Privacy Policy
LiveSheet is a sheet music reader and editor that can listen to you play. That is the part most people want to know about, so it comes first: the audio is analysed on your device and never leaves it. The one exception is a recording that an invited beta tester chooses to attach to a report, described below.
The short version. No advertising, no third-party analytics, no tracking pixels, no third-party trackers of any kind. Your microphone is used to follow the music while you play; the audio is processed on your device, in real time, and is never sent to us or stored by us. Without an account your library stays on your device. With an account it is kept in your account so it can sync. The app sends us a small amount of usage statistics and data about how LiveTrack followed you, all of which you can turn off. Never audio, never your charts, never their titles or words.
The microphone
This is the part worth reading carefully, because it is the part people reasonably worry about.
LiveTrack, the feature that follows you through the chart, needs to hear what you are playing. When you start it the first time, your device asks your permission to use the microphone. If you grant it:
- The audio is processed on your device, in the app or in your browser, to work out where in the song you are.
- It is not streamed to any server, not to ours and not to anyone else's.
- It is not recorded or stored by us, and it is not kept after the moment it is analysed.
- What the engine produces is a position in a chart and a tempo. Nothing in it identifies anyone.
You can withdraw microphone permission at any time in your device or browser settings. LiveSheet keeps working as a reader and editor without it; only LiveTrack stops.
LiveTrack data
LiveTrack is in Beta, and following a real band in a real room is hard, so it sends us data about how it went. Two kinds:
- A summary of each session: numbers such as the tempo it heard, the bars it followed, when it lost its place and found it again, how long the session ran and how it ended, the app version and the kind of device.
- The engine's log of some sessions: every session where it never found its place or where you had to correct it, and about one in ten of the others, at most ten a day from one device. The log is what the engine computed while it listened: numbers describing the sound, a few times a second (how strongly each of the twelve notes of the scale sounds, and how strong each beat is), and the tempo and positions it chose. It also carries the chords of the chart being followed, bar by bar, because a log is not useful without knowing what the band was meant to play. It never carries the chart's title, artist, lyrics, cues or any text you typed.
No audio, and nothing that can be played back. Both refer to a chart only by an internal ID. They are sent only when LiveTrack is not running, and the Usage statistics switch (below) turns both off.
Reports you send (beta testers)
If you are an invited beta tester, you can send us a report from Account settings, Send a report. A report holds your own note and the app's startup log: a technical record of what the app did since it started, with email addresses and sign-in tokens removed. It goes to our own private storage, only when you press Send, and only from a signed-in account on our list of testers. We use it to find and fix what you report.
A tester may be offered the choice to add a recording of a session to a report. It is off unless you tick it for that report. The recording may include other people in the room, so send it only if they are fine with that. We may keep it as test material for LiveTrack; ask us and we delete it. Apart from the LiveSheet team's own accounts, this is the only way audio ever leaves a device.
Usage statistics
The app sends us usage statistics: which screens and controls are used, how often features such as LiveTrack and the Trainer are used, how long things take, the app version, the kind of device and the interface language. They help us see what works and what confuses people.
- They are ours alone. They are collected by LiveSheet itself and kept in our own database in the EU, not by Google Analytics or any other third party.
- They are tied to a random install ID that the app makes on your device the first time it runs, and to your account when you are signed in, so the history of one install stays together. They are pseudonymous, not anonymous. On iPhone and iPad the install ID is kept in the device's keychain, so it stays the same if you delete the app and install it again.
- They never contain your charts, song titles, lyrics, anything you type, audio, or your contacts. Your IP address is not stored with them.
- The same switch covers the LiveTrack data above.
- They are on by default, and you can turn them off in Account settings, under My data, Usage statistics. Turning them off deletes anything waiting to be sent, sends one note that you turned them off, and then nothing more until you turn them back on.
What is collected, and why
| What | Where it comes from | Why |
|---|---|---|
| Email address and name, and with Google a profile picture | Apple or Google, when you sign in | To create and identify your account. We never see your password. Signing in is optional; it is needed for Pro. |
| Your charts, setlists, shows, pencil marks, the original PDFs you imported, and view settings | You, as you use the app, when you are signed in | To keep your library in your account, back it up, and show it on your devices and in the web app. Without an account, all of this stays on your device. |
| Subscription status: plan, renewal date and an Apple transaction reference | Apple, when you subscribe to Pro | To know that Pro is active. Payment is handled entirely by Apple; we never see your card or payment details. |
| LiveTrack session summaries, and the engine logs of some sessions with the chart's chords | The app, after you use LiveTrack | To improve LiveTrack (see above). No audio, no titles or words. You can turn them off. |
| Usage statistics and an install ID | The app | To improve LiveSheet (see above). You can turn them off. |
| Reports you send, as a beta tester | You, only when you press Send | To find and fix what you report. A recording only if you tick it for that report. |
The launch list
If you leave your email address on livesheet.music to hear when LiveSheet is released, we keep that address, the date, and which form you used. We use it only to send you news about LiveSheet's release. It is not used for anything else, not added to any other list, and never shared or sold. To have it removed at any time, write to hello@livesheet.music.
What is never collected
- No advertising or ad networks. LiveSheet shows no ads and is not funded by them.
- No third-party analytics. No Google Analytics, no Firebase, no session recording, no heatmaps, no screen capture, no tracking pixels.
- No tracking across other apps or websites, no third-party trackers, and no cookies used for tracking.
- No audio leaves your device, except a recording a beta tester chooses to attach to a report.
- No location data, no contacts, no photo library, no device fingerprinting.
- We do not sell, rent or share your personal data.
Where it lives. Our databases are hosted in the European Union (Frankfurt). Some providers, such as Netlify and the sign-in services, may process data in other countries; where that means a transfer out of the EEA or the UK, it relies on the European Commission's Standard Contractual Clauses in their terms.
What stays on your device
Without an account, your whole library (charts, setlists, pencil marks and imported PDFs) is stored only on the device you use, and we never receive it. Your view preferences (fonts, sizes, zoom, which view you had open, transpose settings) and the install ID are stored on each device too. Deleting the app or clearing the browser's data removes them, except the app's install ID, which the keychain keeps (see Usage statistics). Export a backup first if you want to keep your library.
If you end a Pro subscription, each of your devices keeps its own copy of the library as it was at that moment, and from then on the copies are no longer kept in sync.
Your rights
If you are in the EEA or the UK, the GDPR gives you the rights to access your data, correct it, delete it, receive a copy in a portable form, object to processing, and withdraw consent. Similar rights exist in many other places, including Israel. LiveSheet honours these requests wherever you live, because maintaining two standards would be more work than honouring one.
The legal bases we rely on are: performance of a contract (running the service you use and, for Pro, pay for), consent (the microphone, the launch list, and each report you send), and legitimate interests (usage statistics and LiveTrack data to improve the app, which you can switch off or object to, and keeping the service secure and working).
To exercise any of these, write to hello@livesheet.music. We will respond within 30 days. You also have the right to complain to your local data protection authority.
Deleting your data
You can delete your account inside the app: Account settings, Delete my account. That deletes your account and everything in it: charts, setlists, shows, pencil marks, imported PDFs, and any reports you sent, recordings included. You can also export your library before you go. Deleting your account does not cancel a Pro subscription; that is done in your Apple ID's subscription settings.
Usage statistics and LiveTrack data are kept when an account is deleted, but everything that links them to you is removed: your account is taken off them and the install IDs are replaced with new random ones, so they can no longer be traced to you. A request by email to erase your data is handled the same way.
One honest detail about how deletion works inside the app: when you delete a chart, a setlist or a show, it is marked as deleted rather than erased immediately, so that it can be restored if you deleted it by mistake. It stops appearing in the app at once, and it is removed with everything else when your account is deleted. Backups are retained by our database provider for a short period and expire on their own schedule.
How long things are kept
Your account and library are kept for as long as your account exists. The most detailed usage records (single taps, and the app going to the background and back) are deleted after 180 days; the rest of the usage statistics and the LiveTrack session summaries are kept while they help us improve LiveSheet. LiveTrack engine logs are deleted after 12 months, unless we keep one as test material, and then without its install ID. Reports are kept while they help us fix what they describe, and are deleted with your account or when you ask. The launch list is kept until LiveSheet is released and we have told you, or until you ask us to remove your address, whichever comes first.
Age
LiveSheet is not intended for anyone under 16, and accounts should not be created by them. If you believe someone under 16 has an account, write to us and it will be removed.
Security
Connections use HTTPS. Access to your data is enforced at the database level, so one account cannot read another's library. No system is perfect, and this one is maintained by a small team. If you find a security problem, please report it to hello@livesheet.music and it will be taken seriously.
Changes
When this policy changes, the date at the top changes with it. If a change materially affects what happens to your data, you will be told in the app rather than left to notice.