Privacy
Effective date: October 28, 2026
Last updated: October 28, 2026
This policy explains what data Sound Patch collects, how we use it, who we share it with, and the choices you have. It covers the website at thesoundpatch.com and the app at app.thesoundpatch.com (together, "Sound Patch" or the "Service").
1. Who we are
Sound Patch is run by Melvin Darrell, a sole proprietor based in Georgia, USA. For users in the European Economic Area and the United Kingdom, Melvin Darrell is the data controller.
Questions: mel@melvindarrell.com
2. What we collect
Your account. You sign up with an email address and password, or with Google. We store your email address, display name, a user ID and the date you joined.
Onboarding answers. When you start, we ask a few optional questions (a song you love, your role in music, the genres you make, your goals). We use these to tailor the app and to understand who Sound Patch serves.
Payments. Payments are processed by Stripe, which collects your card details directly. We never see or store your full card number. We store your Stripe customer and subscription IDs, plan, price, currency, status, renewal date and cancellation status so we can manage your membership.
What you create. Sound Patch is built around your own notes about recorded music: written analyses, chord charts in number notation, arrangement timelines, saved rhythms, quick captures, reflections, and the tags and patterns made from them. We store these so the Service works. They are private to you.
We don't collect audio. There is no upload, no file storage, no stem separation and no audio analysis anywhere in the Service. Sound Patch never receives a recording.
Bug reports. If you send a bug report from Settings, we store what you write plus the page you were on, your browser type, screen size, language and the last error the app recorded, so we can fix the problem.
Website visits. The app itself doesn't use third-party analytics. Our hosting provider gives us basic visitor statistics for the website, such as page views, traffic sources, device type and country.
Support. If you email us, we keep the conversation and anything you choose to send.
3. How we use your data
- To run the Service: your account, storing your work, finding your patterns (legal basis: our contract with you)
- To power AI features: pattern extraction, Style Profiles and idea generation, as described in section 4 (contract)
- To process payments and manage memberships (contract; legal obligation for tax and accounting records)
- To send service messages: receipts, security notices, important changes (contract; legitimate interests)
- To send product updates: you can opt out at any time (consent, or legitimate interests where allowed for existing customers)
- To improve Sound Patch: using onboarding answers, bug reports and overall usage patterns (legitimate interests)
- To keep the Service secure: preventing fraud, abuse and unauthorized access (legitimate interests; legal obligation)
- To comply with the law (legal obligation)
We don't sell your personal data, and we don't use what you create for advertising.
4. AI processing
Sound Patch uses AI to read the notes you write and turn them into patterns, Style Profiles and ideas.
When you use one of those features, the relevant content (your written notes, the song titles and artists you entered, and counts the app calculated) is sent to our AI provider, the Lovable AI Gateway, which runs it on Google's Gemini models to create a response for you. It's sent only when you use a feature that needs it.
Your content is not used to train AI models. We don't use it to train any model, and Lovable states that the data of people using apps built on its platform is not used to train its models.
What's never sent: audio (none exists) and payment details.
AI limits. AI features have daily limits per account, described in our Terms.
5. Sharing
We don't sell your personal data. We share it only:
- With service providers who run Sound Patch for us: Lovable (app and website hosting, and the AI Gateway), Supabase (database and sign-in, through Lovable Cloud), Google (AI models, through the Lovable AI Gateway, and Google sign-in if you choose it), and Stripe (payments). Account emails such as sign-up confirmation and password resets are sent through our sign-in provider. These providers may only use your data to provide their services to us.
- When the law requires it, or to protect the rights, safety or property of Sound Patch, our members or others.
- In a business transfer: if Sound Patch is part of a merger, acquisition or sale of assets, your data may transfer with it. We'll tell you about any change in ownership or in how your data is handled.
6. Where your data is stored
Your data is stored and processed by our service providers, which may be located in the United States, the European Union or other countries. If you're in the EEA or UK, your data may be processed outside your region. Where that happens, we rely on our providers' standard safeguards for international transfers, such as Standard Contractual Clauses.
7. How long we keep data
We keep your data while your account exists.
- Deleted analyses go to your Trash, where you can restore them or delete them forever. After 30 days, they're permanently deleted.
- Deleting your account: email mel@melvindarrell.com and we'll delete your account and its data within 30 days. Copies may remain in routine backups for a limited time before they're overwritten.
- If your membership ends, your data stays so you can keep reading it. Ending a membership doesn't delete anything.
We may keep limited records longer when the law requires it, like billing records for tax purposes, or to resolve disputes.
8. Your rights
Depending on where you live, you may have the right to:
- Access the data we hold about you
- Correct data that's wrong
- Delete your account and its data
- Get a copy of the data you've given us in a portable format
- Object to or limit some processing, including direct marketing
- Withdraw consent at any time where we rely on it
To use any of these rights, email mel@melvindarrell.com. We'll reply within 30 days, or sooner if the law requires. We may need to confirm your identity first.
EEA and UK: you can also complain to your local data protection authority. In the UK, that's the Information Commissioner's Office.
California: you have the right to know, delete, correct and get a copy of your personal information, and not to be treated differently for using these rights. We don't sell or share your personal information for advertising.
9. Security
Your data is held in a database where access is locked to each account: every record can only be read by the account that created it, enforced by the database itself, not just the app. Signed-out visitors can't reach member data. Our infrastructure providers encrypt data in transit and at rest.
No system is perfectly secure. Use a strong, unique password, and email mel@melvindarrell.com right away if you think someone has accessed your account.
10. Children
Sound Patch isn't meant for children and can't be used by anyone under 16, or the age of digital consent where you live if that is higher. We don't knowingly collect data from children. If you believe a child has given us personal data, contact us and we'll delete it.
11. Cookies and similar storage
The app uses your browser's local storage to keep you signed in and to remember your theme. These are needed for the app to work. We don't use advertising cookies or tracking pixels. The website loads fonts from Google Fonts, which means your browser connects to Google to download them. If we ever add analytics or advertising cookies, we'll update this policy first and ask for consent where the law requires it.
12. Changes
We may update this policy. If the changes are important, we'll tell you in the app or by email. The "Last updated" date above always shows the current version.
13. Contact
Melvin Darrell