The short version
Lyric Lock is a personal practice tool. We collect the minimum we need to run it, we never sell your data, and we don't show ads. Your songs and practice history are for your eyes.
What we collect
- Account info — your email address, your name (optional), and a securely hashed password.
- Song content — the songs you add: title, artist, lyrics, section structure, and any backing track audio you upload.
- Practice data — the accuracy of your drills, mastery scores, streaks, XP, achievements, and the words the app has learned you tend to miss.
- Mic recordings — when you use "Sing It" mode, your short recording is sent to our AI transcription provider so the app can grade it, then discarded. We do not store the audio on our servers.
- Basic technical logs — standard server logs (IP, timestamp, error info) kept briefly for reliability and abuse prevention.
How we use it
- Show your songs back to you and power the practice modes.
- Track progress so spaced repetition schedules the right song at the right time.
- Generate hints, memory maps, and voice grading through AI providers.
- Keep the service stable and safe.
Who we share it with
We share small, purpose-limited pieces of content with a few trusted providers so specific features can work:
- Google Gemini — text of a section (and your list of tricky words) when you request an AI hint or Memory Map analysis.
- OpenAI Whisper — the short mic recording when you use "Sing It", to transcribe what you sang.
- LRCLIB — the search terms you type when looking up lyrics; nothing about your account is sent.
- Our hosting provider — to run the servers and store the database.
We do not sell your personal information to anyone, ever.
Cookies
We use a single essential cookie called ll_token to keep you signed in. It's HTTP-only, secure, and only sent to Lyric Lock. We do not use tracking or advertising cookies.
Your choices
- Sign out any time from the header — the sign-in cookie is cleared.
- Delete a song and it's gone from your library along with its practice history.
- Ask us to delete your account and all associated data by contacting us through the channel on the home page. We'll do it as soon as reasonably possible.
Security
Passwords are hashed with bcrypt. Traffic is encrypted in transit. We follow standard practices to keep your data safe, but no service is perfectly secure. If something goes wrong, we'll let affected users know.
Children
Lyric Lock is not intended for children under 13. If we learn we've collected data from someone under 13, we'll delete it.
Changes
If we update this policy, the "Last updated" date at the top will change and we'll highlight material changes in the app.
Contact
For privacy questions or a data request, reach us through the contact channel on the home page.