Privacy Policy

Effective date: 22 June 2026

The short version: Composa collects no personal data. Everything you create — prompts, lyrics, music, and vocals — is generated and stored entirely on your device. There are no accounts, no analytics, and no tracking. We have nothing about you to sell, share, or lose.

1. Who we are

Composa (“Composa,” “the app,” “we,” “us,” or “our”) is a macOS application that generates songs — music, AI-written lyrics, and vocals — entirely on your own Mac. This Privacy Policy explains how Composa handles information, which in practice means explaining how little information Composa touches at all.

2. Data we collect: none

We do not collect, store, transmit, sell, rent, or share any personal data. We have built Composa so that we are not in a position to do so even if we wanted to. Specifically, Composa does not:

require or offer user accounts, sign-in, or registration;
include any analytics, telemetry, crash reporting, advertising, fingerprinting, or usage tracking;
contain third-party trackers, advertising SDKs, or social-login components;
transmit your prompts, lyrics, generated audio, projects, or any other content you create to us or to any server;
build a profile of you or track you across apps, websites, or devices.

Under frameworks such as the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), we collect no personal data. Because we do not collect personal data, we do not sell or “share” it (as those terms are defined under the CCPA/CPRA), and there is no personal data for us to use for targeted advertising.

3. Everything happens on your device

All music generation, lyric generation, and vocal synthesis run locally on your Mac:

Music is generated on-device using a local, open-source model (ACE-Step, MIT-licensed).
Lyrics are generated on-device, using Apple Intelligence’s on-device foundation models where available, or a bundled local model. Your prompts and lyrics are not sent to us or to any third-party text service by the app.
Vocals are synthesized on-device as part of the local generation pipeline.

The songs, lyrics, prompts, and project files you create stay on your Mac under your control, in your user storage. You can delete them at any time using Finder or the app. We never receive copies.

4. AI model downloads

To keep the initial app download small, Composa may download AI model weights from a content delivery network (CDN) the first time they are needed. These downloads are anonymous fetches of public model files:

they transmit no personal data, no account identifiers, and none of your prompts, lyrics, or generated content;
they are ordinary, standard HTTPS file requests for model files, comparable to downloading a software update;
as with any internet request, the CDN provider may process technical connection metadata (such as your IP address and a generic user-agent) for the limited, legitimate purpose of delivering the file, preventing abuse, and operating its network. This is processing by the CDN under its own terms, not collection by Composa, and we do not receive this information.

Once the necessary model weights are present on your Mac, generation works without any further network requests for that purpose.

5. Purchases and subscriptions

Any purchases, subscriptions, or in-app purchases are processed by Apple through the App Store and StoreKit. We do not see or store your payment card details, billing address, or Apple Account credentials. Apple handles payment processing, billing, and any associated receipts. Apple’s handling of that information is governed by Apple’s Privacy Policy and the App Store terms, which we encourage you to review.

6. No data sold or shared

We do not and will not sell, rent, trade, or share your personal data with anyone, for any purpose, including advertising. Again, this is straightforward for us because we do not collect personal data in the first place.

7. Children’s privacy

Composa is not directed to children, and we do not knowingly collect personal data from anyone, including children under the age of 13 (or the equivalent minimum age in your jurisdiction). Because Composa collects no personal data from any user, it collects none from children. If you believe a child has somehow provided personal data to us, please contact us and we will address the matter promptly, although in practice we hold no such data.

8. Your rights

Privacy laws such as the GDPR and CCPA/CPRA give you rights to access, correct, delete, or port your personal data, and to object to or restrict its processing. Because Composa holds no personal data about you, there is nothing for us to retrieve, correct, delete, or export on your behalf. The content you create lives on your own device, where you can view, edit, export, or delete it directly at any time.

9. Security

The strongest privacy protection is not collecting data in the first place, and that is the approach Composa takes. Your creative content remains on your Mac, protected by your device’s own security and the macOS app sandbox.

10. Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect changes in the app or in applicable law. When we do, we will revise the “Effective date” above and post the updated policy here. Material changes will be reflected in a clearly dated version. Your continued use of Composa after an update means you accept the revised policy.

11. Contact us

If you have any questions about this Privacy Policy or about privacy at Composa, contact us at support@composa.app.

This document is provided as a template and does not constitute legal advice. Please consult a qualified attorney before relying on it.