Privacy

Last updated 14 July 2026

SonaPrompt is a free music advisor that adds songs to your Apple Music playlists. This page says exactly what it stores, who else sees it, and how to get rid of it. No tracking pixels, no advertising, no selling data — Apple's developer terms forbid monetising a MusicKit app, and we don't.

What we store

Data	Why	Where
Apple Music token	To read your playlists and add the songs you approve. Apple issues it to your browser when you sign in.	Encrypted (AES-256-GCM) in Google Firestore. Also cached in your own browser by Apple's MusicKit library, which we clear when you sign out.
A random id in a cookie	To count your free chats for the day. It identifies a browser, not a person.	A signed, httpOnly cookie in your browser, and a counter in Firestore.
A hash of your IP address	To stop one person clearing cookies to get unlimited free chats.	Firestore, as a one-way SHA-256 hash. The address itself is never stored.
Your account (only if you sign in with Apple)	To raise your chat limit and sync your conversations between devices.	Firebase Authentication. We store the account id — never a password, and never your email if you chose Apple's Hide My Email.
Your chat messages (only if you have an account)	So your conversations follow you to another device.	Firestore, under your account id. Without an account, chats never leave your browser — they live in local storage and nowhere else.

Who else sees it

Apple — receives your Apple Music token and the requests we make on your behalf (reading playlists, adding songs). Your Apple credentials go to Apple, never to us.
OpenAI — when you chat with the advisor, the text of that conversation is sent to a language model to generate suggestions. Don't type anything into it you wouldn't want processed by a third-party model.
Google — Firebase (authentication) and Firestore (storage) run on Google Cloud.
New Relic — performance and error monitoring. Collects page timings and JavaScript errors, not your chat content.
Render — hosts the server.

Nobody else. We do not sell, rent, or share your data for advertising, and there is no advertising on this site.

Your AI assistant

If you connect SonaPrompt to ChatGPT, Claude, or another MCP client, that assistant is given a token of ours — never your Apple Music token. It can see your playlists and add songs you approve. What that assistant does with your conversation is governed by its privacy policy, not this one.

Deleting your data

Sign out clears your Apple Music token from this browser and from our server, and removes any chats stored locally.

Delete your account — in the sidebar, under your chat allowance — erases your account and every chat we hold for you, permanently and immediately. Nothing is retained.

Chat quota counters expire on their own and identify a browser or an account id, never a person. Anonymous chats are never stored on our servers at all, so there is nothing for us to delete.

If you would rather email: admin@taasconsulting.com.au.

Children

SonaPrompt requires an Apple Music subscription and is not directed at children under 13.

Changes

If this policy changes materially, the date at the top changes with it.