Privacy Policy

Larka AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website at larka-music.com (the "Website") or use the Larka AI mobile application (the "App"). By using the Website or App, you agree to the practices described here.

For users in the European Economic Area, the United Kingdom, and other jurisdictions with similar laws, the data controller is Larka AI. You can reach us at the contact details in Section 11.

Email address

When you join our waitlist or send a message via the contact form, you voluntarily provide your email address. The contact form additionally collects your name and the message content.

IP address & request metadata

When you load any page or submit a form, our hosting provider (Vercel) automatically logs your IP address, request timestamp, user agent, and the URL you requested. We use a short-lived hash of your IP for rate limiting (to prevent form abuse) via Upstash Redis; rate-limit counters expire within one hour.

Cookies & tracking

We do not use cookies, pixels, or analytics scripts on the Website. We do not run Google Analytics, Meta Pixel, or any third-party tracking tools. No consent banner is shown because we have no non-essential cookies to disclose.

Audio & Microphone Data

When you use features such as chord detection, the voice recorder, or the listen mode, the App accesses your device's microphone. Audio is processed locally on your device or transiently on our servers solely to provide the requested feature. We do not store or share your raw audio recordings.

User-Generated Content

Content you create within the App — including lyrics, song notes, and titles — is stored locally on your device. If you use AI generation features, your input (e.g., lyrics, key, genre) is transmitted to third-party AI services (see Section 6) to generate the result.

Usage Data

We may collect anonymized, aggregated usage data (e.g., which features are used most often) to improve the App. This data cannot be used to identify you personally.

Subscription & Purchase Data

Subscription and payment information is handled entirely by Apple via the App Store. We do not have access to your payment details.

We use the information described above to:

— Provide and improve the Website and App

— Send you product updates, launch news, and the welcome email after you join the waitlist

— Respond to messages sent through the contact form

— Process AI generation requests (lyrics, songs, cover art) inside the App

— Prevent abuse (rate limiting, spam detection)

— Analyze anonymized usage patterns to enhance the user experience

Lawful basis (EU/UK users): consent (Article 6(1)(a) GDPR) for waitlist emails and marketing updates; contract performance (6(1)(b)) for responding to contact-form requests; legitimate interests (6(1)(f)) for fraud and abuse prevention and basic server logs.

We do not sell your personal data and we do not use it for automated decision-making or profiling.

Website

— Waitlist emails: retained until you unsubscribe or request deletion, or until 12 months after Larka publicly launches (whichever comes first).

— Contact form messages: retained until your inquiry is resolved plus up to 12 months for reference.

— Rate-limit counters (hashed IP): expire automatically within one hour.

— Vercel access logs: retained per Vercel's standard retention (typically up to 30 days).

App

Content you create (lyrics, notes, recordings) is stored locally on your device and remains under your control. You can delete it at any time by removing the App or clearing its data. Anonymized analytics data may be retained for up to 24 months.

We rely on a small number of vendors who process data on our behalf. Each vendor is bound by a Data Processing Agreement and either operates within the EU/EEA or transfers data under Standard Contractual Clauses.

Website

— Vercel Inc. (United States) — website hosting, deployment, and access logs. https://vercel.com/legal/privacy-policy

— Resend Inc. (United States) — email delivery, waitlist contact storage, and welcome/notification emails. https://resend.com/legal/privacy-policy

— Upstash, Inc. (United States / EU) — Redis-based rate limiting using short-lived hashed IP counters. https://upstash.com/trust/privacy.pdf

App

— Google Lyria / Google AI — for AI song generation. When you request a song, your lyrics and parameters are sent to Google's API.

— Apple App Store — for payment processing and subscription management.

We encourage you to review the privacy policies of these services.

Some of our sub-processors are located in the United States. When personal data is transferred outside the European Economic Area, the United Kingdom, or other jurisdictions with restrictions on cross-border transfers, we rely on the European Commission's Standard Contractual Clauses (or the UK equivalent) and the EU-U.S. Data Privacy Framework where the recipient is certified.

The App requests access to your microphone exclusively for chord detection, the voice recorder, and the listen/identify feature. Microphone access is only active while you are actively using one of these features. You can revoke microphone permission at any time in your device Settings > Larka AI.

The Website and App are not directed to children under the age of 13 (or under 16 in jurisdictions where that is the applicable threshold). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Depending on your location, you have the right to:

— Access the personal data we hold about you

— Rectify inaccurate or incomplete data

— Erase your data ("right to be forgotten")

— Restrict or object to certain processing

— Portability — receive your data in a machine-readable format

— Withdraw consent at any time, without affecting the lawfulness of prior processing

— Lodge a complaint with your local data protection authority

To exercise any of these rights, email us at the address in Section 11. We will respond within 30 days. To unsubscribe from waitlist emails, click the unsubscribe link in any email we send you, or reply with "Unsubscribe" in the subject.

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us at:

larka.ai.music@gmail.com

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page, and for material changes affecting waitlist subscribers, by sending an email. Continued use of the Website or App after changes constitutes acceptance of the updated policy.