Policies

Effective 16 October 2026 · Version 1.16

This page covers the three documents you should know about when using Stairway2Fast: the Terms of Service, the Acceptable Use Policy, and the Privacy Policy. Plain English, no legalese.

Privacy summary in your language: français · Deutsch · español · português · italiano

1. Terms of Service

What this service does

Stairway2Fast (the "Service") lets you loop and slow-play YouTube videos and your own uploaded videos for music practice, and tracks your practice time. The Service is operated by Feya Labs Ltd, a company registered in England and Wales (company number 17267727).

Your account

• Account registration is for adults only (18+). To create an account you must confirm you are an adult — at least 18, or the age of majority in your jurisdiction — by ticking the confirmation at sign-up. We do not open account registration to anyone under 18. The Service is not directed to or intended for children, and we do not knowingly collect personal information from anyone under 13. We do not ask for a date of birth.
• If you choose to let someone under 18 use the Service, you do so through your own adult account, as their parent or legal guardian; you supervise that use and you are responsible for it — the same way you would be for any other website or app you allow them to use. The account remains yours and you are legally responsible for all activity under it. A minor must not create their own account.
• You are responsible for keeping your password safe and for everything that happens under your account.
• One account per person. Don't impersonate someone else.
• We may suspend or terminate your account if you violate these Terms or the Acceptable Use Policy.

Your content

• You keep ownership of what you upload. Uploading or syncing a video or audio file to the Service does NOT transfer ownership to us.
• You grant us a limited, non-exclusive licence to host, process, and deliver the files you upload — and, where you use track-splitting, to generate and store the separated tracks — solely for the purpose of providing the Service to you.
• You warrant that you have the necessary rights. For anything you upload — including any commercial song, recording, or other third-party material, and including files you upload for track-splitting — you represent and warrant that you own it or have all licences, rights, consents, and permissions needed to upload it and to have us process it as described, and that doing so does not infringe anyone's copyright or other rights.
• Track-splitting is processing you instruct. When you split an uploaded file into its separate instrument tracks, we act as a neutral processor carrying out your request on a file you have warranted you have the rights to. We make no claim of ownership over the separated tracks, and the warranty above applies to them too. Track-splitting works only on files you upload — never on YouTube videos.
• You indemnify us. You agree to indemnify and hold harmless Feya Labs Ltd and the Service against any claim, loss, or cost (including reasonable legal fees) arising from content you upload or ask us to process, or from your breach of the warranty above.
• You can delete your uploads at any time. Deletion removes the file (and any separated tracks generated from it) from our cloud storage; cached copies on Cloudflare's edge network may persist for up to 24 hours before they expire.

Third-party content (YouTube and others)

• When you add a YouTube link, the Service uses YouTube's official embedded player to play it in your browser. We do not host, mirror, download, or modify YouTube content. The relationship between you and YouTube is governed by YouTube's Terms of Service.
• Whether ads are shown during YouTube playback depends on YouTube and on your browser settings. We do not provide, bundle, recommend, or encourage tools that block YouTube ads, and we make no promise that YouTube playback through the Service is ad-free.
• The Service applies playback controls (loop, slow-down, pause-seek) only via YouTube's own publicly documented embedded-player API. We do not bypass YouTube's content protection, modify the video stream, or remove watermarks / end-screens / branding shown by YouTube.
• If a video is removed from YouTube, becomes private, or loses embedding permission, we cannot play it. Your saved loops and practice history for that video remain intact — you just can't watch it any more.

Service availability

We aim for the Service to be available 24/7 but provide no guarantee. We may perform maintenance, change features, or suspend the Service without notice. We are not liable for any loss caused by the Service being unavailable.

Payments & Pro subscription

Most of the Service is free, including cross-device sync of your YouTube library and all the practice tools. Pro is an optional paid subscription (currently $6/month or $58/year in USD, or your local-currency equivalent shown at checkout — e.g. £4.99/month in the UK) that unlocks cloud-mirroring of your own uploaded video files, cross-device playback of them, and the deeper practice insights. Prices are shown before you pay. There is no free trial — the free tier lets you try the product for as long as you like before upgrading.

Who you pay. Pro payments are processed by Stripe, which acts as the merchant of record (the seller for the transaction) via Stripe's Onelink (Managed Payments) service. Stripe handles the payment, any applicable sales tax / VAT, and billing support. Your card statement shows an Onelink / Stripe descriptor and your receipts are issued by Stripe.

By subscribing you agree that:

• Auto-renewal. Subscriptions auto-renew at the end of each billing period (monthly or annual) until cancelled, charged to the payment method on file.
• Cancellation. Cancel any time in Settings → Cancel subscription (in-app, one tap). Cancellation takes effect at the END of the current paid period — you keep Pro until then and are not billed again.
• 14-day cancellation right. If you are a consumer, you may cancel within 14 days of subscribing for a full refund. By starting to use Pro features immediately you ask us to begin the service within that period; we still honour a full refund within 14 days of the first charge.
• Refunds. Because Stripe is the merchant of record, refunds are handled through Stripe / Onelink. You can request one from your Onelink account or by emailing [email protected], which we will forward; refunds are subject to Stripe's processing (typically within 60 days of the charge). Our guideline: monthly — full refund within 14 days of the most recent charge; annual — full within 14 days, then pro-rated for whole unused months.
• Failed payments. If a renewal fails, Pro stays active for about three weeks while the payment is retried (you will see an in-app prompt to update your card). If retries fail, the account reverts to Free.
• What happens on downgrade. Your practice history and YouTube library are unaffected. Cloud storage is a Pro feature, so 30 days after your Pro subscription ends (the end of the paid period, not the day you press Cancel) we delete from our cloud storage the videos you uploaded and everything we generated from them — separated instrument tracks, play-along mixes, waveform data and thumbnails. We email you when Pro ends, with the deletion date, and again about a week before it; if an email reaches you late, the date moves later, never earlier. Please download any separated tracks you want to keep, and keep your own copies of your original videos, before that date. If you resubscribe to Pro before it, nothing is deleted. You can also delete your uploads yourself at any time; copies stored locally on your own device are not affected. Your practice sessions and history are kept and retained the same way as on the free tier — see the Privacy Policy's Retention section.
• Pricing changes. We will give at least 30 days' notice before any price increase affects your subscription; you can cancel before it applies.
• Taxes. Listed prices are inclusive of any applicable VAT / sales tax where it applies. Stripe, as merchant of record, calculates and remits that tax and itemises it on your receipt — so the price you see is the price you pay.
• Separation credit packs (one-time). Separately from a subscription you may buy one-time separation credit packs (for example £6 for 50 stem separations). Purchased credits do not expire. Each separation is digital content supplied on demand — it is generated and made available to you (including download) the moment you run it. By buying a pack you expressly consent to us supplying that content immediately when you run a separation, and you acknowledge that you lose your 14-day right to cancel for any credit once it has been used. A pack is therefore refundable within 14 days only while no credits from it have been used; once you run any separation from a pack, that pack is non-refundable. This does not affect your legal rights if a separation is faulty or not as described. Separation runs on videos you uploaded to our cloud storage, which is part of Pro. If your Pro subscription ends, unused purchased credits stay on your account: you can still use them on those videos until they are deleted under What happens on downgrade, and again whenever you resubscribe. They are not refunded because Pro ended (the 14-day right above is unaffected). Tracks you already separated remain yours to download until the deletion date described under What happens on downgrade.

Disclaimers and liability

The Service is provided "as is" without warranty of any kind. To the maximum extent permitted by law, our total liability for any claim arising from the Service is limited to the amount you paid us in the 12 months before the claim. Nothing in these Terms limits liability that cannot lawfully be excluded (including death or personal injury caused by negligence, fraud, or breach of statutory consumer rights).

Changes

We may update these Terms. If a change materially reduces your rights, we'll give reasonable notice (for example an in-app notice or an email) before it takes effect, and the change will apply going forward only. Minor changes (clarifications, or terms for new features) take effect when posted. If you don't agree with a change, you can stop using the Service and close your account; the previous terms continue to apply to your use before the change.

Governing law

These Terms are governed by the laws of England and Wales. Disputes are subject to the exclusive jurisdiction of the English courts.

2. Acceptable Use Policy

Stairway2Fast is for music practice. The following content and behaviour is prohibited:

Prohibited content

• Child sexual abuse material (CSAM), including AI-generated. Where we become aware of CSAM, we remove it and report it to the relevant authorities (UK Internet Watch Foundation / US NCMEC) and cooperate with law enforcement.
• Non-consensual intimate imagery ("revenge porn", upskirting, deepfake pornography of identifiable people).
• Pornography of any kind. The Service is not for adult content.
• Gore, real violence, or content glorifying violence, terrorism, or self-harm.
• Hate speech targeting protected groups (race, religion, sexuality, gender, disability, etc.).
• Harassment of identifiable individuals, including doxxing.
• Content that infringes someone else's rights. You must own, or have the necessary rights, permission, or licence for, anything you upload. We are not responsible for verifying this. If we receive a valid complaint that uploaded content infringes a third party's rights, we remove it (see the DMCA / Copyright takedown page and "Reporting abuse or illegal content" below).
• Malware, phishing payloads, or any content designed to compromise other users.
• Personal data of others (private addresses, ID documents, etc.) without consent.

Prohibited behaviour

• Using automated tools to scrape, mass-upload, or artificially inflate practice time.
• Circumventing our rate limits or content checks.
• Reverse-engineering the Service to build a competing product.
• Sharing your account credentials with others.

Enforcement

• We may remove content or suspend accounts at our discretion if we believe this Policy has been violated. We aim to give notice where reasonable, but for severe violations (CSAM, violence, malware) we act first and notify later.
• For CSAM specifically, we are legally required to report and we will. There is no warning, no "delete and we'll ignore it".
• Appeals: email [email protected] with the content URL and your explanation. We respond within 7 days.

3. Privacy Policy

What we collect

• Account info: email address, display name, an avatar (an emoji or a profile photo you choose to upload), and an optional @handle (username). Provided when you sign up or edit your profile. If you sign up using Google Sign-In, we receive your email and basic Google profile (name, profile picture) from Google. We never request access to your Gmail, Drive, Calendar, Contacts, Photos, or any other Google data — only the basic identity needed to sign you in.
• Practice data: what videos you added, how long you practiced each, at what speed, with what loop range. Tracked automatically while you use the Service.
• Uploaded content: if you sync local videos to our cloud, we store the video file and a thumbnail on Cloudflare R2 storage. If you upload a profile photo, the cropped image is stored there too. If you use track-splitting on an uploaded file, we also store the audio files created at your request (the separated instrument tracks, play-along mixes, and waveform data) — these are deleted together with the video, with your account, or 30 days after your Pro subscription ends.
• Social & settings: friends you connect with, anything you explicitly choose to share (a practice loop or a recap you send), and your settings such as your daily practice goal and theme.
• Referral attribution: if you first arrive via a partner's referral link, we store that partner's code in your browser and, if you sign up, record it on your account so the partner can be credited for the referral. It contains no information about you — only which partner's link you used.
• Feedback you send us: if you use the feedback form (on this site or in the app), we store what you write, the type of feedback you picked, the email address you give us if you choose to, the page and language you were on, the words or control you pointed at if you use “point at it” (only text that matches the app’s own wording — not your video titles or other things you added), your screen size, the app version, and the country your connection comes from (we do not store your IP address). It is read only by us, and a notification copy is emailed to our support inbox. It is not linked to your account — the form sends no account identifier, even when you are signed in — and we use your email address only to reply to you.
• A partner application, if you send one: if you use the form on our Partner Program page, we store the teaching link you give us, the email address for our reply, anything you choose to write in the message box, whether you told us you already have a Stairway2Fast account and which address it uses if you give one, the page and language you were on, and the country your connection comes from (we do not store your IP address). It is read only by us, and a notification copy is emailed to our partner inbox. We use what you send only to answer you and to decide together whether to work together. ⚠ Unlike the feedback form above, this one can name an account — but only because you typed that address in yourself, and only if you ticked the box; we never look your account up from anything else you send.
• Technical logs: request timestamps, IP address (truncated before we store it), browser type. Used for security, abuse prevention, and basic usage analytics. We also record anonymous, aggregate fault signals — only which phase of the app hit an error (no error text, no stack traces, no account or device identifier, no personal data) — to detect and fix breakages, including for visitors before they sign in. Because these are anonymous and aggregate, they are not personal data and are not linked to you, so there is nothing about you to identify, access, correct, or delete in them. Questions? [email protected].

What we do with it

• Provide and improve the Service.
• Bill you for paid features (when applicable).
• Investigate abuse or security incidents.
• Comply with legal obligations (e.g., respond to court orders, report CSAM).

Personalisation & aggregated insights

Current status: of the activities described below, the personalised dashboard features (Today's Step, streak, weekly recap) are live today. The cross-user aggregated insights and the YouTube-metadata instrument inference are not yet active — they are planned for a future release, and we will not begin them without a clear update here first. The opt-outs in Settings → Privacy already apply, so any choice you record now is honoured the moment those features turn on.

We process your practice data (speed history, loop ranges, session durations, video metadata derived from YouTube public information) under legitimate interest (GDPR Art 6(1)(f)) to:

• Personalise your dashboard — show you Today's Step, streak grace, weekly recap, and (in future) practice recommendations tailored to your history. In a future release we may infer the primary instrument of each video from its public YouTube title, channel, and tags (no audio analysis) so we can route recommendations correctly; this inference is not running yet. When active it is internal only and is never surfaced as a label in the UI.
• Compute anonymised group insights (planned) — for example "the median user reaches 0.9× on this song in 14 days". These statistics are computed only when at least 20 users have practised a given video, and only when each speed bucket / loop region has enough users to prevent any individual being identified (k-anonymity + l-diversity applied). Identifying fields (email, display name, @handle) are stripped before aggregation.
• (Future) train a personalised recommendation model — Phase 3, year 2+. This would be done under your consent, not legitimate interest: we will write a dedicated update to this policy and ask for opt-in before any model training begins. Until then, no model uses your data.

Your right to object (GDPR Art 21): You can opt out anytime in Settings → Privacy:

• Personalized recommendations off → no Why button, no future recommendation surfaces.
• Contribute to aggregated insights off → your sessions are excluded from the cross-user statistics computation. Your own dashboard works exactly the same.

Deleting your account removes your contribution from all future aggregations. Aggregations already computed before deletion are not re-run, but your individual data has already been stripped by the k-anonymity step.

Children

Stairway2Fast is a general-audience tool intended for adults. It is not directed to or intended for children, and we do not knowingly collect personal information from anyone under 13. We do not ask for a date of birth and we do not market the Service to children.

If you are a parent or guardian and you choose to let a child use the Service under your supervision, you do so through your own adult account and you are responsible for that use — the same as for any other website or app you allow them to use (see Terms → Your account).

If you believe a child under 13 has provided us personal information, or that a child is using the Service without a parent's involvement, please email [email protected] and we will delete the information and take appropriate action. We action such requests within 30 days.

What we do NOT do

• We do not sell your data to third parties.
• We do not run third-party ads or advertising trackers.
• We do not look at the content of your uploaded videos except as needed for automated safety scanning (image/frame checks for nudity and abusive content) and incident response. Where we become aware of child sexual abuse material we report it — see the Acceptable Use Policy.

Where your data lives

• Account and practice metadata: Google Firebase (Firestore + Auth), hosted in the EU.
• Uploaded videos and profile photos: Cloudflare R2, Western Europe region.
• Static site assets: Cloudflare Pages global CDN.
• Transactional emails (account verification, password reset, and the notification we send ourselves when you submit feedback): delivered via Resend (resend.com). Emails are sent from Resend's EU (Ireland) region; Resend itself is a US company and stores email addresses, message content, and delivery metadata and logs in the United States, under the safeguards in its data processing agreement. Only your email address and the email content (which may include your display name) are sent — no practice data, no uploaded content. A feedback notification carries the feedback itself, including any email address you gave in the form.
• Our support mailbox: Google Workspace (Google LLC, United States). Feedback notifications and any email you send us are stored there.
• Bot / abuse protection: Google reCAPTCHA via Firebase App Check (Google LLC, United States). Receives technical request signals only (device / interaction data) to score bots — no practice data, no uploaded content, no advertising use.
• Payments (Pro only): processed by Stripe as merchant of record (Stripe Payments Europe, Ltd., Dublin, Ireland, and its affiliates) — see "Payment processing" below. We never receive your card number; no practice data or uploaded content is shared with Stripe.
• AI track-splitting (Pro, only when you use it): when you ask us to split an uploaded file into instrument tracks, the audio file is processed by Replicate, Inc. (United States), which runs the separation model on our behalf. Replicate receives the audio file you chose to split (via a time-limited link) and returns the separated tracks to us; it does not receive your name, email address, or profile information (the temporary download link contains an internal account identifier in its file path, but nothing that identifies you). This happens only for files you explicitly submit for splitting — never for YouTube videos or anything else in your library.

International transfers. Our primary data is processed in the EU — Firebase Firestore (Europe) and Cloudflare R2 (Western Europe) — and transactional email is sent from Resend's EU (Ireland) region. Data is handled in the United States principally in four cases: Resend (a US company) stores email addresses, message content (including the text of feedback you send us), delivery metadata and logs there; our support mailbox is hosted by Google Workspace; Google receives technical security signals for reCAPTCHA / App Check (no practice data or uploaded content); and — only if you use track-splitting — Replicate, Inc. processes the audio file you submit, as described above. For Pro subscribers, Stripe additionally processes payment data as merchant of record (the contracting entity is Stripe Payments Europe, Ltd., Dublin; Stripe is a US-parented group). Note that some providers are US-incorporated companies even where they process your data in the EU. Where personal data is transferred to, or accessible from, outside the UK/EEA, we rely on appropriate safeguards such as the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement (IDTA) / Addendum, or the EU Standard Contractual Clauses, as applicable to each provider. For the track-splitting provider (Replicate) we are putting this paperwork in place; in the meantime such transfers happen only when you request them, carry only the audio file you submit, and Replicate automatically deletes the file within one hour.

Payment processing (Stripe)

When you upgrade to a paid Pro subscription, payment is handled entirely by Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland, and its affiliates), which acts as the merchant of record via Stripe's Onelink service. Stripe is PCI-DSS Level 1 certified. We do not see or store your card number, CVC, expiry, or any card details. From Stripe we receive only a customer ID, your subscription status, plan, renewal date, and receipt links — never the card itself, which stays in the Stripe / Onelink portal we don't have access to. Stripe processes this data under its own privacy policy at stripe.com/privacy.

Security & data breaches

We protect your data with per-account access rules, isolated service credentials, App Check attestation, and truncated IP logging. No system is perfectly secure, but if a personal-data breach occurs that is likely to pose a risk to your rights, we will notify the UK Information Commissioner's Office without undue delay (within 72 hours where required), and we will inform affected users directly without undue delay where the breach is likely to result in a high risk to you.

Your rights (UK / EU GDPR)

• Access: request a copy of your data (email us, or use the self-serve export below).
• Deletion: delete your account and all associated data yourself, in-app, from Settings → Advanced → Delete account — it removes your login and data straight away. Anything that can't be removed instantly is purged within 30 days. This is permanent and cannot be undone.
• Portability: download your data as a JSON file from Settings → Advanced → Download my data. Includes your videos, categories, named loops, daily practice totals, preferences, and friend connections — the data you provided to us. Stairway2Fast's analytical derivations (per-speed breakdowns, IoU cluster bands, tier achievements, monthly reports, speed-progress timelines, recap images, Stairway visualisation data) are not included; these are our analysis of your data, not your data itself. This follows the GDPR Article 20 scope of "data the data subject has provided."
• Rectification: correct inaccurate data we hold about you.
• Object / restrict: object to or restrict processing based on legitimate interest (see legal bases below).
• Complain to a regulator: if you believe we have mishandled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ico.org.uk), or your local EU/EEA supervisory authority. We'd appreciate the chance to resolve it first — email us below.

Deletion and Portability are self-serve in the app (Settings → Advanced). For Access, Rectification, or objection requests, email [email protected].

Our legal bases (UK / EU GDPR Art 6)

• Contract (Art 6(1)(b)) — to provide the Service you signed up for: your account, your video library, practice tracking, cross-device sync, and (for Pro) uploaded-video storage.
• Legitimate interest (Art 6(1)(f)) — security and abuse prevention (including reCAPTCHA / App Check and truncated-IP logs), the dashboard personalisation described above, and reading and answering feedback you choose to send us and using it to fix and improve the Service and its translations. You can object to legitimate-interest processing at any time.
• Legal obligation (Art 6(1)(c)) — to comply with the law, e.g. responding to valid legal requests and our adult-affirmation record.
• Consent (Art 6(1)(a)) — for anything we mark as opt-in, such as any future model training. You can withdraw consent at any time.

Account deletion is permanent. Deleting your account removes your login and data and cannot be undone — we cannot recover a deleted account, and a previously-downloaded data export cannot be re-imported (the export is one-directional by design, which keeps streaks and totals honest). If you may want a copy of your data, use Settings → Advanced → Download my data before you delete.

Revoking Google Sign-In access

If you signed in with Google, you can revoke our app's access to your Google account at any time at myaccount.google.com/permissions. Revoking access prevents future Google sign-ins but does not delete your existing Stairway2Fast account or your practice history — for that, use the "Deletion" request above.

Cookies & local storage

We use Firebase Authentication's storage (so you stay signed in) and your browser's local storage / IndexedDB to keep the app working — for example your interface preferences and, on the guest tier, your practice data before you create an account. These are strictly necessary for the Service to function.

For security and abuse prevention we use Google reCAPTCHA (via Firebase App Check). reCAPTCHA loads a script from Google and sets a cookie that is necessary for that protection, and sends technical signals about the request (such as device and interaction data) to Google in order to tell real users apart from bots. It does not receive your practice data or uploaded content, and we do not use it for advertising. Your use of the Service is subject to Google's Privacy Policy and Terms.

We do not set advertising or marketing cookies, and we do not run third-party advertising trackers. Beyond the Google reCAPTCHA component described above, the app loads a small number of functional scripts and assets from content-delivery networks: the Firebase SDK (Google), a charting library and — only when you upload a file — the safety-scanning model (both from jsDelivr), and optional extra instrument sounds for the practice tools. These are static file fetches; like any web request they expose your IP address to the CDN, but carry no account or practice data and set no tracking cookies. Our public landing page uses Cloudflare Web Analytics, a cookieless, privacy-focused page counter.

If you arrive via a partner's referral link, we keep that partner's code in your browser's local storage (see "Referral attribution" above) so the partner can be credited if you sign up. It identifies the partner, not you, and we use it for nothing else.

Retention

We keep the minimum we need to run the tool and show you your progress. Retention by data class:

• Practice sessions (the precise per-session record of video, speed, loop, and duration): kept while your account is active, so your long-run progress and Stairway hold up. We may aggregate older precise rows into daily totals over time to keep the app fast; either way they are deleted when you delete the video or the account.
• Daily totals: kept for the life of the account so long-run streaks and lifetime totals survive; deleted on account deletion.
• Library & profile (your videos, categories, notes, profile name, @handle, goal): kept while in your library / while the account is active; deleted on removal or account deletion.
• Uploaded videos and files generated from them (Pro: separated tracks, play-along mixes, waveform data, thumbnails): kept while referenced by a library item and while you have Pro; deleted on video removal, on account deletion, or 30 days after your Pro subscription ends (we email you the date first — see What happens on downgrade).
• Feedback reports: kept for 12 months, then deleted automatically (usually within a day of that date). The notification copy in our support inbox is kept no longer than the report. Because a report is not linked to your account, deleting your account does not find it — to have one deleted sooner, email [email protected] with the address you used or roughly when you sent it.
• Partner applications: kept for 24 months, then deleted automatically (usually within a day of that date). Longer than a feedback report because an application is the start of a business conversation we may both need to look back on — including if you write to us again next season. The notification copy in our partner inbox is kept no longer than the application. To have one deleted sooner, email [email protected] from the address you used. If we go on to work together, the partnership records that follow are kept under the Partner Referral Terms, not under this line.
• Diagnostic / security logs (truncated-IP request logs, error / diagnostic events): kept for as long as needed for debugging, security, and abuse investigation, and no longer than necessary for those purposes; deleted at the latest when you delete your account.

Deleting your account removes your sessions, daily totals, videos (including any uploaded files), your profile, and social connections.

4. Contact & takedown

General contact

Questions, bug reports, feature ideas: [email protected].

Reporting abuse or illegal content

If you encounter content that violates our Acceptable Use Policy — especially CSAM, threats, NCII, or harassment — please report it immediately:

• Email [email protected] with the URL or video title and a brief description.
• For CSAM specifically, you can also report directly to the UK Internet Watch Foundation or US NCMEC CyberTipline.

Copyright / DMCA

Full details and counter-notice procedure are on the DMCA / Copyright takedown page.

If you believe your copyrighted work has been used on the Service without permission, send a DMCA notice to [email protected] including:

• Identification of the copyrighted work
• URL or location of the alleged infringement on our Service
• Your contact information
• A statement that you have a good-faith belief that the use is not authorised
• A statement, under penalty of perjury, that the information is accurate and you are authorised to act on behalf of the copyright holder
• Your physical or electronic signature

We action valid notices within 48 hours.

5. Privacy summary in your language

The policy above is written in English. Below is a short summary of the privacy part in each language the app ships in, so you can see what we collect, why, and how to exercise your rights without reading the full English text. Each summary is informative only — the English version governs.

Résumé de la politique de confidentialité (français)

Résumé informatif. La version intégrale ci-dessus fait foi ; elle est rédigée en anglais.

• Responsable du traitement : Feya Labs Ltd, société immatriculée en Angleterre et au pays de Galles sous le numéro 17267727, siège social 71-75 Shelton Street, Covent Garden, Londres WC2H 9JQ. Contact [email protected].
• Données collectées : compte (adresse e-mail, nom affiché, avatar, pseudonyme @ facultatif), données de travail (vidéos ajoutées, durée, vitesse, boucles), contenus que vous envoyez vous-même dans le cloud (offre Pro), messages envoyés via le formulaire de retour, code de parrainage éventuel, journaux techniques et de sécurité (adresse IP tronquée).
• Finalités et bases légales : exécution du contrat (art. 6.1.b) pour fournir le service ; intérêt légitime (art. 6.1.f) pour la sécurité, la prévention des abus, la personnalisation du tableau de bord et le traitement de vos retours ; obligation légale (art. 6.1.c) ; consentement (art. 6.1.a) pour tout ce qui est explicitement facultatif. Vous pouvez vous opposer à tout moment au traitement fondé sur l’intérêt légitime.
• Destinataires : Google (Firebase, authentification et base de données), Cloudflare (hébergement et stockage des fichiers), Stripe et Onelink (paiements, uniquement pour l’offre Pro), Resend (envoi des e-mails), Replicate (uniquement le fichier audio que vous soumettez vous-même à la séparation de pistes). Certains de ces prestataires sont établis aux États-Unis ; les transferts reposent sur les garanties décrites dans la version intégrale.
• Durées de conservation : les données de travail et de bibliothèque sont conservées tant que le compte est actif ; les messages de retour douze mois ; la suppression du compte efface vos sessions, totaux, vidéos, profil et relations sociales.
• Ce que nous ne faisons pas : nous ne vendons pas vos données et n’utilisons ni publicité ni traqueurs publicitaires.
• Vos droits : accès, rectification, effacement, portabilité, limitation et opposition. L’export et la suppression sont disponibles directement dans l’application (Réglages → Avancé). Pour les autres demandes, écrivez à [email protected].
• Réclamation : vous pouvez saisir l’autorité de contrôle britannique (ico.org.uk) ou l’autorité de votre pays, en France la CNIL. Nous préférons toutefois pouvoir résoudre le problème d’abord.

Ce résumé n’ajoute aucun droit et n’en retire aucun. En cas de divergence, la version anglaise complète prévaut.

Zusammenfassung der Datenschutzerklärung (Deutsch)

Informative Zusammenfassung. Maßgeblich ist die vollständige Fassung oben, die auf Englisch verfasst ist.

• Verantwortlicher: Feya Labs Ltd, eingetragen in England und Wales unter der Nummer 17267727, Sitz 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Kontakt [email protected].
• Erhobene Daten: Konto (E-Mail-Adresse, Anzeigename, Avatar, optionaler @-Name), Übungsdaten (hinzugefügte Videos, Dauer, Geschwindigkeit, Schleifen), Inhalte, die du selbst in die Cloud lädst (Pro), Nachrichten aus dem Feedback-Formular, ein etwaiger Partner-Code sowie technische und Sicherheitsprotokolle (gekürzte IP-Adresse).
• Zwecke und Rechtsgrundlagen: Vertragserfüllung (Art. 6 Abs. 1 lit. b) für die Bereitstellung des Dienstes, berechtigtes Interesse (Art. 6 Abs. 1 lit. f) für Sicherheit, Missbrauchsabwehr, die Personalisierung der Übersicht und die Bearbeitung deines Feedbacks, rechtliche Verpflichtung (Art. 6 Abs. 1 lit. c) sowie Einwilligung (Art. 6 Abs. 1 lit. a) für alles ausdrücklich Freiwillige. Der Verarbeitung auf Grundlage berechtigter Interessen kannst du jederzeit widersprechen.
• Empfänger: Google (Firebase, Anmeldung und Datenbank), Cloudflare (Hosting und Dateispeicher), Stripe und Onelink (Zahlungen, nur bei Pro), Resend (E-Mail-Versand), Replicate (nur die Audiodatei, die du selbst zur Spurtrennung einreichst). Einige dieser Anbieter sitzen in den USA. Die Übermittlungen stützen sich auf die in der vollständigen Fassung beschriebenen Garantien.
• Speicherdauer: Übe- und Bibliotheksdaten, solange das Konto aktiv ist, Feedback-Nachrichten zwölf Monate. Mit der Löschung des Kontos werden Sitzungen, Summen, Videos, Profil und Verbindungen gelöscht.
• Was wir nicht tun: Wir verkaufen deine Daten nicht und setzen keine Werbung und keine Werbe-Tracker ein.
• Deine Rechte: Auskunft, Berichtigung, Löschung, Datenübertragbarkeit, Einschränkung und Widerspruch. Export und Löschung findest du direkt in der App (Einstellungen → Erweitert). Für alles andere schreibe an [email protected].
• Beschwerde: Du kannst dich an die britische Aufsichtsbehörde (ico.org.uk) oder an die Aufsichtsbehörde deines Landes wenden. Wir würden das Anliegen aber gern zuerst selbst klären.

Diese Zusammenfassung begründet keine zusätzlichen Rechte und schränkt keine ein. Bei Abweichungen gilt die vollständige englische Fassung.

Resumen de la política de privacidad (español)

Resumen informativo. La versión completa de arriba es la que rige y está en inglés.

• Responsable: Feya Labs Ltd, sociedad inscrita en Inglaterra y Gales con el número 17267727, domicilio social 71-75 Shelton Street, Covent Garden, Londres WC2H 9JQ. Contacto [email protected].
• Datos que recogemos: cuenta (correo electrónico, nombre visible, avatar, @usuario opcional), datos de práctica (videos que agregas, duración, velocidad, bucles), archivos que tú mismo subes a la nube (Pro), mensajes del formulario de comentarios, el código de socio si llegaste por un enlace de referencia, y registros técnicos y de seguridad (dirección IP truncada).
• Fines y bases legales: ejecución del contrato (art. 6.1.b) para prestar el servicio, interés legítimo (art. 6.1.f) para seguridad, prevención de abusos, personalización del panel y atención de tus comentarios, obligación legal (art. 6.1.c) y consentimiento (art. 6.1.a) para todo lo que marcamos como opcional. Puedes oponerte en cualquier momento al tratamiento basado en interés legítimo.
• Destinatarios: Google (Firebase, inicio de sesión y base de datos), Cloudflare (alojamiento y almacenamiento de archivos), Stripe y Onelink (pagos, solo en Pro), Resend (envío de correos) y Replicate (solo el archivo de audio que tú envías para separar pistas). Algunos están en Estados Unidos; las transferencias se apoyan en las garantías descritas en la versión completa.
• Conservación: los datos de práctica y de tu biblioteca se conservan mientras la cuenta esté activa; los mensajes de comentarios, doce meses. Al borrar la cuenta se eliminan tus sesiones, totales, videos, perfil y conexiones.
• Lo que no hacemos: no vendemos tus datos ni usamos publicidad ni rastreadores publicitarios.
• Tus derechos: acceso, rectificación, supresión, portabilidad, limitación y oposición. La exportación y el borrado están en la app (Ajustes → Avanzado). Para lo demás escribe a [email protected].
• Reclamación: puedes acudir a la autoridad británica (ico.org.uk) o a la autoridad de tu país. Nos gustaría poder resolverlo antes contigo.

Este resumen no añade ni quita derechos. Si algo difiere, prevalece la versión completa en inglés.

Resumo da política de privacidade (português)

Resumo informativo. A versão completa acima é a que vale e está em inglês.

• Controlador: Feya Labs Ltd, empresa registrada na Inglaterra e no País de Gales sob o número 17267727, sede em 71-75 Shelton Street, Covent Garden, Londres WC2H 9JQ. Contato [email protected].
• Dados que coletamos: conta (e-mail, nome de exibição, avatar, @nome opcional), dados de estudo (vídeos que você adiciona, duração, velocidade, trechos em loop), arquivos que você mesmo envia para a nuvem (Pro), mensagens do formulário de feedback, o código do parceiro se você chegou por um link de indicação, e registros técnicos e de segurança (endereço IP truncado).
• Finalidades e bases legais: execução do contrato (art. 6.1.b) para fornecer o serviço, legítimo interesse (art. 6.1.f) para segurança, prevenção de abusos, personalização do painel e tratamento do seu feedback, obrigação legal (art. 6.1.c) e consentimento (art. 6.1.a) para tudo que for opcional. Você pode se opor a qualquer momento ao tratamento baseado em legítimo interesse.
• Destinatários: Google (Firebase, login e banco de dados), Cloudflare (hospedagem e armazenamento de arquivos), Stripe e Onelink (pagamentos, apenas no Pro), Resend (envio de e-mails) e Replicate (apenas o arquivo de áudio que você envia para separar as faixas). Alguns ficam nos Estados Unidos; as transferências se apoiam nas garantias descritas na versão completa.
• Prazos de guarda: os dados de estudo e da sua biblioteca ficam enquanto a conta estiver ativa; as mensagens de feedback, doze meses. Excluir a conta apaga suas sessões, totais, vídeos, perfil e conexões.
• O que não fazemos: não vendemos seus dados e não usamos publicidade nem rastreadores de anúncios.
• Seus direitos: acesso, correção, exclusão, portabilidade, limitação e oposição. Exportar e excluir estão no próprio app (Configurações → Avançado). Para o resto, escreva para [email protected].
• Reclamação: você pode procurar a autoridade britânica (ico.org.uk) ou a autoridade do seu país. Preferimos ter a chance de resolver antes.

Este resumo não cria nem retira direitos. Havendo divergência, vale a versão completa em inglês.

Sintesi dell’informativa sulla privacy (italiano)

Sintesi informativa. Fa fede la versione integrale qui sopra, redatta in inglese.

• Titolare del trattamento: Feya Labs Ltd, società registrata in Inghilterra e Galles con il numero 17267727, sede legale 71-75 Shelton Street, Covent Garden, Londra WC2H 9JQ. Contatto [email protected].
• Dati raccolti: account (indirizzo email, nome visualizzato, avatar, @nome facoltativo), dati di studio (video aggiunti, durata, velocità, passaggi in loop), file che carichi tu stesso nel cloud (Pro), messaggi inviati dal modulo di feedback, l’eventuale codice del partner se sei arrivato da un link di segnalazione, registri tecnici e di sicurezza (indirizzo IP troncato).
• Finalità e basi giuridiche: esecuzione del contratto (art. 6.1.b) per fornire il servizio, legittimo interesse (art. 6.1.f) per sicurezza, prevenzione degli abusi, personalizzazione della schermata iniziale e gestione del tuo feedback, obbligo di legge (art. 6.1.c) e consenso (art. 6.1.a) per tutto ciò che è dichiaratamente facoltativo. Puoi opporti in qualsiasi momento al trattamento basato sul legittimo interesse.
• Destinatari: Google (Firebase, accesso e database), Cloudflare (hosting e archiviazione dei file), Stripe e Onelink (pagamenti, solo per Pro), Resend (invio delle email) e Replicate (solo il file audio che invii per separare le tracce). Alcuni di questi fornitori si trovano negli Stati Uniti e i trasferimenti si basano sulle garanzie descritte nella versione integrale.
• Conservazione: i dati di studio e della libreria restano finché l’account è attivo, i messaggi di feedback dodici mesi. Eliminando l’account vengono cancellati sessioni, totali, video, profilo e collegamenti.
• Cosa non facciamo: non vendiamo i tuoi dati e non usiamo pubblicità né tracciatori pubblicitari.
• I tuoi diritti: accesso, rettifica, cancellazione, portabilità, limitazione e opposizione. Esportazione ed eliminazione sono disponibili nell’app (Impostazioni → Avanzate). Per il resto scrivi a [email protected].
• Reclamo: puoi rivolgerti all’autorità britannica (ico.org.uk) oppure all’autorità del tuo paese, in Italia il Garante per la protezione dei dati personali. Preferiremmo però poter risolvere prima noi.

Questa sintesi non aggiunge né toglie diritti. In caso di difformità prevale la versione integrale in inglese.