MusicForge privacy policy
Version 2026-11-02 · Updated 2 November 2026
This policy covers MusicForge accounts, music and lyrics, cloud library, purchases and support. Other ForgeOS apps have their own purposes and data. MusicForge is for people aged 18 or over.
Operator and contact
MusicForge is operated by Nicklas Darnolf, using the ForgeOS name. Nicklas Darnolf is the controller for the personal data described in this policy.
Nicklas DarnolfKnektegårdsgatan 3B
441 37 Alingsås
Sweden
support@forgeyourlife.ai
Account and service data
We use your email, account ID, display or artist name, birth year, sign-in/session information and terms acceptance record to provide and protect your account and check age eligibility. Sign-in uses email/password or Google. Google sign-in provides identity information to our account service.
Your ideas, titles, lyrics, genre, mood, language, voice choices, generated audio, versions, favourites and creation dates are used to create, play, save, back up and restore songs. Drafts can also be stored on your device.
For Google Play purchases we use product and account references, purchase verification, subscription validity and credit transactions. Google processes payment; the app server does not receive your full card number through this flow. If you use a referral code, we record the code, linked accounts and reward events.
Why we process data
Account access, requested generation, library storage and purchase fulfilment are necessary to perform our contract with you (GDPR Article 6(1)(b)). Without the required account information we cannot provide these features.
Request and job IDs, status, timestamps, error and usage records, and network information help us investigate faults, secure accounts, prevent abuse and prevent duplicate purchase grants. These are our legitimate interests (Article 6(1)(f)); access and use must be limited to those purposes. You may object. Support uses the information you send to resolve your request under our contract or our legitimate interest in assisting you. Records required by law are processed to meet that obligation (Article 6(1)(c)).
Providers and AI processing
Supabase provides authentication, database records and the private cloud library. Authentication is shared with other ForgeOS apps. Cloudflare provides the website, API gateway, network protection and some operational and purchase records.
fal and the MiniMax music model process the style description, lyrics and settings needed to generate audio. OpenAI processes your idea, title, language, genre, mood and text when you request AI lyrics. These requests do not automatically include your account email, password or birth year. Anything personal you put in the prompt or lyrics is still sent. Avoid sensitive information and other people’s private data.
Resend processes recipient addresses, account-email content and delivery records, such as password resets. Support mail is forwarded by Cloudflare to the operator’s Google inbox. Google also handles optional sign-in and Google Play purchases and subscriptions under its own terms.
AI requests and generated media may be retained by the providers under their service and security rules. MusicForge does not promise zero retention. Provider documentation is linked below; music generation and AI lyrics are different processing operations.
How long data is kept
Account/profile information and the cloud library are kept to maintain your account and saved content until you remove content or request account deletion. Local drafts, downloaded songs and exported copies must also be managed on the devices where they are stored.
Job and credit records are kept while needed to finish or recover a job, verify balances or resolve a related payment dispute, refund or security investigation. Purchase references may need to remain while a purchase can still be restored, refunded or challenged. Legally required accounting records are retained for the applicable statutory period; other records are not automatically accounting records.
Support messages are kept while the case is open and while needed to establish how the request or a related dispute was handled. When handling deletion, we review each category, remove data no longer needed and explain any specific retained record, reason and retention period. This is a reviewed support process, not an automatic timer that deletes all data after a fixed number of days.
Provider logs, media and isolated backups have separate retention cycles. Deleting an item from the live library does not immediately erase every provider log or backup. We include relevant provider data in a deletion request and account for prior deletions if a backup is restored.
Your choices and rights
Use the deletion page below or email support to request deletion of your MusicForge account and associated data, even if you cannot open the app. We verify ownership and scope. Shared sign-in must be handled carefully so another ForgeOS app is not removed by mistake. Cancelling a subscription is a separate Google Play action.
Subject to the applicable conditions, you may request access, correction, erasure, restriction and data portability, or object to processing based on legitimate interests. If processing relies on consent, you can withdraw it for the future. We normally respond to rights requests within one month; if a lawful extension is needed, we explain it within that month. Never send passwords or sign-in codes.
You can complain to Sweden’s Integritetsskyddsmyndigheten (IMY) or your local data protection authority. This policy is dated and versioned. We will explain material changes before starting materially different processing.