Soloke Privacy Policy

Last updated: 21 October 2026

Education in Field Limited ("we", "us", "Soloke"), Room 26-37, 5/F, Beverley Commercial Centre, 87-105 Chatham Road, Tsim Sha Tsui, Kowloon, Hong Kong, is the data user (controller) for the Soloke browser extension and website at https://soloke.app. Contact: privacy@soloke.app.

The short version

Soloke processes your music audio on your device. We do not receive it, and we do not store it.
If you do not sign in to Pro, your lyrics, timings, scores and settings stay in your browser on your device. If you sign in to Pro, the practice data you sync — timings, scores, keys, favourites and settings, never lyric text or audio — is stored on our servers so it can follow you to another device.
We do not run ads, we do not sell data, and we do not track what you watch on YouTube. If you use Pro sync, we store the song IDs and titles you have worked on, so the synced timings can be matched.
We handle only what we need to sell and run the product: your email (if you give it), licence and payment records, synced practice data if you turn on Pro sync, and ordinary server logs when your browser downloads models or checks a licence.

1. What stays on your device

The extension uses these browser permissions: storage and unlimitedStorage (settings, lyrics, timings, scores, downloaded model files), tabCapture and activeTab (to process the audio of the tab you start Soloke on), offscreen (to run processing in the background), alarms (to run the daily sync and usage report), and access to youtube.com pages (to add the Soloke button and show lyrics on the video). It asks the browser for microphone access only if you turn on singing and scoring.

Audio. The audio of the tab and the microphone signal are processed in memory in your browser. They are not uploaded, recorded or saved by us. Separated audio may be held in memory for the session so you can seek back, and it is cleared when you close the tab. Soloke does not save songs to disk.
Lyrics and timings. Lyrics you paste or load are saved in your browser's extension storage, linked to the video ID. Lyric text is never sent to us. Timing also stays on your device unless you sign in to Pro: sync sends the timings and per-line hashes (not the text) so they can be restored on another device — see section 2.
Scores, keys, favourites and settings. Stored on your device, and synced if you sign in to Pro (section 2).
Models. AI model files are downloaded once and kept in your browser's storage.

If you uninstall the extension, the browser removes the local copy. You can also clear it from the extension's settings or your browser's site data controls. Pro sync data is separate: it stays on our servers until you ask us to delete it (section 6).

2. What we collect and why

Data	When	Why	Legal basis (if GDPR/UK GDPR applies)
Email address	You join the early-access list, sign in or buy a plan	To contact you about the beta or your purchase	Consent / contract
Synced practice data: song ID and title, alignment timings and line hashes (no lyric text), scores and history, chosen key, favourites, settings	You sign in to Pro and sync runs (at startup, then daily)	To restore your progress, scores and preferences on another device	Contract
Licence key and plan status, device or browser identifier, extension version	Each time the extension checks your plan	To check what you have paid for and enforce device limits	Contract / legitimate interest
Purchase records (order ID, plan, amount, country, tax)	You buy a plan	To provide the plan, tax, accounting and support	Contract / legal obligation
IP address, date and time, file requested, user agent	Your browser downloads model files or checks a licence	To deliver the files, prevent abuse and fix problems	Legitimate interest
Messages you send us	You email support	To reply	Contract / legitimate interest
Anonymous usage counts (a random install id, the day, and a fixed list of counters: installed/ran, songs finished, first separation, first auto-timing, free 3-song limit reached, Pro prompt shown, and your one-time "would you pay?" answer)	Once a day while the extension is installed, unless you turn it off	To see whether the beta is useful and whether to keep building it	Legitimate interest (you can turn it off at any time in the setup page)

We do not collect: your YouTube watch history, your lyrics, your recordings, or the contents of your microphone. We store a song ID and title only when you use Pro sync, as described above.

Usage counts (added 2026-10-16)

The extension sends one small report a day by default, and you can turn it off with the switch in the setup page ("Usage data"). When it is off, nothing is counted and nothing is sent. A report contains:

a random install id — sha256 of the extension's own per-install device id, so it cannot be tied to you or reused elsewhere;
the day and the extension version and channel (store / unpacked);
a few fixed counters: that the extension ran (and was installed), how many songs you finished, the first time it separated audio, the first time it auto-timed lyrics, whether you reached the free 3-song limit, whether a Pro prompt was shown, and your answer to a one-time "would you pay?" question (yes / maybe / no).

It never contains your video ids or titles, your lyrics or timings, your search terms, your microphone audio, or your email. The server records the country from the request and does not store your IP. Counters are free-form-free: only a fixed list of event names is accepted, so no text can be smuggled out. The exact set of events is documented in docs/beta-plan.md.

Progress sync (Pro)

Sync is part of Pro and runs only while you are signed in. It sends:

the video ID and title of songs you have worked on;
alignment timings and per-line hashes — enough to re-attach timing to lyrics you paste on another device, with no lyric text;
your scores and history, chosen key, favourites, and the settings listed in section 1.

It never sends your lyrics, audio, microphone signal or email content. The data is stored in Cloudflare D1 alongside your account email and device identifier. Signing out stops future syncs; to delete what is already stored, email privacy@soloke.app and we will remove it within 30 days.

Personal Information Collection Statement (Hong Kong)

This statement is given under the Personal Data (Privacy) Ordinance (Cap. 486) where you give us personal data, for example when you join the early-access list, sign in, or buy a plan:

Purpose. To contact you about the beta; to create and secure your account; to check what you have paid for and enforce device limits; to sync your progress, scores and settings across your devices if you use Pro; to take payment, issue receipts and handle refunds; to provide support; and to meet tax, accounting and legal obligations.
Necessary? Giving your email is voluntary. Without it we cannot contact you, sign you in or sell you a plan, but the free features work without it.
Who receives it. The service providers listed in section 4, and anyone we are required by law to disclose it to.
Your rights. You may request access to, and correction of, your personal data, and ask us to stop using it for marketing. Email privacy@soloke.app. Our Data Protection Officer / contact for such requests is privacy@soloke.app. A fee may be charged for an access request, as the Ordinance allows.

3. Payments

Payments for paid plans are handled by our payment providers, under their own privacy policies:

Stripe (Managed Payments) for card, Apple Pay and Google Pay purchases anywhere in the world. Stripe acts as the seller of record: it collects your card and billing details and any VAT/GST/sales tax, and handles fraud and disputes. See Stripe's privacy policy (https://stripe.com/privacy) and, for subscriptions, Link's privacy policy (https://link.com/privacy-center).
PayMe for Business for Hong Kong buyers, in Hong Kong dollars. For these sales we are the seller. PayMe's privacy policy applies to the PayMe app and account (https://payme.hsbc.com.hk/files/Privacy-and-Security).

We receive order details such as your email, the plan, the amount, the country and the payment status — not your full card number. If you redeem a promotion or redeem code, we record the code, the plan it granted and the time it was used.

Only service providers that run the product for us, under contract: Stripe (Managed Payments) (card, Apple Pay and Google Pay — seller of record, tax, fraud and disputes), PayMe for Business (Hong Kong payments), Cloudflare (model files on R2, licence checks, the website and the D1 database that stores Pro sync data), Resend (sign-in codes and email, if used). We may disclose data if the law requires, or to protect rights and safety. We do not sell personal data and do not share it for advertising.

If we sell the business, data may transfer to the buyer, who must honour this policy.

5. Where data is processed

Providers may process data outside Hong Kong, including the United States and the European Union. Where the law requires safeguards for transfers, we use them (for example contractual clauses).

6. How long we keep data

Early-access email: until you unsubscribe or the beta ends, then deleted within 12 months.
Licence and purchase records: as long as the licence is active, then up to 7 years for tax and accounting.
Synced practice data: while your account is active, including if a Pro plan lapses, so it is there if you return; deleted within 30 days after you ask us to delete it or close the account.
Server logs: up to 30 days.
Support messages: up to 24 months.

7. Your rights

Under the Personal Data (Privacy) Ordinance (Hong Kong), and where they apply the GDPR, UK GDPR and similar laws, you can ask to access, correct or delete your data (including synced practice data), to object to or restrict some uses, to withdraw consent, and to receive your data in a portable form. Email privacy@soloke.app. We will reply within 40 days (the Hong Kong period) or the period the law of your country sets. If you are in the EU or UK you may complain to your data protection authority.

You can unsubscribe from emails with the link in any message. Marketing emails stop on request.

8. Cookies and the website

The website uses no cookies and makes no requests to third-party services — all fonts are served from our own domain. It remembers your language choice in your browser's local storage only.

9. Children

Soloke is not directed at children under 13 or 16 in the EU. We do not knowingly collect their data. If you think a child gave us data, contact us and we will delete it.

10. Chrome Web Store user data policy

Soloke's use of information received through Chrome APIs follows the Chrome Web Store User Data Policy, including the Limited Use requirements. We use the data only to provide the features described above, we do not sell it, we do not use or transfer it for advertising or credit decisions, and no person reads it unless you ask for support, security reasons require it, or the law does.

11. Security

We protect licence, purchase and synced practice data with access controls and encryption in transit, and model files are served over HTTPS. No system is perfectly secure. We will notify you and the authorities as the law requires if a breach affects your data.

12. Changes

We will post changes here, update the date, and notify subscribers by email for material changes.

13. Contact

Education in Field Limited, Room 26-37, 5/F, Beverley Commercial Centre, 87-105 Chatham Road, Tsim Sha Tsui, Kowloon, Hong Kong. Privacy: privacy@soloke.app. Support and billing: support@soloke.app. Legal and IP: legal@soloke.app. See also https://soloke.app/contact.