Privacy

Who we are

Howli is provided by CandidGO Ltd (company number 16876904), registered at 6th Floor, 37 Lombard Street, London, England, EC3V 9BQ. CandidGO Ltd is the controller. No account required. Contact support@get-howli.com.

What stays on your device

Howli uses your microphone for scoring, and front camera for optional video. Recordings, song content, imports, and raw singing or pitch data stay on your device.

Best-attempt recordings are deleted with their song or all recording data. Reaction recordings are temporary, deleted after review or next launch if abandoned. Recordings and arrangement-preview videos leave your device only when you export, save, or share them.

Face data and TrueDepth

On supported iPhones, optional video uses ARKit TrueDepth to track face shape, expressions, and head position, with camera, timing, and lighting information. Raw face shape and expression data stay in memory. Howli saves eye and mouth outlines, head position, fit measurements, and supporting alignment, timing, and lighting data with recordings. It does not save depth maps or biometric identity templates.

Face data is used only to align and animate the face effect, never for identification, analytics, advertising, or model training. It stays on your device; exported videos show the effect without including the tracking data. Howli excludes app-managed files and preferences from backups, subject to Apple's backup behaviour.

Video can be skipped. Temporary face data is deleted with a discarded recording or next launch. Saved face data is deleted with its recording or song, when recording data is cleared, or when Howli is uninstalled. Disabling Camera prevents future collection.

Website analytics

Mixpanel measures song-editor activity and browser/device information, using a random identifier that lasts only for the page session.

Cloudflare measures page views, referring sites and performance. Both support improvement without receiving song content, advertising cookies or persistent cross-site identity.

You can object at any time. This browser remembers your choice.

App analytics and reliability

Mixpanel receives product activity linked to a random identifier per installation, including song creation, practice, review and export outcomes. It receives vocal-range and song-fit measurements, purchase history, coarse location, and device, performance, and recording-input diagnostics. We use this for improvement, not advertising or cross-company tracking.

Analytics excludes song content (codes, titles, lyrics, notes, names, and imported files), filenames, exports, and face-tracking data.

Cloudflare processes song fingerprints into public aggregate counts. Counters store no individual identifiers, content, or recordings.

Sentry receives crash reports and limited diagnostics for reliability, excluding screenshots, recordings, and song content.

App stores and notifications

Apple and Google process payments. RevenueCat receives an app-specific customer identifier and purchase or subscription history for access, purchase management, support, and analytics. Purchase history and app analytics share a random identifier on iPhone; Android keeps them separate. Howli receives no full card details.

Google Play receives device information, Howli's version and installed components to check for and deliver app updates.

Firebase uses installation and push identifiers and device settings for optional notifications, separately from purchase and analytics identities. Older versions use OneSignal, including notification statistics.

Feedback

Cloudflare processes feedback text, votes, reports, app version and a separate device credential. Neon's recovery retention ends October 5, 2026. Resend sends moderation alerts without feedback text or device credentials. Reviewed feedback is public, not linked to purchases or analytics. Use “Delete my feedback data” on the submitting device or contact support.

Why we use information

We rely on legitimate interests for improvement, feedback moderation, aggregate song counts, reliability, and subscription measurement; performance of a contract for purchases, access, and requested support; and legal obligations where required.

Sharing, retention, and transfers

We share information with these providers, their subprocessors, or as legally required. Cloudflare hosts the website and processes connection information for security. GitHub prepared historical totals from analytics without retaining raw events or identifiers. Contracts require appropriate protection.

Mixpanel and Sentry use European Union data endpoints. Other providers may process information outside the UK using an adequacy decision or approved contractual safeguards where required.

Local data stays until deleted; practice counts remain until uninstall. Service data is kept only as long as needed for these purposes or legal duties, then deleted or anonymised.

Your choices and rights

You may have rights to access, correct, delete, restrict, copy, or object to our use of your information. Use the control above for website analytics, device Settings for permissions and notifications, or contact support@get-howli.com for requests.

Without accounts, locating data may be impossible. You can complain to the UK Information Commissioner's Office.