Last updated: July 12, 2026
Privacy Policy
I Can't Sing, operated by ToxRock Records ("we", "us", "our"), makes a Windows desktop app that runs entirely on your computer. Your voice and audio never leave your PC — there is no cloud processing and nothing to upload. This Policy explains what limited information we do collect through your account and our website, how we use it, and the rights you have. We never sell your personal data.
Your voice stays on your device
The I Can't Sing app processes all audio locally, in real time, on your machine. Your voice, your recordings, and the files you create are never recorded by us, uploaded, streamed, or transmitted to us or any third party. We do not receive, store, or have any access to your audio. On-device processing is a core design principle of the product, not a setting.
What we collect
Account email. We collect your email address to create your account, deliver and re-issue your license key, and contact you about your purchase, renewals, or the beta.
Purchase & billing information. Payments are processed by Stripe. Stripe handles your card details directly; we never see or store your full card number. We receive confirmation and basic order information (such as plan, amount, and billing status) needed to fulfill and support your purchase.
Support correspondence. If you contact us, we keep your messages and contact details to respond and provide support.
Optional beta feedback. If you choose to send feedback during the beta, we store it to improve the app. It never includes your audio.
Minimal server logs & security data. When you use our website or activation/licensing endpoints, our systems and our SentinelWatch security tooling may automatically log limited technical data — such as IP address, timestamps, and basic request information — to operate the Service, prevent fraud and abuse, and protect security. This applies to our site and app services, not to your audio, which is processed only on your device.
How we use your information
We use the information above to: deliver, activate, and re-issue your license; manage your subscription and billing; send transactional and important emails (receipts, renewals, security notices); provide customer support; operate, secure, and improve the Service and prevent abuse; and comply with legal and tax obligations. We do not use your information for third-party advertising, and we do not build advertising profiles about you.
We do not sell your personal data
We do not sell, rent, or trade your personal information, and we do not "share" it for cross-context behavioral advertising. Full stop.
Service providers we rely on
We use a small number of trusted processors to run the Service, each handling only what they need: Stripe (payment processing — handles your card directly), Resend (sending our transactional emails), Supabase (storing beta signups and purchase records such as your email and plan), and Vercel and Cloudflare (website hosting, delivery, and security). None of these providers ever receive your voice or audio — it never leaves your computer in the first place. These providers process data on our behalf under their own terms and security commitments.
Cookies
Our website uses only essential cookies and similar technologies needed for the site and checkout to function and to keep the Service secure. We do not use advertising or cross-site tracking cookies. For the full breakdown, see our Cookie & Tracking Policy.
Data retention
We keep account, purchase, and security records only as long as necessary to run your account, provide the Service, and meet legal, accounting, and tax requirements, after which we delete or anonymize them. Server and security logs are kept for a limited period appropriate to their purpose.
Who is responsible for your data (controller)
For the limited personal data described above, the data controller is ToxRock Records, operating as I Can't Sing, located in Michigan, USA, reachable at support@icantsing.com. As a small US-based operator, we have not appointed a separate EU/UK representative or Data Protection Officer; if that changes, or if one becomes legally required, we will name them here. In the meantime, you can raise any privacy matter directly with us at the email above and we will handle it.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of the personal data we hold, and to object to or restrict certain processing. To exercise any right, email support@icantsing.com and we will respond as required by law (generally within 30 days for GDPR/UK GDPR and 45 days for CCPA/CPRA requests). We will not discriminate against you for exercising your rights, and we may need to verify your identity first.
EEA/UK (GDPR & UK GDPR). If you are in the European Economic Area or the United Kingdom, you have the rights of access, rectification, erasure, restriction, data portability, and objection, and the right to lodge a complaint with your local supervisory authority (in the EU, your national data protection authority; in the UK, the Information Commissioner's Office). You may withdraw consent at any time where processing is based on consent, without affecting processing already carried out. We rely on the following legal bases:
| What we process | Why | Lawful basis |
|---|---|---|
| Account email & license | Create your account, deliver/re-issue your license key, contact you about your purchase | Performance of a contract |
| Purchase & billing records | Fulfil your order, handle renewals, meet tax/accounting duties | Contract & legal obligation |
| Server & security logs | Operate the Service, prevent fraud and abuse, protect security | Legitimate interests |
| Support correspondence | Respond to and resolve your requests | Legitimate interests / contract |
| Optional beta feedback | Improve the app when you choose to send it | Consent |
California (CCPA/CPRA). If you are a California resident, you have the right to know what personal information we collect and how we use it, to access and delete it, to correct inaccurate information, and to opt out of the sale or sharing of personal information — though, as stated above, we do not sell or share your personal information. You may exercise these rights, without discrimination, by emailing support@icantsing.com.
Children's privacy
The Service is not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 in regions where that is the applicable threshold). If you believe a child has provided us personal information, contact us and we will delete it.
International transfers
We and our service providers may process and store information in the United States and other countries where our providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.
Security
We use reasonable technical and organizational measures to protect the information we hold, including encryption in transit, offline-verified license keys, and access controls. No method of transmission or storage is completely secure, and by design the most sensitive material — your voice and audio — never leaves your device.
Changes to this Policy
We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes, provide reasonable notice where practicable.
Contact
Questions about privacy? Email support@icantsing.com. I Can't Sing, operated by ToxRock Records — Michigan, USA.