Loudy

Privacy Policy

Last updated: 1 September 2026

This page states exactly what Loudy stores, why it stores it, and for how long. Nothing hidden: no ads, no data sales, no tracking tools.

1. What we store

  • Email address - used to sign you in and to contact you about your account.
  • Display name - optional, shown only inside the app.
  • Password - never in readable form. We keep only a scrypt hash, from which the password cannot be reconstructed.
  • The text you send for synthesis - kept in your history so you can see what you generated and download it again.
  • Generated MP3 files - stored on our server so your download link keeps working.
  • Usage data - character count, file size, the chosen voice and the time of generation. Used to calculate your monthly quota.
  • Server logs - IP address and browser type, kept briefly, for security and debugging.

2. What we do not store

  • No card details - billing does not run through the application.
  • No third-party analytics, tracking pixels or advertising cookies.
  • We do not read your texts and never use them to train any model.

3. Who your data is shared with

To turn text into speech we send it to ElevenLabs, which generates the audio and returns it to us. Only the text and the voice selection are sent - never your email, your name, or any other account detail.

Processing at ElevenLabs is governed by their own terms of service and privacy policy.

4. Cookies

We use exactly one cookie: the one that keeps you signed in. It is set when you sign in, lasts 30 days, and is removed when you sign out. There are no tracking or advertising cookies.

5. How long data is kept

  • Audio files - per plan (Free: 7 days, Pro: 90 days, Studio: 365 days), then deleted from disk.
  • Text history - until you delete it or close your account.
  • Sessions - at most 30 days from sign-in.
  • Account data - for as long as the account exists.

6. Your control

  • You can delete any single recording at any time.
  • You can close your account from the Profile page. That immediately removes the account, every session, your whole history and all audio files.
  • You change your name and password yourself, without contacting us.

7. Security

Passwords are stored as scrypt hashes with a random salt. The session cookie is httpOnly and SameSite=Lax, and only its hash is kept in the database. Password reset links are single-use and expire shortly after being issued. We recommend using the service over HTTPS only.

8. Contact

For any question about your data, write to support@example.com.