Privacy Policy

Last updated: May 20, 2026

Your privacy matters. This policy explains what data Safi collects, how we use it, who we share it with, and how long we keep it. Safi is operated by Akili Tech.

1. Data We Collect

  • Account information — email address, display name (optional), and authentication identifiers from Google or Apple if you sign in via OAuth.
  • Content you submit for analysis — song lyrics, melody notes, voice notes, style tags, and (when you choose to upload one) uploaded audio files.
  • Analysis reports — the structured similarity assessment we generate from your submitted content.
  • Billing information — handled entirely by Stripe. We receive a customer ID and subscription status; we never see or store your card details.
  • Usage data — counts of analyses run, timestamps, and basic technical logs for service operation.

2. Audio Retention — How It Works

Uploaded audio files are deleted immediately after analysis. Fingerprint data and analysis results are retained as part of your report history so you can revisit them. We do not store your audio, and we do not use your music to train any AI model.

3. How We Use Your Data

  • To run analyses and deliver reports to you.
  • To improve accuracy of our matching and citation verification.
  • To process payments and manage your subscription.
  • To send transactional emails (password reset, payment failures, account notifications).
  • To diagnose technical issues and prevent abuse.

We do not sell your personal data. We do not share your content with third parties for marketing.

4. Third-Party Processors

Safi is built on a small set of trusted infrastructure providers. Each processes a specific category of data on our behalf:

ProviderPurposeData shared
Anthropic (Claude)AI analysis of lyrics, melody, structure, voiceSubmitted song content (no account identifiers)
StripePayment processing, subscriptions, invoicingEmail, customer ID, billing details
Supabase (Postgres)Application database (accounts, reports, usage)Account info, analysis reports, usage records
FirebaseAuthentication (Google/Apple OAuth)Email, OAuth identifier
ResendTransactional email deliveryEmail address, message content
RailwayApplication hostingStandard server logs (IP, request timing)
AudD & music databasesAudio fingerprint match against commercial catalogsAudio file URL (when you upload one)

5. Data Retention

  • Audio files — deleted immediately after analysis.
  • Analysis reports & account data — retained while your account is active.
  • Payment records — retained by Stripe per their policies and applicable financial regulations.
  • Account deletion — you may request deletion of your account at any time; we will remove your reports and account record within 30 days.

6. Cookies & Local Storage

We use first-party cookies to keep you signed in (NextAuth session). We do not use third-party advertising cookies or cross-site tracking. We may use first-party analytics to understand basic usage patterns; we do not enrich this data with personal identifiers.

7. Your Rights

You have the right to access, correct, export, or delete your personal data. You can manage account information from your account page or contact us to make these requests. Residents of jurisdictions with specific data-protection laws (GDPR, CCPA, etc.) have additional rights as defined by those laws.

8. Security

Data is transmitted over HTTPS and stored on infrastructure that maintains industry-standard security controls. No system is fully secure; we recommend using a unique password and enabling two-factor authentication on your linked Google or Apple account.

9. Children

Safi is not intended for users under 13 (or under 16 in jurisdictions where applicable). We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy as our practices evolve. Material changes will be communicated by email and reflected by the “Last updated” date above.

11. Contact

Questions about privacy or data requests: support@akilitech.io


← Back to Safi