ColorDoReMi Privacy Policy

1. Scope and core principles

This policy covers the ColorDoReMi iOS app, its supporting services and the product and support pages on ColorDoReMi.com.

• No registration: the app does not require your name, phone number, email address or a social-media sign-in.
• Local first: personal scores are written first to the device's SQLite database. Restoring membership does not restore scores across devices.
• Automatic latest copy: a newly created or edited score automatically stores the latest copy for this installation. Existing scores are not bulk-uploaded when this policy changes; each is uploaded only after its next edit.
• Upload only when requested: microphone recordings stay on your device until you confirm the processing notice and submit them for cloud AI.
• No advertising tracking: the app has no advertising SDK, does not collect IDFA and does not track you across apps or websites.

2. Data we process

3. Microphone, files and cloud AI

Text-only creation, manual creation, local MusicXML/MIDI import and the free demonstration do not need microphone access. The system asks for it only when you choose Record Demo.

If you submit audio, our server first converts it into bounded pitch and onset observations. Original audio is not sent to the model provider. The observations, your text or structured score data may be sent to the active model provider to create a draft; cover generation may use a score summary and scene description without original audio.

The maximum retention period is shown before every submission and is currently no more than 24 hours. You can delete a demo and its cloud task sooner. AI output is an editable draft and is not guaranteed to be note-perfect.

4. Service providers and international processing

We do not sell or publish personal scores, or disclose score content to unrelated third parties. The following processors may handle relevant data only for private score storage, purchase verification or an AI feature you separately confirm:

• Apple processes App Store purchases, subscriptions and restoration under Apple's own privacy terms.
• Cloud hosting and object-storage providers act only on our instructions to provide private copy storage, security and operations for our API, database and private files; they may not publish scores or use them for unrelated purposes.
• OpenAI processes pitch observations, text or structured-score summaries and optional cover inputs only after you see a separate notice and explicitly confirm that cloud-AI submission. Original audio is not sent to OpenAI.

Cloud AI may involve processing outside your country. Before enabling it in a territory, the operator must establish the required transparency, consent, contracts and transfer safeguards. Where these are not complete, cloud AI will remain unavailable rather than silently switching provider.

5. Retention and deletion

Local Data has no cloud-copy consent switch. It provides separate actions to delete all cloud copies and to delete the current anonymous cloud account and associated cloud data. Deleting that account does not delete local scores or cancel an Apple subscription; using a server feature again may create a new random installation identity. Restoring membership restores entitlement only, not missing local scores.

• Local scores remain until you delete them in the app, clear app data or uninstall the app.
• Original AI audio is automatically removed within the period shown at submission, currently no more than 24 hours; deleting a task may trigger earlier removal.
• Cloud copies remain until you select Delete all cloud score copies or delete the current anonymous cloud account. Deleting copies does not disable future automatic storage; creating or editing a score later creates a new latest copy.
• Subscription, credit, refund, security and audit records are kept only as needed to perform transactions, prevent fraud and meet legal obligations, then deleted or anonymised.

6. Children

A child should use the app with a parent or guardian where required by law, and the guardian should accept this policy and the Terms. A separate cloud-AI notice still asks for the age range and who explicitly confirms that submission.

We do not use children's personal data for targeted marketing, provide advertising tracking or ask children to submit their name, school, contact details or photograph. A guardian may use the in-app deletion controls or contact support to request access, correction or deletion.

7. Your choices and rights

• Refuse microphone access and continue using features that do not record.
• Do not submit cloud AI and continue with the free example; an active Basic member can still create manually and import locally.
• Delete all existing cloud score copies in Local Data; a later score creation or edit will store a new latest copy.
• Delete AI tasks, demos, local projects or the anonymous cloud account and associated cloud data.
• Contact support to request access, correction, a copy, deletion or an explanation of server-held data. EEA, UK and other local rights, including objection, restriction, portability and a complaint to the competent authority, apply where provided by law.

8. Security, changes and contact

Installation credentials are kept in secure system storage; the server stores only a credential digest and verifies transaction evidence server-side. Network requests use HTTPS and private files are not exposed through public media URLs.

If the purposes, data categories or providers materially change, we will update this page and obtain consent again where required. Privacy questions can be sent to support@colordoremi.com.