Privacy Policy

1. Who is responsible

• Data controller: to be published, owner of YomiScore
• Tax ID (NIF): to be published
• Postal address: to be published
• Privacy contact: [email protected]

This policy covers the YomiScore app (Android, iPhone and iPad), its sync service and this website. YomiScore is not in the app stores yet; until it is, it is distributed as test builds, which this policy also covers.

2. What data we process

In guest mode

You don't create an account and you don't send us anything: your library, annotations and settings are stored only on your device. Features that rely on our server — sync, bands, director mode and the Discover catalog — require an account.

Your account

You sign in with Google, with Apple, or with an email address and password through Firebase Authentication, a Google service. Firebase handles your password: we never see it or store it. For your account, we keep:

• the identifier Firebase assigns to you and your email address (if you use Apple's Hide My Email, this is the relay address Apple creates);
• your name and profile photo, if your sign-in provider shares them with us or you change your name in the app;
• the date you signed up and a sign-in history: each sign-up or sign-in with the method used (Google, Apple or email) and its date, plus the date of your last sign-in and how many times you have signed in;
• if your account has been suspended for breaching the terms, the date and the reason.

Your session is kept alive with tokens that are stored on your device and expire on their own.

Your library, if you sync

While you are signed in, YomiScore syncs the following across your devices:

• the PDFs of your scores;
• each score's details: title, composer, arranger, genre, key, instrument, tags, rating, difficulty, page count, file size, whether it's a favorite, and its settings (bookmarks, jump links, crops, notes, approximate duration, metronome settings, practice-track markers and, if you added it from Discover, where it came from: the IMSLP work or Mutopia piece, the file and its license);
• your setlists and collections;
• your annotation layers and everything you draw or write on them.

PDFs are stored under their SHA-256 fingerprint: if two people upload exactly the same file, the server keeps a single copy and records who has access to it. Knowing a fingerprint is not enough to open a PDF — only the person who uploaded it can, along with the members of your band if you share it. Each account has a storage limit (currently 5 GB, with files of up to 200 MB).

When you delete a score, a setlist or anything else, it is marked as deleted so that it also disappears from your other devices. That record and the PDF remain on the server, hidden, until you delete your account. If you'd like us to remove something specific sooner, just email us.

Bands and director mode

If you create a band or join one with an invite code, we store the band's name, its members, each person's role (director, assistant or musician), their instrument if they add one, and the date they joined. Other members can see your name, profile photo, role, instrument, the date you joined and the internal number YomiScore uses to identify your account.

Anything you share with a band — setlists, including their scores' details and PDFs, and annotation layers — can be viewed and downloaded by every member, who can also save a copy to their own library. If you stop sharing it, leave the band or are removed from it, it is no longer available to the band, but any copies other members have already saved belong to them.

In director mode, whoever is leading sends their position (setlist, piece and page) and the server instantly relays it to the members who are connected. That position is never written to the database: only the latest one is held in memory, for anyone who joins late, and it is discarded when the session ends or the server restarts.

Discover: the public-domain catalog

Searches and work details are requested from IMSLP and The Mutopia Project by our server, in its own name: those sites see what is searched for, but not who is searching. The exception is Mutopia's preview images: the app loads them directly from www.mutopiaproject.org when it shows you Mutopia works, so Mutopia receives your IP address and the app's technical details (its user agent), as any website you visit does. We keep the results for a limited time (from a few minutes to a few hours) so we don't overload them, and we keep a temporary per-account request count to prevent abuse. IMSLP and Mutopia downloads pass through our server on their way to your library. Some IMSLP downloads require passing its anti-bot check; when that happens, YomiScore opens the IMSLP page in your browser and, from that point on, you are dealing directly with IMSLP and its privacy policy applies. The same goes for opening a work's original page, on IMSLP or Mutopia, in your browser.

Camera, microphone and other permissions

• Camera. To scan scores and, if you turn on head-turn page turning, to detect with the front camera when you turn your head. Detection is done on the device by Google's ML Kit: those images are neither saved nor sent anywhere. Scanned pages become a PDF in your library and, like any other score, are synced if you are signed in; on Android, the scanner is the one in Google Play services, which also works on the device. ML Kit and Google Play services send Google encrypted technical diagnostics and usage data about these features — device and app information, an installation or device identifier, performance metrics, the feature's configuration and error codes — but not camera images or your scores. We don't receive that data.
• Microphone. For the tuner, the tools' listening features and the rehearsal recorder. Sound is analyzed in real time on the device. Recordings are saved on your device, next to their score, and YomiScore never uploads or syncs them. Your device's own backups (Google's on Android, iCloud on iPhone and iPad) may include them, like everything else YomiScore stores on it, depending on how you have set them up.
• Practice tracks. Audio you add for practice stays on the device (and, like recordings, in its backups if you have them turned on); only the markers you place on it are synced, as part of the score's settings.
• Files. YomiScore only accesses the PDFs you pick when importing, or that you open or share with it from another app.
• Pedals. Bluetooth pedals work as a keyboard that you pair in your system settings: YomiScore doesn't ask for Bluetooth permission and only receives key presses while you are using it. The keys you assign are stored on the device.
• Metonik. YomiScore checks whether Metonik, our sister tuner and metronome app, is installed so it can offer to open it. The check happens on your device and sends us nothing.

Your preferences (color palette, ambience, light or dark theme, pedals…) also stay on the device.

If you contact support

We process your email address, your message and any attachments so we can reply to you.

The waitlist on this website

If you sign up here to hear when YomiScore launches, we store your email address, your name if you give it, your device type, your language, where on the website you signed up and the related dates. We don't ask you to confirm your address: if our email reaches you and you never signed up, reply to it and we'll delete the address. That email will tell you how to unsubscribe. The form goes through Cloudflare, which also passes on to us your IP address and your browser's technical details (its user agent and language). We don't store them with your sign-up: the IP address is only used to limit how many submissions can be made in a row and, if someone goes over that limit, it is logged with the browser details among our security alerts.

Security

To protect the service, we log suspicious requests to our server (for example, attempts to reach paths that don't exist or that are commonly used in attacks), attempts to sign in to the admin panel, excessive submissions to the waitlist and attempts to sign in with a suspended account: the IP address, path, method, browser or client (user agent) and time, plus, in the last case, that account's identifier. These alerts are deleted automatically after 90 days. Our hosting providers, Render and Cloudflare, also keep technical connection logs, which may include your IP address.

What we don't do

YomiScore contains no advertising, no third-party trackers and no analytics or crash-reporting tools that send data to us: we receive no usage statistics from the app. The only diagnostics that leave it are those that Google's camera libraries send to Google (see “Camera”). We don't sell or hand over your data, we don't build profiles, and we don't make automated decisions that affect you. This website uses no analytics or advertising cookies, and its fonts and assets are served from our own domain. If you pick a color palette on the home page, your browser remembers it in its local storage (localStorage): it never leaves your browser and is cleared along with the site's data. The admin panel, which only the YomiScore team uses, relies on a technical session cookie.

3. Why we use it, and on what legal basis

• Providing the service (account, sync, bands, director mode, catalog and support): performance of the contract you enter into by accepting the terms of use (Art. 6(1)(b) GDPR).
• Keeping YomiScore and its users safe (sign-in history, security alerts, usage limits and suspending accounts that breach the terms): our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR). You can object; we will look at your case, although sometimes we won't be able to stop without putting the service at risk.
• Telling you when we launch (waitlist): your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Handling your rights and complying with the law: compliance with legal obligations (Art. 6(1)(c) GDPR).

4. Who can access your data

Within YomiScore, only the authorized team, through a protected admin panel, and only when needed to support you, keep the service running or investigate a security issue. Outside YomiScore, only the providers we need to run it, who act as processors on our behalf and under contract:

• Google (Firebase Authentication), for signing in. If you sign in with Google or Apple, that company also acts as an identity provider under its own privacy policy.
• Render, which hosts our server, database and PDF files.
• Cloudflare, which hosts this website and forwards the waitlist and the admin panel to our server.
• The email provider we use to run [email protected].

In addition, Google receives the ML Kit and Google Play services diagnostics described under “Camera”, which it handles under its own terms; we have no access to them. The Mutopia Project receives your IP address when the app loads its preview images.

Members of the bands you belong to can also see your data, as described above. We don't disclose it to anyone else unless the law or a competent authority requires us to.

5. International transfers

Google, Render and Cloudflare are US-based companies and may process data outside the European Economic Area. When they do, those transfers rely on the standard contractual clauses approved by the European Commission and, where the provider is certified, on the EU-U.S. Data Privacy Framework. For more details, write to [email protected].

6. How long we keep it

• Account, synced library and sign-in history: for as long as you keep your account. When you delete it, we erase them within 30 days at most.
• PDFs: until you delete your account. If another account uploaded exactly the same file, it is kept for them, but your access is removed.
• Band data: while the band exists and you are a member.
• Security alerts: 90 days; after that they are deleted automatically.
• Waitlist: until we tell you about the launch and for no more than 12 months after it, or until you ask to be removed.
• Support requests: as long as needed to resolve them, and up to 12 months afterwards.
• Records of rights requests (for example, that we deleted an account): up to 3 years, so we can show that we handled them.
• Backups: automatic database backups roll over within a few days, and deleted data disappears with them.

If the law requires us to keep any data for longer, we will keep it restricted and available only to the competent authorities. Whatever the app stores on your devices (library, recordings, practice tracks and settings) stays there until you delete it or uninstall the app.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent, at any time by writing to [email protected] from your account's email address. We will reply within one month, which may be extended by two further months for complex requests, in which case we'll explain why. If we can't reliably confirm that the request comes from you, we'll ask you to confirm it, for example by replying to a message we send to your account's email address.

To delete your account, follow the steps on Delete your account.

If you believe we haven't handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the supervisory authority of the EU country where you live. We'd appreciate the chance to put things right first, so please get in touch.

8. Children

YomiScore is not directed at children under 14. To create an account you must be at least 14 — the age Spanish law sets for consenting to the processing of personal data — or the minimum age required in your country, if higher. Below that age, a parent or guardian must give consent, and they can contact us at [email protected]. If we learn that an account was created without meeting this requirement, we will delete it.

9. Security

Communication with our server is encrypted (HTTPS), sessions expire and can be revoked, each account can only reach its own data and whatever its bands share, and files are checked before they are stored. No system is infallible: if we detect an incident affecting your data, we will let you know and notify the authority where required.

10. Changes to this policy

If we change this policy, we will update the date at the top. If the change is significant, we will let you know in the app or by email before it takes effect.