Privacy Policy

Auvita for Mac and Windows · Auvita for iPhone · Auvita cloud services

Effective date: 11 October 2026

The short version

• The Auvita desktop app works locally. Your songs, projects, renders, settings and the database stay on your computer. You don't need an account to use it.
• YouTube: if you connect a channel, the Auvita desktop app asks Google only for permission to upload videos. Your YouTube sign-in token is stored only on your computer and is never sent to us. The Auvita desktop app uploads only videos you approve.
• Your own API keys: if you add keys for AI providers (fal.ai, Anthropic, ElevenLabs, kie.ai), the app sends your prompts directly from your computer to that provider. We don't receive them.
• Auvita account (optional on desktop, required for AI on iOS): to run your account we keep your user ID, email, token balance, plan, token history, generation records, feedback, and purchase records from Apple or Stripe.
• No ads, no analytics SDKs, no tracking across apps or websites, and we don't sell your data.
• You can delete your Auvita account and its server data at any time inside the app.

Contents

1. Who we are
2. Data that stays on your device
3. YouTube and Google user data
4. AI providers you connect with your own keys
5. Data we process (Auvita account and cloud)
6. How and why we use it
7. Auvita Cloud AI generation and fal.ai
8. Service providers
9. International transfers
10. Retention and deletion
11. Security
12. Your rights
13. Turkey: KVKK information notice
14. Children
15. Changes
16. Contact

1. Who we are

This policy covers:

• Auvita for Mac and Windows, a desktop app that creates music videos, optionally generates songs, cover art and metadata with AI, and uploads approved videos to YouTube. It also includes optional browser extensions;
• Auvita for iPhone, an iPhone app for making music visualizer videos;
• Auvita cloud services: the optional account, token balance, purchases and hosted AI generation used by both apps (together, "Auvita" or the "Services").

The Services are operated by Auvita ("we", "us"). We are the data controller for the personal data described in sections 5 to 7. You can reach us at info@auvita.app.

2. Data that stays on your device

Auvita desktop (Mac and Windows)

The following is stored only on your computer and is not sent to us: the music, images and videos you add or create, your projects and settings (including any API keys you enter), your upload history, and your YouTube and Auvita sign-in.

The desktop app has no analytics, tracking or crash reporting, and it sets no cookies. The browser extensions only work with the app on your own computer; when you ask, the Suno extension fills in forms on suno.com in your own browser. Your use of Suno is governed by Suno's terms.

Uninstalling the app may not remove its data folder; you can delete that folder yourself.

Auvita for iPhone

Audio you import, its analysis, your projects, visual settings, exported videos, photos you pick as backgrounds (the app reads only the photos you select) and app preferences stay on your iPhone. They are included in device backups according to your iOS settings. If you choose to use an AI-generated file, the app downloads it to your device (see section 7).

3. YouTube and Google user data

The Auvita desktop app uses the YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy.

What we request. When you connect a channel, Google asks you for one permission: to upload videos to your channel. The Auvita desktop app does not request access to your analytics, comments, subscribers, playlists, Gmail, Drive or any other Google data.

How the app uses it. The app uses this permission only to:

• upload a video after you approve it in the app (or on a schedule you set up), with the title, description, tags, category and privacy status you chose (default: private);
• set the video's thumbnail to the cover image you approved;
• where Google allows it, show the name of the connected channel.

Every upload is labelled as containing altered or synthetic content and as not made for kids. You can change these settings later in YouTube Studio.

Where it is stored. Your YouTube sign-in is saved only on your computer. Videos and their details go directly from your computer to Google. We never receive your YouTube tokens, your videos or any data from your Google account, and we don't store them on any server.

Sharing. We do not sell, transfer or disclose Google user data to anyone. We do not use it for advertising, and we don't use it to develop, improve or train AI or machine-learning models.

Disconnecting. You can revoke Auvita's access at any time at myaccount.google.com/permissions. Videos you already uploaded stay on YouTube until you delete them there.

Limited Use. Auvita's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google sign-in for your Auvita account is separate. If you choose "Sign in with Google", we receive your Google account's name and email address only to create and sign in to your Auvita account (section 5).

4. AI providers you connect with your own keys

The Auvita desktop app lets you use AI services under your own account and API key:

These requests go directly from your computer to the provider. We don't receive them, and the provider's own terms and privacy policy govern them, under your account with that provider. Any costs are billed by the provider to you. Cost figures shown in the app are estimates. Please don't put personal or confidential information in prompts.

5. Data we process (Auvita account and cloud)

This applies only if you create or sign in to an Auvita account, in either app.

We don't collect your contacts, location, microphone recordings or advertising identifier, and we don't use analytics or advertising SDKs.

6. How and why we use it

• To provide the Services: create and secure your account, keep your token balance, deliver purchases and subscriptions, run cloud AI generations and show you the results. Legal basis: performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
• To prevent fraud and abuse: verify Apple and Stripe transactions, handle refunds and chargebacks, stop free-token farming (for example by remembering that an account ID was deleted), rate-limit requests, moderate cloud generation prompts, and check app integrity. Legal basis: legitimate interest in a secure, fair service (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).
• To fix bugs, using iOS crash reports and server error logs. Legitimate interest.
• To answer feedback and support requests. Contract and legitimate interest.
• To comply with law, such as tax, accounting and consumer rules and lawful requests. Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)).
• To send service emails: verification and password reset, through Firebase Authentication. We don't send marketing emails.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Automatic prompt moderation can only reject a generation request; it refunds any reserved tokens.

7. Auvita Cloud AI generation and fal.ai

When you generate with Auvita tokens (not your own keys), our backend sends your prompt (and lyrics, duration or aspect ratio, if any) to fal.ai, which runs the model and returns the result. Some models are developed by third parties (for example Google, OpenAI, MiniMax, ElevenLabs or Black Forest Labs), and fal.ai may pass your prompt to that model's developer to produce the result.

Generated files are currently hosted on fal.ai's content delivery network. The links can't be guessed, but anyone who has a link can open the file. fal.ai's own terms govern how long it keeps files and prompts. When you delete your Auvita account, we delete our records of your generations, but we may not be able to delete files or prompts held by fal.ai. Copies you saved to your device stay there.

8. Service providers

We share data only with providers that help us run the Services, under terms that limit their use of it:

• Google LLC / Google Cloud (Firebase): sign-in, our database (stored in Europe) and crash reports.
• Cloudflare, Inc.: hosts our servers and website.
• fal.ai: runs cloud AI models and hosts their results.
• Apple Inc.: Sign in with Apple and App Store payments.
• Stripe, Inc. / Stripe Payments Europe Ltd.: payments, subscriptions, invoices and the billing portal for desktop and web purchases. Stripe processes payment data as an independent controller under its own privacy policy.

Google's YouTube API and the AI providers in section 4 receive data from your computer, under your own account with them. They are not our processors.

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a merger or sale of the business (this policy continues to apply). We don't sell personal data or share it for cross-context behavioural advertising.

9. International transfers

Our database is in Europe, but some providers (Google, Cloudflare, fal.ai, Apple, Stripe) process data in the United States and other countries. Where data leaves the EEA, UK or Turkey, we rely on appropriate safeguards. These include the European Commission's Standard Contractual Clauses, or the EU–US Data Privacy Framework where the provider is certified. For transfers from Turkey we use the appropriate safeguards set out in KVKK Article 9, primarily the standard contracts published by the Personal Data Protection Board, notified to the Board as the law requires.

10. Retention and deletion

Deleting your Auvita account (Account › Delete account, in either app) permanently deletes from our systems your user record, token balance and plan, token history, generation records, feedback and rate-limit counters, and your Firebase Authentication account.

We keep after deletion:

• purchase records (Apple transaction records, and Stripe payment records in Stripe), marked as belonging to a deleted account, to handle refunds, prevent double redemption and meet accounting obligations, for 10 years from the end of the year of the transaction (the retention period under Turkish commercial and tax law);
• a deletion marker containing only your former user ID and the deletion time, so free starter tokens aren't granted again.

Deleting an account does not cancel a subscription. Cancel it in iOS Settings › Apple ID › Subscriptions (Apple) or in the billing portal (Stripe). Server logs and Crashlytics reports are kept for limited periods set by Cloudflare and Google (Crashlytics: currently about 90 days). Otherwise we keep account data while your account exists.

Desktop data stays on your computer until you delete it. To remove everything, uninstall the app, delete its data folder, and revoke YouTube access as described in section 3.

11. Security

All connections are encrypted, you can only access your own account data, and purchases are verified with Apple and Stripe. API keys you enter in the desktop app are saved on your computer without extra encryption, so keep your computer secure and revoke a key with its provider if you think it was exposed. No system is perfectly secure; we'll notify you and the authorities of a breach where the law requires.

12. Your rights

Depending on where you live, you have the right to access your data and get a copy of it, to correct it and to delete it. You can also restrict or object to processing (including processing based on legitimate interests), ask for data portability, and withdraw consent. You can delete your account in the app at any time. For anything else, email info@auvita.app. We may need to verify the request, and we'll reply within one month (GDPR) or 30 days (KVKK). You can complain to a data protection authority, in particular in the EU country where you live or work, or to the Turkish Personal Data Protection Authority.

California residents: we don't sell or "share" personal information as defined in the CCPA/CPRA, and you have the rights to know, delete and correct described above.

13. Turkey: KVKK information notice

This is our information notice (aydınlatma metni) under Article 10 of Law No. 6698.

• Data controller: Auvita, info@auvita.app. Under the Personal Data Protection Board's exemption criteria, we are not currently required to register with the Data Controllers' Registry (VERBİS).
• Data and purposes: sections 5 and 6.
• Collection method and legal grounds: collected electronically through the apps and backend, based on Art. 5(2)(c) (contract), (ç) (legal obligation) and (f) (legitimate interest).
• Recipients: the providers in section 8 and public authorities where legally required. Transfers abroad are made under Art. 9 (section 9).
• Your rights under Art. 11: to learn whether your data is processed, and request information about it; to learn the purpose and whether the data is used for it; to know the recipients in Turkey or abroad; to request correction, or deletion or destruction under Art. 7, and to have this notified to third parties; to object to a result against you arising solely from automated analysis; and to claim compensation for unlawful processing.
• How to apply: by email to info@auvita.app from the email address registered with your account, or by registered electronic mail (KEP) or a secure electronic signature, as permitted by the Communiqué on the Procedures and Principles of Application to the Data Controller. We'll respond free of charge within 30 days.

14. Children

The Services are not directed at children. You must be at least 13 years old (or older if your country requires it, for example 16 in some EEA countries) to create an account or connect a YouTube channel. Videos uploaded by the Auvita desktop app are marked as not made for kids. If you believe a child has created an account, contact us and we will delete it.

15. Changes

We may update this policy, for example when we add a feature or a provider. We'll change the effective date and, for material changes, tell you in the app before they take effect. Earlier versions are available in this repository's history.

16. Contact

Auvita · info@auvita.app · auvita.app