# Piper's Songbook Privacy Policy

_Last updated: 6 October 2026_

Piper's Songbook ("the app") is a recorder-learning app published by Arcadian Cloud (contact:
chris@arcadian.cloud).

## Summary

Practice progress, microphone audio and recordings stay on your device. Sign-in is optional.
If you sign in with Google or Facebook, the account service receives your name, email address and
provider account identifier to create and maintain your account. Usage analytics is optional. The app has no advertising.

## Optional usage analytics

Usage analytics is off until you turn on **Share usage analytics** in Settings & sources.
If enabled, Google Analytics for Firebase receives screen visits, app sessions, app/device details,
an app-instance identifier and approximate location derived from your network address. We use this
information to understand which pages people use and improve the app. We do not send your microphone
audio, recordings, practice results, name, email address or account identifier to Analytics.
Advertising identifiers, advertising personalization and Google Signals are disabled.

You can turn analytics off in Settings at any time. This stops collection and clears the local Analytics
identifier and queued data. Previously sent data may remain in Google's reports under our retention settings.
Google processes this data as described in [How Google uses information from sites or apps that use its services](https://policies.google.com/technologies/partner-sites).

## Optional accounts

The account service uses Better Auth, hosted on Vercel, with a Postgres database hosted on Supabase. Google or Facebook
handles the sign-in consent screen. Provider passwords are never entered in the app or stored by the
account service. These providers and hosting services receive the network information needed to
handle requests, such as your IP address.

The service stores your account profile, linked provider details and sessions. Authentication tokens
stored on Android are encrypted with an Android Keystore key and excluded from device backup.
Your account does not sync practice progress or recordings between devices.

You can sign out in Settings. Sign-out removes the session from this phone and attempts to revoke
its tokens on the server. If you are offline, server tokens remain valid until revoked or expired.
To delete your account, choose **Manage or delete account** in Settings, sign in in the browser and
choose **Delete account**. You may need to sign in again before deletion. This removes your account
and server sessions. It does not remove progress or recordings on your phone.
You can also request account deletion by emailing chris@arcadian.cloud.

## iPhone waitlist

If you join the iPhone waitlist on pipersongbook.com, we store your email address, the date you joined and
which link you came from (for example Instagram or TikTok). We use it only to tell you when the iPhone app
is available. It is stored in the same Supabase database as accounts and is never sold or shared. To be
removed, email chris@arcadian.cloud.

## Website link counts

When you open pipersongbook.com/app or tap a Google Play button on pipersongbook.com, we count the visit
or tap with the link it came from (for example Instagram), the referring website's domain and whether the
device is Android, iPhone or other. We do not store your IP address, cookies or any device identifier.

## Microphone

The app asks for microphone access (Android permission `RECORD_AUDIO`) so it can hear which note you play on your
recorder and give you feedback.

- Audio is analysed in real time **on your device only**. It is never uploaded or sent anywhere.
- The microphone is on only while a sound check, practice, lesson or recall page is open on screen. Sound check
  is available during onboarding and later from Settings or listening recovery. It is never used in the background.
- You can decline microphone access and still use the app in "play without listening" mode.

## Recordings kept on your device

- After a practice attempt you can play back your own playing ("Hear yourself"). This recording is held in memory
  only, and is discarded when you leave the page.
- When you play a whole piece "in time", the app keeps your first and your latest recording of that piece, so you can
  hear your progress. These files are stored in the app's private storage on your device.
- The app excludes these recordings from Android cloud backup and from device-to-device transfer, so they never
  leave the device.
- You can delete them at any time with **Settings & sources → Start over**, or by uninstalling the app.

## Learning progress

Your progress (the notes you've learned, practice seals and practice days) is stored only in the app's private
storage on your device. It is also excluded from cloud backup and device-to-device transfer, and never leaves the
device.

## Children

The app is intended for a general adult audience. Optional accounts are not intended for children.
If a child has created an account, contact chris@arcadian.cloud to request deletion.

## Changes

If this policy changes, the updated version will be published at this address with a new date.

## Contact

chris@arcadian.cloud