Privacy Policy

Last updated: October 6, 2026

This policy explains what data the ChordBook Live app ("ChordBook", "we") collects, why, and what choices you have. ChordBook is developed by Yeeyson Duarte, based in Portugal, who is the data controller under the EU General Data Protection Regulation (GDPR).

1. Data we collect

• Account data: your email address, name and an encrypted password, used to create and sign in to your account.
• Your content: songs, chord sheets, playlists, setlists, annotations and band information you create in the app. It is stored on our servers so it can sync across your devices and with your band.
• Band data: when you join or create a band, members of that band can see your name, email and the content shared with the band.
• Subscription data: when you subscribe, Apple or Google processes the payment. We only receive the product, transaction identifier, purchase and expiry dates, so we can unlock your plan. We never see your card details.
• Push notification token: a device token (via Firebase Cloud Messaging) used to notify you about band activity. You can turn notifications off in your device settings.
• Advertising data (free plan only): Google AdMob shows ads and may use your device's advertising identifier and approximate location. In the EEA and UK we ask for your consent first; on iOS, personalised ads require your permission under App Tracking Transparency. Paid plans show no ads.

2. Data that stays on your device

• Microphone: used only by the tuner. Audio is analysed in real time on your device and is never recorded or uploaded.
• Camera and photos: used only when you import a song from a picture. Text recognition runs on your device; the image is not uploaded.

3. Cloud backups

If you connect Dropbox, Google Drive or iCloud, backups are written to and read from your own storage account. Access is used only for ChordBook backup files. You can disconnect at any time in Settings.

4. How we use your data

• To provide the app: accounts, sync, bands and backups (performance of a contract).
• To verify subscriptions and prevent fraud (performance of a contract, legitimate interest).
• To show ads on the free plan (consent, where required).

We do not sell your personal data.

5. Service providers

• Supabase — database, authentication and server functions (EU/US data centres).
• Apple and Google — app distribution, payments and subscriptions.
• Google Firebase — push notifications.
• Google AdMob — advertising on the free plan.
• Dropbox, Google Drive, iCloud — only if you choose to connect them.

Some providers may process data outside the EU under appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

6. Retention and deletion

We keep your data while your account exists. You can request deletion of your account and all associated data at any time by contacting us (see below); we will complete it within 30 days. Subscription records may be kept longer where required by tax law. Deleting your account does not cancel an active subscription — cancel it in your App Store or Google Play account settings.

7. Your rights

Under the GDPR you can access, correct, delete or export your data, object to or restrict its processing, and withdraw consent at any time. You can also complain to the Portuguese data protection authority, the CNPD.

8. Children

ChordBook is not directed at children under 13 (or under 16 in the EEA), and we do not knowingly collect their data.

9. Changes

We may update this policy. Significant changes will be announced in the app or on this page, with a new "last updated" date.

10. Contact

Questions or data requests: send us an email.