Last updated: 15 October 2026
SplitNPlay separates the instruments of songs directly on your device: the original song is never uploaded. Processed songs stay on your device, in the folders where you choose to save them and, if your plan includes the cloud backup, in a storage space encrypted with your account key: whoever stores them only sees unreadable data and we do not open your songs. This policy explains which data we process to run your account, under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR").
VIALE IVAN COMMERCIAL AGENCY, sole proprietorship of Ivan Viale
Via Venezia 97, 36015 Schio (VI), Italy — VAT no. IT04427930245
Email: [email protected] — Certified email (PEC): [email protected]
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and account identifier | creating the account and signing in with an email link | performance of the contract (Art. 6(1)(b)) |
| Account encryption key (generated by the system) | encrypting your songs so that only your account can open them | performance of the contract |
| Active plan, expiry dates, gift codes used | knowing which features you can use | performance of the contract |
| Counters: songs processed and audio exports in the month, export log (date and random song identifier, never the title) | applying plan limits and preventing unlawful redistribution of exported files | performance of the contract; legitimate interest in preventing abuse (Art. 6(1)(f)) |
| Devices: random device identifier, type (e.g. "Android · Chrome"), last use | applying the plan's device limit | performance of the contract |
| Account code in exported files (Max and Lifetime plans): a random code written into the metadata of exported WAV files | tracing the account in case of unauthorised redistribution | legitimate interest in protecting rights |
| Cloud backup (Max and Lifetime plans or the cloud add-on): the files of processed songs and their details (title, duration, tracks), encrypted on the device; only size and date are readable | keeping your songs and finding them on your devices | performance of the contract |
| Reports you send from the app (text and, if you agree, technical details of the device and recent errors) | solving problems and improving the app | legitimate interest; sent voluntarily by you |
| Translation suggestions you send (text, language, account) | improving the app's translations | legitimate interest; sent voluntarily by you |
| Technical security data: IP address and time of requests to our servers, kept in the provider's logs | security, fraud and attack prevention | legitimate interest |
| Anonymous statistics (only if you turn the option on): device type, graphics chip, model used, processing speed | improving time estimates | consent (Art. 6(1)(a)); not linked to your account |
We do not use your data for advertising, we do not sell it, and we do not carry out profiling or automated decisions.
Subscriptions and purchases are sold through Link ("Sold through Link", a Stripe service), which acts as reseller (merchant of record) and independent controller of payment data: name, billing address and card details are processed by Link/Stripe under their own policy (https://link.com/privacy). We only receive what is needed to activate the plan: customer identifier, plan purchased, subscription status and renewal date.
The app stores in the browser's storage (IndexedDB and localStorage) your song library, the encrypted files, language, settings and the encryption key in a form scripts cannot read. These are technical tools needed for the service: we use no profiling or analytics cookies, so no consent banner is needed. You can delete this data by deleting songs in the app or the site data in your browser settings.
Data is processed by providers acting as processors (Art. 28) on our behalf:
Link/Stripe processes payment data as an independent controller (see above). We may disclose data to authorities when required by law.
Some providers are based in the United States or may access data from there for support. Such transfers rely on the EU-US adequacy decision (Data Privacy Framework) for certified companies, or on the standard contractual clauses approved by the European Commission.
You can ask at any time for access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR). You can withdraw consent to anonymous statistics in Settings, without affecting earlier processing.
Deleting your account: Account → Delete account. You can choose deletion after 30 days (until then, signing in is enough to keep it) or immediate deletion. In the end all data on our servers is deleted, including your cloud songs, and any subscription stops renewing. Songs saved on your device or elsewhere can no longer be opened.
To exercise your rights write to [email protected]. We reply within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or the authority of your country.
The service is intended for people aged at least 14 (or the age set in your country for consenting to online services). Purchases require being of legal age or a parent's authorisation.
Exported songs are encrypted (AES-256) with your account key; communications with our servers are encrypted (HTTPS) and every limit is checked by the server. No system is 100% secure: in case of a data breach affecting you we will notify you as required by law.
If we change this policy substantially we will tell you in the app or by email before the changes take effect.