Last updated: 17 July 2026. This policy explains what personal data the Piano Chords and Scales apps for iOS and macOS, and the chordsandscales.app website, collect about you, why we collect it, who we share it with, how long we keep it, and what rights you have.
Piano Chords and Scales is published by Sincere Apps SIA, a company registered in Latvia. For the purposes of the EU General Data Protection Regulation (GDPR), Sincere Apps SIA is the data controller for the data described in this policy.
You can reach us about anything in this policy, including any request about your data, at sincere.apps@gmail.com.
We do not ask you to create an account, and we do not know your name or email address unless you choose to contact us. We do not use advertising, we do not track you across other companies' apps or websites, and we do not sell your data. We do collect usage analytics, crash reports, purchase events, and information about your device and its settings, and this data is linked to a random identifier rather than to your name.
We use Google Firebase Analytics (which includes the Google App Measurement component) to understand how the app is used, so we can decide what to build and fix. This records which features you use — for example that a chord was played, a scale was viewed, or a paywall was shown — together with whether you are a paying user at the time. It does not record the musical content you create.
Firebase also automatically collects a random app-instance identifier, your device model, operating system version, app version, language, and an approximate location (country or region) derived from your IP address, along with session and engagement events.
We also set the following properties on your analytics profile: days since first launch, your chosen tempo, MIDI input and output status, instrument, octave, autoplay, notation and interface style, preferred text size, locale and preferred language, cumulative counts of chords, scales, progressions and songs played, and whether you have purchased.
Once per installation, about thirty seconds after you first launch the app, we send ourselves a snapshot of your device configuration. This includes your device model, operating system version, app version and build, colour scheme, text size, display scale, locale, language, region, calendar and layout direction.
It also includes the accessibility settings enabled on your device — whether you use VoiceOver, Switch Control, AssistiveTouch, inverted colours, reduced transparency, reduced motion, bold text, button shapes, greyscale, differentiate-without-colour, on/off switch labels, cross-fade transitions, shake-to-undo, closed captioning, mono audio, video autoplay, speak screen, or speak selection.
We collect this so the app works well for people who rely on these features. Because these settings can indicate a disability, we treat them as sensitive. We ask for your consent before collecting them, and you can decline without losing any functionality.
If you complete the introductory questions when you first open the app, we record your answers — the type of musician you describe yourself as and the topics you say you are interested in — along with which version of the onboarding you saw, which step you reached, whether you tapped through to see plans, how long it took, your App Store country, and your app version, device type and OS version. We use this to improve the introduction and to decide which content to build.
Purchases are processed by Apple. We never see your payment card, and Apple does not give us your name or billing address. We use RevenueCat to manage entitlements and to tell the app what you have unlocked. RevenueCat assigns your installation a random identifier and records your purchase and subscription status and your App Store country.
We also record purchase events on our own server — that a purchase, trial start, trial cancellation, subscription cancellation, expiry or renewal occurred, and which product it related to — so we can understand how the business is performing.
When the app checks whether you qualify for a special offer, it sends your random identifier to our server, which replies with yes or no. Nothing else is sent or stored in that exchange.
If you use the feedback form in the app or email us, we receive your name, your email address and your message, together with your app version, device type, OS version, purchase state and your random identifier. We use this only to answer you and to fix what you have reported. Your email address is used to reply and for nothing else — we do not add you to any mailing list.
Older versions of the app stored your songs in a different database format. When the app upgrades that database and the upgrade cannot be completed safely, the app makes a copy of your existing song database and, with your permission, sends it to us so we can find out what went wrong and avoid losing your work.
This copy contains the songs you have created, including their titles, sections, chords and any custom chord types, and it is linked to your random identifier. It is sent only when an upgrade actually fails — not during normal use — and it is stored where it cannot be reached from the web. We delete these copies once the problem is diagnosed, and within 90 days at the latest. If you decline, the app keeps the backup on your device only, and nothing is sent.
We use Google Crashlytics to receive reports when the app crashes or hits an error. A report contains the technical state of the app at the time — the type of error, a stack trace, your device model and operating system version, and a random installation identifier generated by Crashlytics.
The chordsandscales.app website does not use cookies, analytics, or tracking of any kind, and loads no third-party resources. Our web host records standard server logs, including IP addresses, for security and troubleshooting.
We do not collect your name (unless you tell us), your address, your date of birth, your contacts, your photos, your precise location, or your microphone or camera input. The app never records audio: it plays sound but has no recording capability. We do not use the Apple advertising identifier (IDFA), we show no adverts, and we do not track you across other companies' apps or websites. There is no account to create and no password to store.
The app asks for Bluetooth and local network access solely to discover and connect to MIDI instruments. We do not use these permissions to identify you or to learn your location, and no data from them leaves your device.
We do not know who you are. Instead, your installation is given a random identifier by RevenueCat, which looks like $RCAnonymousID: followed by a string of characters. This identifier is how our purchase records, onboarding answers, device snapshot and any support conversation are linked together.
We want to be straightforward about what that means: this identifier is pseudonymous, not anonymous. On its own it does not name you, but it does connect your activity across the app, and if you email us, your email address becomes connected to it too. Under the GDPR, data linked to it is personal data, and we treat it as such.
You can see your own identifier at any time in the app under Settings, where it can be copied. Quoting it to us is the quickest way for us to find and delete your data.
Under Article 6 of the GDPR we rely on the following:
Your accessibility settings may reveal information about your health, which Article 9 of the GDPR treats as a special category of data. We collect it only with your explicit consent, and the app is fully functional if you refuse.
We do not sell your personal data, and we do not share it for anyone else's marketing. We share it only with the providers who operate the service on our behalf:
We may also disclose data if we are legally required to, or to establish or defend legal claims.
Google, RevenueCat and Apple are based in the United States, so some of your data is transferred outside the European Economic Area. These transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the providers' certification under the EU–US Data Privacy Framework. You may request a copy of the safeguards we rely on.
If you are in the EEA or the UK, you have the right to access your data, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time.
To exercise any of these, email sincere.apps@gmail.com, quoting the identifier shown in the app's Settings screen. Without it we may be unable to locate your data, since we hold nothing else that identifies you. We will respond within one month.
If you think we have handled your data wrongly, you can complain to your local data protection authority. Ours is the Latvian Data State Inspectorate (Datu valsts inspekcija), dvi.gov.lv.
The app is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
Data sent between the app and our servers is encrypted in transit using HTTPS. Song database copies are stored outside the public web root and are not reachable from the internet. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we take reasonable measures to protect your data and to limit what we collect in the first place.
This service contains links to sites we do not operate. We are not responsible for their content or their privacy practices, and we encourage you to read their policies.
We may update this policy from time to time. If we make a material change to what we collect or why, we will say so in the app before the change takes effect. The date at the top of this page always shows when it was last revised.
Questions, requests, or complaints: sincere.apps@gmail.com.