Privacy Policy

Last updated 12 October 2026

Deep Listen names a song from a short audio clip, a link or its name, and shows an analysis of it. It is made by Buinsoft Technology s.r.o. This page explains what we collect, why, and who else handles it. You do not need to sign up to use Deep Listen.

Audio you send

When you tap Listen, the app records a few seconds from the microphone and sends the clip to our server, which passes it to a music recognition service to get the song name. At the moment that service is Shazam. The microphone is only on while the listen screen shows it is listening.

When you use Hum or sing, the clip is sent to ACRCloud, which matches the melody and returns possible songs.

On a computer you can also pick an audio file; it is handled the same way as a clip.

Clips and files are deleted from our server within 3 hours. We do not listen to them and do not use them for anything else.

Google Gemini (AI)

Parts of each analysis, such as the notes, the suggestions for what to play next and the song's story, are written by Google Gemini, Google's AI service. For a recognised song Gemini receives the song's 30 second store preview and its title and artist, not your clip and nothing about you.

If a clip is not recognised and you choose "Analyse it anyway", or you pick a file, your own recording (or an excerpt of the file) is sent to Gemini. The app asks you before doing this, and nothing is sent unless you agree. Google processes it under its own terms.

Links and names

If you paste a link from Spotify, Apple Music, Shazam, YouTube or Deezer, our server reads that public page to get the song's title and artist. Song details, cover art and previews come from Deezer, MusicBrainz, Wikipedia and Apple's public search. Analyses are stored and shared between all listeners, so a song that someone has opened before opens instantly.

Your account

The first time you open or save a song, Deep Listen quietly creates a guest account so your history and lists are kept. It is identified only by a random sign-in token stored on your device (a cookie in the browser). A guest account holds no name or email.

If you claim the account, we also store your email address and either a hashed password (we cannot read it) or, if you continue with Google, the name, email address and account number Google shares with us. We use your email only to sign you in and to send a password reset link when you ask for one. We do not send marketing email.

For each account we store the songs you opened (your history), your lists and the date it was created. Guest accounts with nothing saved are deleted after 30 days.

Counting what people search

To show "Most searched this week" and to keep usage within fair limits, we count one search per listener, song and day. For accounts we use the account number, otherwise a one way hash of the IP address; we do not store the address itself with the count.

No ads, no selling

There is no advertising and no tracking for advertising in Deep Listen. We do not sell your data or share it with advertisers or data brokers.

Cookies and storage

The website uses one cookie, for staying signed in. The browser also keeps your recent songs and a few settings in its local storage. If you open the sign-in options, Google's sign-in script is loaded from Google.

Who handles data for us

• Our server, at Hetzner in Germany (EU).
• Cloudflare, which delivers the site and sees your IP address.
• Shazam (song recognition) and ACRCloud (humming): the audio clip.
• Google: Gemini (song previews, and your own audio only with your consent), Google sign-in if you use it, and Google Workspace for sending password reset email.

Some of these process data outside the EU under their own terms.

Legal basis

We handle data to provide the service you ask for (contract), to protect the service from abuse and count searches (legitimate interest), and to send your own audio to Gemini (your consent, which you can refuse each time).

Deleting your data

You can delete your data at any time in the app (Account, then Delete account, or Delete my data for a guest) or on the delete account page. This removes your account, email, password, history, lists and search counts right away. Backups that may still hold them are overwritten within 30 days.

Children

Deep Listen is not aimed at children under 13 and we do not knowingly collect their data.

Contact

Questions or requests: info@buinsoft.com. You also have the right to complain to your local data protection authority.