What it collects
Type Studio sees only the data you hand it. No analytics SDKs, no Google Analytics, no Segment, no pixels. The backend runs on Google Cloud Run, which keeps standard infrastructure logs (IP, user-agent, HTTP status) used only to debug outages.
Sign-in runs through Supabase Auth with email and password. Supabase stores the session record. Song search runs server-side against Last.fm, so only the song and artist text you type leaves the backend.
Your work is saved per account: analyze results as JSON, generated audio in Cloud Storage, and run metadata in Firestore so runs resume across devices. If you upload your own audio, its embedded tags (artist, title, ISRC) are stripped before it is stored or analyzed.
Who gets your data
Every external call comes from the backend, not your phone. Google Vertex AI runs Gemini (analysis) and Lyria (music), so prompts and your seed song go there. The deep-research dossier uses Gemini with Google Search, so search queries about the song reach Google Search, carrying the topic, not your identity or IP. Last.fm, MusicBrainz, and iTunes receive only song and artist names. Apple and RevenueCat handle the Type Pro subscription and receive a pseudonymous account id and purchase events, not prompts or audio. No provider receives your password.
What it generates
Audio. Prompt to Song and the Song to Prompt Loop run Lyria. Generated output belongs to you, is stored under your account, and is never used to train any model.
Subscriptions
First two generations are free. Type Pro is 9.99 US dollars per month through Apple's App Store. Apple processes payment and RevenueCat confirms entitlement by signed webhook. Type Studio never sees your card.
What it doesn't do
No data sold, no advertising, no training on your data or output. Google Vertex AI's enterprise terms state that data submitted through Vertex is not used to train Google's models.
Where your data is processed
The backend runs on Google Cloud (Cloud Run and Vertex AI) in the United States. The providers it calls process requests on their own infrastructure, in the US or elsewhere. If you use the app from the European Economic Area, the UK, or another region with cross-border transfer rules, your data is transferred to and processed in the United States under each provider's standard contractual clauses (or equivalent transfer mechanism).
Cookies and storage
No cookies. The session token is kept on-device in the iOS Keychain or Android Keystore. Clearing the app or signing out removes it.
Retention
Results and renders stay until you delete them. Failed analyze partials auto-clean after an hour. Deleting a run removes its audio, JSON, and Firestore documents. A full wipe removes everything keyed to your account.
Your rights
Canada (PIPEDA), EU and UK (GDPR), and California (CCPA) rights apply: access, correction, deletion, portability. No data is sold. To exercise them, email m@typeaistudio.com from your sign-in address.
Children
Not directed at children. No knowing collection from anyone under 13, or under 16 in the European Economic Area.
Changes
Material changes update the date above and are flagged in the app at least a week before they take effect.
Questions, export, or deletion: m@typeaistudio.com. See the terms of use and support.