Privacy policy Updated on 2026-10-06

Lalatone is operated by Rapid Solutions Software, in Brazil. This policy explains what we collect, why, and your rights under Brazil's LGPD (Law 13,709/2018) and, for users outside Brazil, under the GDPR and equivalent laws.

What we collect

• Account: e-mail and password (stored as a hash). Chosen language. Plan and validity dates.
• Sign in with Google: if you choose to sign in with your Google account, we receive from Google only your e-mail, name and an account identifier, to create or link your Lalatone account. We do not access contacts, calendar or files and never post on your behalf. You can revoke access at any time at myaccount.google.com/permissions.
• E-mails: we only send service messages: welcome, song ready, payment receipt, expiry reminder and password reset link. No marketing without your consent.
• Usage: which songs you sang and when, your scores, and an anonymous cookie identifier to count the daily limit for people without an account.
• Voice: the microphone is processed in your browser. Audio is only sent to the server when you are a subscriber and finish a song with analysis enabled; the recording stays in your account until you delete it.
• Payments: handled by Stripe or Mercado Pago, which receive the card data. We keep only the charge identifier, amount, method and status, as required by tax law.
• YouTube links: the address of the video you paste, its title and duration, to prepare the guide melody.
• Technical: IP address and browser in server logs, for up to 30 days, for security.

Cookies and third parties

• Session (login), language and daily-limit cookies. None of them is used to track you on other sites.
• Videos play in the official YouTube player, which sets its own cookies under Google's policy.
• For non-subscribers we show Google AdSense ads (website) or AdMob ads (app). Google may use cookies to personalize ads; you can turn personalization off at adssettings.google.com. In the EU and UK we ask for your consent first.
• Visit statistics: we use Google Analytics to learn how many people visit, from which country, which pages and where they came from. The IP is anonymized and, until you click "Got it" on the cookie notice, nothing is stored in cookies (Google only receives counts without identification). You can block Analytics with Google's official opt-out.
• Fonts are loaded from Google Fonts.

How long

As long as the account exists. When you delete the account we erase scores, recordings and analyses and anonymize the e-mail; payment records are kept for the tax retention period (5 years).

Your rights

You can access, correct, export or erase your data at any time under My account, or by writing to marcio@rapidsolutions.software. We answer within 15 days. You may also complain to the ANPD (Brazil) or to your country's authority.

Children

The service is for people aged 13 and over. We do not knowingly collect children's data; if you know of such an account, tell us and we remove it.

Changes

If this policy changes in a relevant way, we notify you by e-mail and on this page. Contact: marcio@rapidsolutions.software.