Privacy Policy
Last updated: November 11, 2026.
Lalami ("the app", "we") is made by Uğur Uçar, Kaptanpaşa Mahallesi, 34384 İstanbul, Türkiye, who is the data controller for the personal data described here. Contact: collab@ugurucar.work.
The short version
- Your voice is analyzed on your phone. Audio of your singing never leaves it.
- You can use Lalami without an account. A guest's progress stays only on the phone.
- If you sign in with Apple or Google, we back up your progress so it survives a new phone.
- There are no ads. We do not track you across other apps or websites, and we do not sell or share your data for advertising.
- The AI coach (Lalami Plus) is off until you allow it. It reads a text summary of your take, never audio.
- You can switch usage statistics off, and delete your account and backup in the app at any time.
What we process, why, and where
| Data | Why | Where it is kept |
|---|---|---|
| Microphone audio while you sing | To show your pitch and score your takes | Only on your phone. It is turned into pitch numbers as you sing; the last take is kept in memory for playback and discarded when you leave the results screen. It is never used to identify you. |
| Voice profile (range, voice type), onboarding answers (goal, what feels hardest, daily minutes, reminder time), progress, scores, streak, mic calibration, settings | To run the app and build your plan | On your phone. If you sign in, also in your backup. |
| Account: a user ID, your email address and sign-in provider (Apple or Google). With Apple's "Hide My Email" we only get a relay address. | To sign you in and link your backup to you | Google Firebase Authentication |
| Backup: a copy of the on-phone data above (no audio) | To restore your progress on a new phone | Google Cloud Firestore |
| Usage statistics: events such as an onboarding step finished, a lesson completed, the paywall opened, a score; a random app-instance ID; device model, OS version, language and country; approximate location (region, derived from the IP address) | To understand which parts of Lalami work and improve them | Google Analytics for Firebase. Not linked to your account or email. No advertising identifier is collected. |
| AI coach (Lalami Plus, only after you tap Allow): a text summary of each take: the exercise, the notes it asks for, pitch and timing measurements of what you sang, your scores, your voice type and range, and the dates and scores of your earlier takes of that exercise. No audio, name or email. The AI coach needs an account (Apple or Google) and an active subscription: the app sends Apple's signed record of your subscription (product, dates and a transaction ID, no payment details), which our server checks and links to your account so it can't be shared. | To write your feedback on the take | Sent through our server (Google Cloud Functions, Europe) to Anthropic, PBC (Claude), which writes the note. Our server keeps only daily request counts (per account and per a one-way hash of your network address, to stop abuse; deleted after 30 days) and which account a subscription is linked to (until you delete your account). Anthropic does not use API inputs to train its models and deletes them under its retention terms. |
| Purchases | To unlock Lalami Plus | Handled by Apple. We never see your payment details; the app checks your subscription with Apple on the phone. |
| Daily reminder | The practice reminder you chose | Scheduled on your phone as a local notification. Nothing is sent to a server. |
We collect this data automatically through the app and, when you sign in, from Apple or Google. You don't have to give us any of it: without an account the app works fully, and without the microphone you can still use the lessons that don't need singing. We make no decisions about you by automated means that have legal or similarly significant effects; scores are only feedback on your singing.
Legal bases
We process account and backup data to provide the service you asked for (performance of a contract: GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)). We process usage statistics based on our legitimate interest in keeping the app working and improving it (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)); the data is limited, not linked to you, and you can switch it off at any time in You › Privacy.
Service providers and transfers abroad
We use Google LLC and its affiliates (Firebase Authentication, Cloud Firestore, Cloud Functions, Google Analytics for Firebase), Anthropic, PBC (the AI coach, only if you allow it) and Apple (Sign in with Apple, App Store purchases). They process data on our behalf under their data processing terms, which oblige them to protect it at least as well as this policy, and may store it in data centers outside Türkiye and outside your country, including in the European Union and the United States. Such transfers rely on the safeguards the law requires, such as standard contractual clauses (GDPR Art. 46; KVKK Art. 9). We share data with no one else, except where the law requires it.
Retention
Your account and backup are kept until you delete your account. Usage statistics are deleted by Google after 2 months. AI coach request counts are deleted after 30 days; the coach's notes are saved with your takes on your phone (and in your backup if you have an account). Data on your phone stays until you delete it or remove the app.
Your choices and rights
- AI coach: switch off in You › Privacy. Nothing more is sent once it's off; you get the on-device note instead.
- Usage statistics: switch off in You › Privacy. Nothing more is sent once it's off.
- Delete account: You › Account › Delete account removes your sign-in and your backup from our servers straight away. Progress on the phone stays until you also tap Delete my data.
- Delete my data: You › Privacy erases everything Lalami stores on your phone.
- Depending on where you live (for example under the GDPR, the UK GDPR, KVKK Art. 11 or the CCPA), you have the right to know whether we process your data and to get a copy of it, to have it corrected or deleted, to receive it in a portable format, to object to or restrict processing, to know who it was shared with, and to claim compensation for unlawful processing. Write to collab@ugurucar.work, if possible from the email linked to your account so we can confirm it's you. We answer free of charge within 30 days.
- You can also complain to your data protection authority; in Türkiye, the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
Children
Lalami is not directed to children under 13, or under the age of digital consent where you live (up to 16 in the EU), and we do not knowingly collect their data. If you think a child has given us data, write to us and we will delete it.
Security
Data is sent over encrypted connections. Each backup can only be read and written by the signed-in user it belongs to.
Changes
We will update this page and the date above when this policy changes, and tell you in the app if a change is significant.