Your data

Your data

What SingKey knows about you

Short version: your voice never leaves your phone. Everything else stays only on this device, unless you choose to create an account.

An account is optional

By default, SingKey still has no sign-up, no sign-in and no password, exactly as described below — nothing follows you to another phone, and there is nothing to recover if you lose this one.

An account is there if you want it: your voice measurements, your songs and your Sunday list can follow you to another phone or browser. It needs only an email address and a password, and creating one is always your choice — SingKey never asks before you tap to start.

One limitation, stated up front because it is a real one: nobody can email you a password reset here. If you forget your password and cannot reach whoever runs this SingKey, that account cannot be recovered — though this phone keeps every song and measurement it already had, and keeps working exactly as it does today.

Your voice stays on your phone

When you sing, the sound is analysed in your browser, on this device — the recording itself never leaves it, account or not.

What SingKey works out from your voice while you sing — the live picture on screen — stays on this device too. If you have an account, a short summary of a take you kept (the notes it found, not the sound) can follow you to another phone, the same way the rest of your account does. Section “What is stored, and where” says exactly what that summary is.

Recordings you choose to save are stored in this browser and nowhere else. They are never uploaded — not to SingKey, not to anyone, account or not.

The microphone is only ever opened at the moment you tap to sing, and it is released the moment you stop or leave the screen.

What is stored, and where

With no account: the singers on this device, the songs you add, the keys you chose, what you have practised and your Sunday running order are kept in this browser’s own storage. Clearing your browser data for this site deletes all of it, and so does the delete button in Settings.

With an account: that same list — your voice measurements, the singers you have added, the songs you have typed in, which key you settled on for each one and how it went, your Sunday and next-Sunday running order, songs you have put away, the character you picked, and small preferences like which key names you prefer — is also kept on SingKey’s server, so it can follow you to another phone. It is yours alone; SingKey never shows it to, or shares it with, anyone else’s account.

That server-side copy lives in a Postgres database. SingKey’s database provider is Neon; SingKey itself is hosted on Vercel.

Saved recordings are never part of that server copy, with or without an account — they stay only in this browser’s own storage, because audio is larger and, unlike the notes SingKey measures from it, is not something the product needs to move between your phones.

An account, in plain terms

Creating an account needs an email address and a password. Your password is never kept as you typed it — only a scrambled, one-way version that cannot be turned back into your password, with a random ingredient unique to your account so two people who happen to choose the same password do not end up with the same stored value. SingKey can check a password against this; it can never read one back out.

Signing in keeps you signed in with one small, protected cookie on your device. You can end that on just this device, or end it on every device you have ever signed in on, in one tap.

Deleting your account deletes everything it was keeping for you on SingKey’s server, straight away. What is already on this phone stays until you also choose to delete it here, exactly like the delete button described above.

What leaves this device, and when

The guided walk can speak its instructions out loud. When it does, your browser asks SingKey’s server for one step of one exercise — by name, not by text — and gets back the spoken audio. The lines it speaks are SingKey’s own, written in advance; your voice, your recordings, your songs and your measurements are never part of that request.

If you have an account, the data listed under “What is stored, and where” also leaves this device, to reach SingKey’s server so it can follow you to another phone. Your recordings do not — see above.

With no account, that does not apply: nothing else on any screen sends anything anywhere.

YouTube, when you ask for it

A song or a Sunday playlist can carry a YouTube link. SingKey shows YouTube’s own player for it, from their privacy-preserving address, and only after you tap play.

Opening a screen with a link on it sends nothing to Google. Pressing play does, on YouTube’s terms, the same as opening YouTube yourself.

SingKey downloads nothing from YouTube and reads nothing back — it cannot even see what a playlist contains.

No tracking, no adverts

There is no analytics, no tracking pixel and no advertising in SingKey, and nothing here is ever used to watch what you do.

The only cookie SingKey can ever set is the one that keeps you signed in, and only once you choose to create an account — it carries nothing but a random code your account recognises, nothing that identifies you by itself, and it does nothing until you sign in.

Nobody is counting how often you open SingKey or which songs you sing.

Songs you add are yours

Words and chords you type or paste in stay on this device. If you have an account, they are kept on SingKey’s server too, exactly like the rest of your account’s data — but only for you: SingKey never publishes them, shares them, or sends them to another singer’s phone or account.

When you paste a link, SingKey reads that page for you and keeps what it found as your copy. It checks the site’s robots.txt first and stays away from pages the site asks automated readers not to open.

What you add or import is your copy, for your use. Please make sure you are entitled to the words and chords you bring, because SingKey has no way of knowing.

This is not a contract

Everything above describes what the app actually does, checked against how it is built. It is not a legal agreement, and it has not been written or reviewed by a lawyer — that is true whether or not this version of SingKey holds anything on a server. If you need a legal agreement, that is a separate document someone qualified has to write.