1. Data Controller
The data controller for SongForge is:
COBI Management SRL (trading as HighRoad Software)
Rue Haut Chemin 8
1370 Jodoigne, Belgium
Email: privacy@highroadsoftware.com
HighRoad is the controller for information it receives through support and direct-sale fulfilment. Apple or the named direct merchant separately controls information it collects at checkout. HighRoad does not receive your standalone music projects.
2. What Stays Local
During normal standalone use, SongForge does not upload your creative work:
- No SongForge account, advertising profile, or analytics identifier is created.
- We do not record or transmit the text prompts or lyrics you enter.
- We do not upload, store, or analyze the songs you generate.
- We do not run analytics, session tracking, or usage telemetry.
- The app does not include advertising, behavioural analytics, or third-party crash reporting.
3. Local Storage
All data generated by your use of SongForge is stored exclusively on your device:
- Song library: Generated audio files and their metadata (title, prompt, duration, BPM, key) are stored in a local SQLite database in your macOS user directory.
- App settings: Preferences, playback state, and any local entitlement state are stored using standard macOS storage.
- Model files: The ACE-Step 1.5 GGUF model files you download are stored in your Application Support directory.
None of this data is backed up to any HighRoad Software server. iCloud backup is controlled by your own macOS settings — HighRoad Software has no access to any iCloud data.
4. Model Downloads
SongForge can download compatible model files from a third-party model host such as Hugging Face. The host receives the information inherent in an internet request, including your IP address and standard request headers, under its own privacy policy. HighRoad does not receive your prompts or generated audio from this download. You may review Hugging Face's policy at huggingface.co/privacy.
5. Purchases and Direct-Build Licence Validation
If a paid build is offered, the live checkout will identify its payment provider. A direct build may validate a licence through the named merchant's API:
- The app sends the licence key and a randomly generated installation identifier, together with the IP address inherent in the connection, to validate entitlement and device limits.
- A direct merchant may provide HighRoad with fulfilment records such as buyer email, order ID, product, payment status, and tax records. Those records are retained as required for fulfilment, fraud prevention, accounting, and legal obligations.
- For Apple purchases, StoreKit handles entitlement. Apple controls the purchase data it collects; HighRoad may receive transaction and aggregate sales information through App Store Connect.
Local entitlement status is stored on the Mac. The public release page and checkout will name the active merchant before purchase.
6. macOS Permissions
SongForge requests only the permissions it needs:
- File access (user-granted): To export audio files to locations you choose (Pro feature only). The app does not request broad file system access.
- Network access: For model delivery, Store or direct-build purchase validation, support links, and an Audio Unit remote backend only if you enter and confirm its address. Content sent to that backend is governed by the operator you choose.
SongForge does not request access to your microphone, camera, contacts, calendar, location, or any other sensitive macOS permission category.
7. GDPR
Where HighRoad processes support or fulfilment data, the legal bases are contract performance, compliance with legal obligations, and legitimate interests such as security and fraud prevention. Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection by writing to privacy@highroadsoftware.com. You may also complain to the Belgian Data Protection Authority or your local supervisory authority.
8. Children's Privacy
SongForge is not directed at children under 13 (or under 16 in the EEA). Because we collect no personal data from any user, we do not knowingly collect personal data from children. If you believe a child has provided us with personal data in connection with a purchase, please contact privacy@highroadsoftware.com.
9. Data Security
Local project security depends on your macOS account, device access controls, and FileVault settings. The release build uses macOS sandboxing and a hardened runtime. HighRoad applies access controls to support and fulfilment records, but no method of storage or transmission is risk-free.
10. Changes to This Policy
If we update this policy materially, we will update the date above and provide additional notice where required. App Store privacy answers and in-app disclosures must be updated before a release introduces a new data flow.
11. Contact
For any privacy-related questions or requests, please contact:
HighRoad Software (COBI Management SRL)
Rue Haut Chemin 8, 1370 Jodoigne, Belgium
privacy@highroadsoftware.com
This policy applies to the SongForge macOS application (bundle ID: com.hrs.songforge.app) and the product website at highroadsoftware.com/apps/songforge/.