Privacy Policy
Music-To-Sheet ("we", "our", or "us") takes your privacy seriously. This policy explains what data we collect, why we collect it, how it is used, who it is shared with, and what rights you have over your information.
1. Data We Collect
We collect only what is necessary to provide the service:
| Category | Data | Purpose |
|---|---|---|
| Account | Email address, authentication provider ID (e.g. Google or Apple sign-in token), display name (optional) | Authentication, account management, support |
| Audio | Audio files you upload or links you submit | Transcription processing only — permanently deleted immediately after |
| Conversion history | Track name, instrument, output format, generated notes, duration | Displayed in your in-app history; never shared externally |
| Rights declarations | Self-declared ownership or rights statement per track | Compliance record-keeping |
| Subscription | Current plan tier, purchase history via RevenueCat | Access control and billing verification |
| Usage analytics | App version, device OS type (not device ID), feature interaction events | Crash diagnostics and product improvement |
2. Audio Processing — Strictly Ephemeral
Audio is the most sensitive data we handle. Our commitment:
- Audio is transmitted to our servers solely to perform pitch detection and stem separation.
- Standard files are processed in under 60 seconds.
- Audio files are permanently and irrecoverably deleted from our servers immediately upon completion of processing.
- We do not store, cache, back up, or archive your audio for any purpose whatsoever.
- Your audio is never used to train, fine-tune, evaluate, or improve any AI or machine learning model.
- Each transcription is generated solely for you and is never shared with or reused for any other user.
3. How We Use Your Data
- To provide, operate, and maintain the App and its features.
- To authenticate your identity and verify your subscription status.
- To display your conversion history within the App.
- To respond to your support requests and communicate important service updates.
- To detect and prevent fraud, abuse, and violations of our Terms of Service.
- To comply with legal obligations.
We do not sell, rent, trade, or share your personal data with third parties for advertising or marketing purposes.
4. Legal Basis for Processing (EU/UK Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases of the General Data Protection Regulation (GDPR) and UK GDPR:
- Performance of a contract: Processing your account data, audio files, and conversion history is necessary to provide the App and fulfil our Terms of Service.
- Legitimate interests: Processing usage and diagnostic data to detect fraud, prevent abuse, secure the App, and improve product quality. You may object to this processing at any time (see Section 6, Your Rights).
- Consent: Where we rely on your consent (for example, optional profile information such as social media handles), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Legal obligation: Where we are required to process data to comply with applicable law, including tax, accounting, or law-enforcement requests.
If you have questions about the legal basis for any specific processing activity, contact us at support@musictosheet.com.
5. Third-Party Services
We use the following sub-processors to operate the App. Each is bound by data processing agreements and has its own privacy policy:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, and temporary file storage | Account data, conversion history, audio (temporary — deleted immediately after processing) |
| Replicate | AI stem separation (Demucs model) | Audio file URL (ephemeral; deleted after processing completes) |
| RevenueCat | Subscription and in-app purchase management | Anonymous app user ID, subscription status |
| Apple App Store | iOS app distribution and payment processing | Purchase receipts (managed by Apple under their privacy policy) |
| Google Play | Android app distribution and payment processing | Purchase receipts (managed by Google under their privacy policy) |
6. International Data Transfers
Music-To-Sheet is operated from the United Arab Emirates. To provide the App, we rely on service providers that process and store data in the United States and other jurisdictions outside your country of residence. This means your personal data may be transferred to, stored in, and processed in countries that have data protection laws different from those of your home country.
Specifically, the following service providers process data outside the EEA, UK, and Switzerland:
- Supabase (United States) — account data, conversion history, and temporary audio storage.
- Replicate (United States) — audio file URL for stem separation processing (deleted immediately after).
- RevenueCat (United States) — subscription status and anonymous device identifiers.
- Apple and Google (United States and global) — payment processing and app distribution.
For transfers of personal data from the EEA, United Kingdom, or Switzerland to countries not recognised as providing an adequate level of data protection, we rely on the following safeguards:
- Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our data processing agreements with each service provider.
- UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU SCCs, where applicable.
- Supplementary technical measures including TLS encryption in transit, encryption at rest, and ephemeral processing of audio files.
- Contractual obligations on service providers to notify us of any government access requests and to challenge such requests where legally permissible.
You may request a copy of the safeguards in place for any specific transfer by contacting us at support@musictosheet.com. Where required by law, we will provide the relevant contractual clauses with commercially sensitive information redacted.
By using the App, you acknowledge that your data will be transferred to and processed in the countries listed above, subject to the safeguards described in this section.
7. Your Rights (GDPR & Global)
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with comprehensive privacy laws, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you.
Request correction of inaccurate or incomplete data.
Receive your conversion history and account data in a portable, machine-readable format.
Request deletion of your account and all associated data. Completed within 30 days.
Request that we pause processing of your data in certain circumstances.
Object to processing based on our legitimate interests.
Our legal basis for processing your data is: (a) contract performance — to provide the transcription service you signed up for; (b) legitimate interests — for fraud prevention and product improvement; and (c) compliance with legal obligations.
To exercise any right, email support@musictosheet.com or use the account deletion feature in the App. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national data protection authority in the EU).
8. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information.
We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. We have not sold or shared personal information of any consumer, including minors under 16, in the preceding twelve (12) months.
As a California resident, you have the right to:
- Know what personal information we collect, use, disclose, and retain about you.
- Request deletion of your personal information, subject to certain legal exceptions.
- Correct inaccurate personal information we hold about you.
- Limit the use and disclosure of sensitive personal information (we do not use sensitive personal information for any purpose beyond providing the service you requested).
- Opt out of the sale or sharing of personal information (not applicable, as we do not engage in either).
- Non-discrimination — we will not deny service, charge different prices, or provide a different level of quality because you exercised your privacy rights.
To exercise any of these rights, contact us at support@musictosheet.com with the subject line "California Privacy Request". We will verify your identity before processing the request and respond within 45 days as required by law. You may also designate an authorised agent to submit requests on your behalf.
Categories of personal information collected in the past twelve months: identifiers (name, email, country), commercial information (purchase history), internet activity (app usage and diagnostics), and audio recordings (processed ephemerally — see Section 2). We disclose these categories only to the service providers listed in the "Third-Party Services" section, strictly for the purposes described.
9. Data Retention
| Data Type | Retention Period |
|---|---|
| Audio files | Deleted immediately after processing completes (typically under 60 seconds) |
| Active account data | Retained while your account is active |
| Deactivated account data | Retained for 60 days to allow recovery, then permanently deleted |
| Deleted account data | Permanently deleted within 30 days of your deletion request |
| Backup copies | Purged within 30 days following deletion of primary data |
10. Data Security
We implement industry-standard technical and organisational safeguards including encrypted data transmission (TLS 1.2+), encrypted storage at rest, row-level security policies in our database (Supabase), and strict access controls. No transmission or storage method is 100% secure — we cannot guarantee absolute security, but we take our obligation to protect your data seriously.
11. Children's Privacy
Music-To-Sheet is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If we become aware that a child under 13 has provided personal data, we will delete it promptly. If you believe your child has submitted data, contact us at support@musictosheet.com. Users between 13 and 17 should have parental or guardian consent before using the App.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via the App or by email, and will update the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes acceptance of the updated policy.
13. Contact
For privacy questions, data requests, or complaints:
We aim to respond to all privacy requests within 30 days.