Privacy
What Octava collects, why it collects it, and who else sees it. Written to be read, not to be survived.
Last updated 21 September 2026
What we collect
Three kinds of data, and nothing else:
Your account: the email address you sign up with, or the account identifier your Google or Apple sign-in returns. If you set a display name or profile picture, those too.
What you make: the prompts you write, the lyrics generated from them, the audio and artwork produced, and whether you chose to keep a song private or publish it.
How the app behaves: crash reports and error traces. These are technical, and we ask them not to carry the contents of your songs.
What we do not collect
We do not sell your data. We do not buy advertising profiles about you. We do not read your private songs to train a model, and we do not hand them to anyone who would.
Payment card numbers never reach us. Purchases go through Apple and Google, who tell us only that a purchase succeeded and what it was for.
Who processes it
Octava is built on services that each see one part of the picture:
Supabase holds your account and the database rows describing your songs.
fal.ai runs the generation. Your prompt and lyrics are sent there to produce audio and artwork. They are processed to fulfil your request, not to build a profile of you.
Cloudflare R2 stores the audio files and cover images, and Cloudflare serves this website.
Sentry receives crash and error reports.
Apple and Google handle purchases and, if you allow them, push notifications.
Private songs stay private
A new song is private by default. Only you can play it, edit it or download it. Private audio and artwork are served through short-lived signed links, so a URL that leaks stops working rather than staying open forever.
When you publish a song you are choosing to make it public: it can appear in Flow, in Explore and on your creator profile, and other people can play it and remix it. Publishing is reversible for future discovery, but a copy someone already downloaded is out of our reach, which is true of anything on the internet.
How long we keep it
Your songs stay until you delete them or delete your account. Deleting a song removes its database row and its files from storage. Crash reports age out on Sentry’s own retention schedule.
Deleting your account removes your profile, your songs and your files. Records we are required to keep for tax or fraud purposes, such as the fact that a purchase happened, are kept for as long as the law requires and no longer.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can withdraw consent for push notifications at any time from your device settings, and the app keeps working without them.
If you are in the EU or the UK, the GDPR rights apply to you in full. Write to us and we will answer.
Children
Octava is not intended for children under 13, and we do not knowingly create accounts for them. If you believe a child has an account here, contact us and we will remove it.
Changes
If this policy changes in a way that affects what we do with your data, we will say so in the app before the change takes effect rather than quietly updating the date at the top.