Privacy Policy

Last Updated: March 1, 2026

This Privacy Policy describes how Sonna ("we", "our", or "the Service") collects, uses, and protects your information when you use the Sonna mobile application and our official website at https://sonna.smilarity.xyz. By using our Service, you agree to the practices described in this Privacy Policy.

Information We Collect

We collect only the data necessary to operate the Service.

Account Information

When you sign in using your Google account, we receive and store:

Your full name and email address from your Google account.
Your profile picture URL (Google avatar).
A unique user ID generated by our system.

We do not collect phone numbers, dates of birth, or other sensitive personal information from your Google account.

Usage Data

Text input: The content you enter for text-to-speech processing, stored as part of your project history.
Project settings: Project title, selected voice, language/accent preference, and speech speed.
Audio files & Voice Data: Generated audio output (MP3 format) and any custom voice parameters. If you use custom voice cloning features, the processed acoustic data is stored securely and linked to your account.
Advertising IDs: For Free plan users, we may collect Google Advertising IDs (AAID) to facilitate relevant advertising through Google AdMob.
Credits and subscription data: Your current credit balance and active subscription plan.

Technical & Diagnostics Data

We use third-party tools to ensure app stability:

Firebase Crashlytics: We collect anonymized crash reports and performance data (e.g., device model, OS version, app state at time of crash) to identify and fix bugs.
Error logs: Internal logs generated during usage are used solely for debugging.

How We Use Your Information

We use the information we collect to:

Provide the Service: Process text-to-speech requests and store your audio project history.
Manage your account: Authenticate your identity and manage your credit balance and subscription status.
Secure transactions: Verify purchases made through Google Play Billing (mobile) and our web payment provider (web).
Improve the Service: Understand aggregated usage patterns (without identifying individuals) to enhance service quality.
Serve ads: For Free plan users, Google AdMob may display relevant advertisements based on Google's own privacy policies.

We do not use your text input to train any AI model.

Legal Basis for Processing

We process your personal data on the following legal bases:

Contractual necessity: Processing is required to deliver the Service you have requested.
Legitimate interests: System security, fraud prevention, and service improvement.
Consent: For advertising (Free plan users only), which you may opt out of by upgrading to a paid plan.

Data Storage and Security

Account and project data is stored in encrypted cloud database infrastructure (Turso).
Audio files are stored on Cloudflare R2 cloud object storage.
Authentication tokens are stored on your device using encrypted storage (Expo SecureStore) — inaccessible to other applications.
Network connections between the app and our servers use HTTPS/TLS encryption.

We implement reasonable security measures to protect your data. However, no system is entirely foolproof — please use the Service responsibly.

Third-Party Services

Sonna uses the following third-party services to provide and improve the Service. Each is governed by its own privacy policy:

Service	Purpose	Privacy Policy
Google Sign-In	User authentication	policies.google.com
Google AdMob	Advertising & Data Collection (Free plan)	policies.google.com
Firebase Crashlytics	Stability & Bug Tracking	firebase.google.com/support/privacy
Google Play Billing	In-app purchase processing	play.google.com
Cloudflare R2	Generated audio file storage	cloudflare.com/privacypolicy
Turso	User account and project database	turso.tech/privacy

Advertising & Data Collection

Google AdMob may collect and use data including your device's advertising ID and location (if enabled) to serve personalized advertisements. You can manage your ad preferences in your device's Google Settings.

Voice Data Processing

Text-to-speech generation is processed through Sonna's backend infrastructure. Your input text and voice parameters are transmitted to our servers solely for audio generation. We do not use your voice data or text to train public AI models. Any user-uploaded samples for voice cloning are stored in encrypted environments and used only for your specific account.

Sharing of Information

We do not sell your personal data to anyone.

We share data with third parties only in the following circumstances:

Operational service providers: Cloudflare and Turso, as described above, strictly within the scope necessary to operate the Service.
Legal obligations: If required by applicable law or a valid court order.

Your Rights (GDPR & CCPA)

Depending on your location, you have specific rights under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

Right to Access & Disclosure: You may request a summary of the data we have collected about you and how it is used.
Right to Deletion ("Right to be Forgotten"): You may permanently delete your account and all associated data at any time:
- Mobile app: Use the "Delete Account" option in Account Settings.
- Web: Visit the account management page on sonna.smilarity.xyz.
- Deletion requests are processed within 30 days. Deletion is permanent.
Right to Opt-Out of Sale/Sharing: Sonna does not sell your data. However, you can opt-out of personalized advertising by upgrading to a paid plan.
Right to Portability: Export your generated audio files using the download feature.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at support@sonna.smilarity.xyz.

Data Retention

Account and project data is retained for as long as your account remains active.
Audio files stored in the cloud are retained for as long as the associated project exists in your account.
Following account deletion, all personal data is permanently removed within 30 days.
Local audio cache: To improve performance, we store a temporary cache of your recent audio projects on your device. This cache is automatically cleared when you sign out, reset the cache in settings, or uninstall the app.
Retention Period: We retain data as long as necessary to provide our service. Metadata for deleted projects may be held briefly for system integrity.

Children's Privacy

Sonna is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you become aware that a child under 13 has created an account, please contact us at support@sonna.smilarity.xyz so we can promptly delete their data.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating this page with a new "Last updated" date. We encourage you to review this page periodically. Continued use of the Service after changes are published constitutes your acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: support@sonna.smilarity.xyz
Website: https://sonna.smilarity.xyz
In-app: Use the "Contact Us" option in the Account Settings screen.

We aim to respond to all requests within 14 business days.

Sonna