed to you on request, as set out in section 13.
- Application hosting and database — Host the site and the database holding accounts, songs and orders.
- Audio and image storage — Holds masters, excerpts, videos and gift page images. Private files are only reachable through signed links with a limited lifetime.
- Payment providers — Receive the information needed to take payment. They act as controllers for the banking data they collect directly.
- Transactional email delivery — Receives your email address and the message content in order to deliver it.
- Technical monitoring, analytics, and notifications — Sentry receives minimised error and diagnostic reports from app start so we can secure and repair the service. PostHog receives usage events only after your consent and is configured on European infrastructure. Firebase Cloud Messaging and Apple Push Notification service receive installation tokens and notification data to deliver the notifications you enabled. If you use iOS system dictation, Apple’s speech-recognition service may temporarily process the audio; Woyla receives and keeps only the resulting text.
Your data may also be disclosed to authorities where the law requires it, upon a properly issued request and only to the extent requested.
7. Transfers outside the European Union
Some of our providers are established outside the European Union, notably in the United States. Those transfers are framed by the standard contractual clauses adopted by the European Commission, supplemented where necessary by additional technical measures.
Woyla also serves people living in Senegal and the surrounding region. Processing concerning them complies with Law No. 2008-12 of 25 January 2008 on the protection of personal data, whose rights are equivalent to those described in section 10.
9. Security
Traffic is encrypted in transit. Passwords are stored as irreversible hashes. Access to data is partitioned at the database level itself: access rules are enforced by the database engine, not only by the application.
Private audio files are never served from a permanent public address: every play and every download goes through a signed link valid for a short time. Since no system is infallible, we encourage you to choose a unique password and to report any suspicious access.
10. Your rights
You have the following rights over the data concerning you.
- Access — Obtain confirmation that processing exists and receive a copy of it.
- Rectification — Have inaccurate or incomplete information corrected.
- Erasure — Request deletion of your data, subject to our legal retention obligations.
- Restriction — Request that processing be frozen while a dispute is examined.
- Portability — Retrieve the data you provided us in a machine-readable format.
- Objection — Object to processing based on our legitimate interest, and to marketing at any time.
- Withdrawing consent — Withdraw permission for analytics, promotional emails, push notifications, future sharing with AI services, or future processing of your voice, without affecting processing already completed. In the app: Settings > Privacy > Anonymous usage analytics or AI data sharing; notification permission is controlled in your device settings. Withdrawing AI permission blocks future transfers from this device. For voice data, withdrawal blocks new processing but does not automatically remove a model already held by the provider; contact us to request deletion, which we cannot yet verify remotely.
Write to the address in section 13, with the subject “Personal data”. We answer within one month, possibly extended by two months if the request is complex — in which case we tell you. If our answer does not satisfy you, you can refer the matter to the competent supervisory authority: the CNIL in France, the Commission de protection des données personnelles in Senegal.
11. Minors
The service is not intended for people under sixteen, and we do not knowingly collect their data. If you notice that an account was created by a minor without their legal guardian’s consent, tell us: the account and its content will be deleted.
12. Changes to this policy
This policy evolves alongside the service. The date of the last update appears at the top of the page. Any substantial change will be announced by email or through a message inside the product, before it takes effect.
13. Contacting us
For any question about this policy, about exercising your rights or about the processing of your data, write to support@woyla.app with the subject “Personal data”.
We acknowledge every request. For requests concerning an account, write from the email address attached to that account: it saves us from asking you for identity documents.