Orphea FAQ — every question we get, answered straight

This page is the public index of every question we get, in frequency order. For nuanced questions (algorithms, schemas, payments, AI), we link to dedicated posts.

If yours isn't here: support@orphea.app, we reply within 24h on weekdays. No fake chatbot, real human answers.

Orphea does 3 things well, and that's it :

1. Analyze your music — for fans: understand your audio DNA (BPM, energy, valence, structure). For artists: analysis of your own releases.
2. Discover — The Cut (Tinder-style swipe with visible audio features), Expand Vibe, cross-platform recommendations (Spotify / SoundCloud / Tidal / Apple Music / Deezer).
3. Pay independent artists — Stripe Connect, streaming royalties + D2F tips + future merch, with Trust Trade (artist sets the Orphea commission).

What we don't do: generate AI music, sell your data, run ads, track you off-app. By design.

Annual: -16% (~2 free months), payable upfront via Stripe.

Commitment: none. Cancel anytime from /settings → Subscription.

What we store: your email, subscription plan, track_analyses (analysis results), likes / dislikes, The Cut sessions, audio embeddings (384 dims, anonymized at aggregation).

What we never store: your passwords in plaintext (bcrypt server-side via Supabase Auth), your card data (direct Stripe, we never touch), your GPS coordinates, your contacts.

Who we share with: Vercel (hosting), Supabase (DB), PostHog (product analytics, opt-out possible), Sentry (error tracking, opt-out possible), Stripe (payments). No resale to third parties, no data monetization.

Full privacy policy: orphea.app/privacy. Want to exercise your GDPR right: email privacy@orphea.app, reply within 7 days.

• Stack: Next.js 16 (App Router, Server Components), strict TypeScript, Tailwind v4, Framer Motion (lazy-loaded), React Query.
• Backend: Supabase (Postgres + Auth + Storage), Edge Functions for heavy pipelines, pgvector for embeddings.
• AI / Analysis: open-source models for audio features (BPM, key, energy, valence), GPT-4o-mini for text insights, Wav2Vec embeddings for similarity. No fine-tuning on user data.
• Deployment: Vercel (hosting + Edge), Codemagic (iOS native via Capacitor), Supabase prod EU.
• Security: RLS Postgres everywhere, Ed25519 for Proof-of-Human, quarterly OWASP audits, GDPR-compliant.

Curious about code? Part of it is open-source (Proof-of-Human lib notably). The rest is private for strategic business reasons — we've documented the public architecture in our pillar posts.