Udio

Is Udio safe?

Udio will not harm your phone, has no reported breach, and has little contact between strangers. Where it falls short is what happens to your data and your music. Its terms let it train on every prompt, lyric and song, with no opt-out. Its privacy policy says it sold or shared contact, device and location data with advertising partners. And since its deal with Universal Music in October 2025 you cannot download the songs you make. We score it 53/100, above Suno (49), its closest rival, which suffered a large breach in 2025.

Your songs stay inside Udio

On 29 October 2025 Udio's chief executive, Andrew Sanchez, announced the partnership with Universal and wrote: "Starting today, downloads from the platform will be unavailable." Users were angry, and from 3 November Udio opened a 48-hour window to download older songs, the Associated Press reported. The terms revised on 12 November 2025 now say plainly that you may not download copies of any output, and they ban commercial use of what you make.

You can still share a song through its udio.com link, which anyone can open without an account. Universal's announcement said the current product would run as a "walled garden" with fingerprinting and filtering until a new, licensed platform launches in 2026. We found no announcement of that launch on Udio's blog by late October 2026.

For you, this means two things. Do not treat Udio as a place to store music you care about. And if you paid for a plan expecting to release songs, the current terms do not allow it.

What Udio collects and who gets it

Apple's label is unusual: it lists contact info as data used to track you across other companies' apps and websites. Most apps that track list identifiers. Linked to your identity are your name, email, photos or videos, user and device IDs, and diagnostics.

The privacy policy, in effect since 19 May 2025, explains why. It says that in the past 12 months Udio sold or shared profile and contact data, device and IP data, web analytics, social network data and geolocation with advertising partners, for targeted ads. US users can opt out through the cookie settings on the website or by email. Data is hosted in the United States.

Training is set out in the terms, not the policy. Section 1.1 says Udio may use your input and any output "to train or otherwise improve" its models. There is no setting to stop it.

The copyright lawsuits

In June 2024 Universal, Sony and Warner sued Uncharted Labs, the company behind Udio, in federal court in New York, alleging it copied their recordings to train its models. Udio argued that training is fair use. Universal settled in a deal announced on 29 October 2025 and Warner on 19 November 2025, both with licences for a new service. The amounts were not disclosed.

Sony did not settle. The judge refused it permission to amend its complaint on 29 June 2026, and on 20 July 2026 Sony filed a second suit over more recordings, which Udio answered in August. Discovery in the first case was still running in October 2026. Independent artists have filed their own suits since June 2025. These are all allegations; no court has ruled on whether Udio infringed.

The suits are against Udio, not its users, and they do not count as regulator actions in our score. They matter because they explain the locked-down product you get today.

Who should be careful

• Musicians: you cannot download or sell Udio songs under the current terms, so do not plan a release around it.
• Anyone uploading audio or lyrics: whatever you submit can train Udio's models, and the terms make you responsible for having the rights.
• Parents: the App Store rates Udio 13+ and notes mature themes and user-generated content, while the terms require users to be 16.

How to use Udio more safely

1. Deny the tracking request on an iPhone so your contact details are not used to follow you across apps.
2. In the US, use the cookie settings link on udio.com or email [email protected] to opt out of the sale or sharing of your data.
3. Do not upload recordings, lyrics or photos you do not own.
4. If you do not want to be bound by arbitration, follow the opt-out steps in Section 9 of the terms and check the deadline there.

How we scored it

Privacy (40) and transparency and control (40) are the weakest factors: training with no opt-out, data sold or shared with ad partners, and songs you cannot take with you. Security (58) reflects a clean breach record but little public detail on protection. The regulatory record (86) is high because no privacy or consumer regulator has acted; the label and artist suits are copyright cases. For a similar app with a different set of settlements, see Suno.