Privacy Policy — GuitarManac Mobile App

1. Introduction

GuitarManac ("we", "our", or "us") is a mobile application for learning guitar, operated by a private individual based in Norway. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal data.

By using the GuitarManac mobile app you consent to the data practices described in this policy.

2. Data We Collect

2.1 Account Information

When you create an account, we collect the following through our authentication provider Clerk:

• Email address
• Password (hashed and stored by Clerk, never accessible to us)
• Google account information (email and profile name) if you sign up via Google

2.2 User-Created Content

You may create the following content within the app, which is stored on our servers:

• Songs: song titles, artist names, categories, and links to external resources (e.g. YouTube or tab URLs)
• Practice logs: minutes practiced, practice tags (e.g. Scales, Chords), and optional text notes
• Character profile: a display name and character skin choice

All user-created content is private to your account and is not visible to other users.

2.3 Automatically Collected Data

The app automatically tracks the following to provide its features:

• Learning progress: which lessons and courses you have completed
• XP and leveling data: experience points earned from completing lessons and logging practice
• Daily activity records: dates and minutes of practice sessions

2.4 Purchase Information

In-app purchases are processed by the Apple App Store or Google Play Store. We use RevenueCat as a purchase management layer. RevenueCat receives:

• Transaction IDs and purchase receipts
• Subscription status and renewal information
• Your anonymous app user ID (linked to your Clerk account)

We do not receive or store your payment card details, billing address, or other financial information. All payment processing is handled entirely by Apple or Google.

2.5 Data We Do NOT Collect

• Audio recordings: the guitar tuner processes audio entirely on your device using a local pitch detection algorithm. No audio is recorded, stored, or transmitted.
• Location data: we do not access your location.
• Contacts, photos, or files: we do not access your contacts, photo library, or file system.
• Device identifiers or advertising IDs: we do not collect IDFA, GAID, or device fingerprints.
• Analytics or tracking data: we do not use analytics SDKs, behavioral tracking, or crash reporting services in the mobile app.

3. How We Use Your Data

We use the data we collect to:

• Provide and operate the app's features
• Authenticate your identity and maintain your session
• Track your learning progress and practice history
• Manage your subscription status and unlock premium features
• Store and display your songs, practice logs, and notes
• Calculate and display XP, levels, and streaks

We do not use your data for advertising, profiling, or selling to third parties.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted by Neon in the EU (eu-central-1 region). The app communicates with our servers over HTTPS with TLS encryption. All API requests are authenticated using secure tokens issued by Clerk.

Some data is cached locally on your device using encrypted storage (Expo SecureStore) and standard app storage (AsyncStorage) to improve performance. This cached data is cleared when you uninstall the app.

5. Third-Party Services

We share data with the following third-party services, solely to operate the app:

Each third-party service processes data according to their own privacy policies. We encourage you to review them.

6. Device Permissions

The app requests the following device permissions:

• Microphone: used solely for the guitar tuner feature. Audio is processed locally on your device and is never recorded, stored, or transmitted. You can deny this permission and still use all other features.

No other device permissions are requested.

7. Data Retention

We retain your data for as long as your account is active. If you wish to have your data deleted, contact us at contact@frode.dev and we will delete your account and associated data within 30 days.

8. Your Rights

Under the EU General Data Protection Regulation (GDPR) and Norwegian data protection law, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate data.
• Erasure: request deletion of your data.
• Data portability: request your data in a machine-readable format.
• Restriction: request that we limit processing of your data.
• Objection: object to processing of your data.

To exercise any of these rights, contact us at contact@frode.dev. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

9. Children's Privacy

The app is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete that data. If you believe a child under 13 has provided us with personal data, please contact us at contact@frode.dev.

10. International Data Transfers

Your data is primarily stored in the EU. Some third-party services (Clerk, RevenueCat) may process data outside the EU/EEA. Where this occurs, these providers maintain appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms to ensure your data is protected.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. If we make material changes, we will notify you through the app or via email. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or your personal data, contact: contact@frode.dev