Legal
Last updated 8 September 2026
The short version. We store your account, your projects and a record of what each composition cost. We don't sell your data, we don't use your projects to train models, and we don't run advertising. The only analytics on the site is a tag we build ourselves.
An email address, and whatever your sign-in provider passes us to identify you. We don't store passwords ourselves.
The briefs you write, the plans and scores generated from them, scores you import, and their version history. This is the material the service exists to hold, and it is visible only to your account.
Your plan, your credit balance, and a ledger of every charge and refund — what it was for, when, and what it cost us to run. We never see your card details. Payments are handled by our payment processor, and card numbers go to them, not to us.
Ordinary server logs: IP address, browser, timestamps, which endpoint was called and whether it worked. We use these to keep the service running, to debug failures, and to catch abuse.
Composing sends your brief and the piece being written to a third-party model provider — Anthropic or Google, depending on which engine you chose. They process it to return the music and are bound by their own terms not to train on data sent through their APIs.
We do not train models on your projects, and we do not licence your work to anyone for that purpose.
We share data only with the providers needed to run the service:
We don't sell personal data, and we don't share it for advertising. If the business is ever sold, your data may transfer with it, and you'd be told first.
Your projects stay until you delete them or close your account. Billing records are kept as long as tax and accounting rules require. Logs are kept for a limited period and then discarded.
Depending on where you live you may have the right to see the data we hold, correct it, delete it, take it elsewhere, or object to some processing. You can export any project from the app at any time without asking us. For anything else, write to hello@larkato.com and we'll action it.
We use what's needed to keep you signed in and to remember your preferences — your theme choice, for instance, which is stored in your own browser and never reaches us. No advertising cookies.
For analytics we use a single tag, and we make it ourselves: Kicklace, the customer-records tool this same company builds. It records which pages you open, how you arrived — the site that linked you, or the campaign in the link — and when you download a file. It keeps one random id in your browser's own storage, sets no cookies, and goes to no ad network. It loads from kicklace.com, so that name appears in your browser's network tab: that is us, not somebody we handed you to.
The service isn't intended for children under 13, and we don't knowingly collect their data. If you believe a child has given us data, tell us and we'll remove it.
We'll post any update here and change the date at the top. Material changes get notice in the app or by email first.