Privacy Policy

Introduction

Reprise is operated by Bradley Moller (Reprise) ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (the "App").

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

Account Information

• Email address
• Display name
• Profile photo (optional)
• Instrument type, skill level, and practice goals
• Self-attested age range (under 13 / 13+) for COPPA compliance — we do not collect a date of birth
• Spoken-language preference (used to direct voice-note transcription)

Practice Data

• Practice session duration, timing, and tools used (tuner, metronome, drone, recorder)
• Practice quality scores, pitch-accuracy data, and per-note tuning telemetry
• Goals, progress, notes, and tags
• Repertoire (pieces, exercises, and audition lists)

Audio Recordings & Voice Memos

• Practice recordings you choose to save, plus their metadata (duration, date, quality settings)
• Voice memos you record for the practice-notes transcription feature
• Audition-list image scans you upload for OCR processing

Social & Classroom Information

• Friend connections, challenge participations, leaderboard rankings
• Teacher–student relationships, parent–child connections
• Assignments, feedback, and progress reports
• Announcements, lesson notes, and any feedback you choose to send

Subscription & Billing Information

When you purchase Reprise Pro or Reprise Studio, your payment is processed entirely by Apple App Store (iOS) or Google Play Billing (Android). We do not see, receive, or store your full payment-card details or billing address.

• RevenueCat (our subscription-management vendor) receives a pseudonymous user identifier, the product purchased, and the active/expired status of your subscription
• We receive a record of your subscription tier and renewal/expiry status
• We do not receive your name, billing address, payment method, or App Store / Google Play account details

Information Collected Automatically

Device Information

• Device type, model, and operating system version
• App version and locale
• Pseudonymous device identifiers (Firebase Installation IDs, Crashlytics IDs)
• Push notification tokens from Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM)

Reprise does not use the iOS Identifier for Advertisers (IDFA) or the Android Advertising ID, and does not show third-party advertising.

Usage & Diagnostic Data

• App feature usage patterns, session frequency and duration
• Crash reports and error logs (Firebase Crashlytics)
• Aggregated usage analytics (Firebase Analytics)
• Per-request telemetry on AI feature usage (anonymous; counts and durations only — never the content of your audio or notes)

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the App and its features
• Create and manage your account, and authenticate your sessions
• Track and display your practice progress and history
• Enable social features, friend connections, and challenges
• Facilitate teacher–student–parent relationships and classroom workflows
• Process subscription purchases and manage entitlements
• Generate AI-powered features (transcriptions, summaries, OCR — see "AI Processing" below)
• Send notifications (practice reminders, achievements, parent/teacher alerts)
• Generate leaderboards and aggregated statistics
• Diagnose technical issues, prevent abuse, and protect users
• Comply with legal obligations

AI Processing

Several Reprise features rely on third-party AI services. In every case, your audio and text are processed in-memory by the AI provider and are not used to train their models.

Voice-Note Transcription

When you tap the voice-note button on the End Session dialog, the recorded audio is sent to our Cloudflare Worker, which forwards it to Cloudflare Workers AI (Whisper Large v3 Turbo) for speech-to-text transcription, then to Google Gemini Flash-Lite for cleanup using your repertoire as context.

• Audio is processed in-memory by the Worker and never persisted to disk or cloud storage
• The paid Google Gemini API tier is used, which carries a no-training guarantee for content sent to the model
• Per-request telemetry stores hashed user identifiers and request metadata only — never the transcription text itself
• You can disable the Voice Note button by simply not using it; it is opt-in per use

Audition-List OCR

Photos you scan for audition-list import are sent to Google Gemini AI for optical character recognition, then discarded. Recognized text is stored in your account; the source image is not retained on our servers.

AI Summaries & Insights (Pro tier)

Pro-tier features that generate session summaries, weekly digests, or other AI insights process your practice metadata (durations, quality scores, repertoire) via Google Gemini under the same paid-tier no-training guarantee. The generated text is stored on your account.

Data Storage and Security

Where Your Data Lives

• Firebase Firestore — user profiles, social features, classroom data, and configuration (Google, US-region storage by default)
• Firebase Authentication — secure account credentials and session tokens
• Firebase Cloud Messaging — push-notification routing
• Cloudflare R2 — audio recording storage
• Cloudflare Workers and KV — API services, rate-limit counters, and short-lived share-link metadata
• Turso (LibSQL) — primary practice-data store and cloud sync
• Local SQLite database on your device — offline cache and unsynced session state

Recording Shares

When you share a recording, we generate a short-lived public URL hosted at share.reprisemusic.app. Anyone with the URL can play the recording until it expires (24 hours for free users; longer for Pro subscribers as displayed in-app). Share URLs are unguessable but are not protected by a login — treat shared links as semi-public.

Security Measures

• All data is transmitted over HTTPS/TLS
• Firebase Security Rules and App Check restrict data access to the authenticated owner and authorized teachers/parents
• Subscription state, social interactions, and classroom links are validated server-side before any privileged operation
• Rate limiting on AI endpoints prevents abuse and contains per-user costs

Data Retention

• Practice data is retained as long as your account is active
• Audio recordings can be deleted at any time by you, individually or in bulk
• Account deletion removes all associated personal data within 30 days, except where retention is required by law
• Anonymized aggregate analytics may be retained indefinitely

Sharing Your Information

We do not sell or rent your personal information. We share data only as described below.

With Your Consent / Direction

• When you connect with friends, your display name, profile photo, instrument, and recent practice activity become visible to those friends
• When you join a teacher's classroom, your practice data, assignments, and feedback become visible to that teacher
• When you link a parent account, your practice data and classroom activity become visible to that parent
• When you generate a recording share link, anyone with the link can access that recording until it expires

Service Providers (data processors)

• Google (Firebase Authentication, Firestore, Cloud Messaging, Crashlytics, Analytics, Gemini AI)
• Cloudflare (Workers, R2, KV, Workers AI/Whisper)
• Apple App Store and Google Play (subscription processing)
• RevenueCat (subscription state management)
• Turso (cloud database hosting)
• YouTube (optional video search; only when you actively search)

Legal Requirements

• To comply with applicable law, court order, or valid government request
• To protect our rights, the rights of users, or the safety of any person
• In connection with the sale, merger, or transfer of our business, subject to this Privacy Policy continuing to apply

Children's Privacy (COPPA Compliance)

Reprise is designed for musicians of all ages, including children under 13. We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and applicable equivalents.

For users who self-attest as under 13:

• Core practice tools (tuner, metronome, recorder, practice tracking) are usable without parental consent
• Social features and Classroom features require linking a parent account, which serves as verifiable parental consent
• We collect only the minimum information necessary to operate the App
• We do not display advertising and do not use children's data for marketing
• We do not share children's data with third parties except service providers necessary to operate the App, as listed above
• Subscriptions are purchased through Apple's or Google's parental-purchase frameworks; we do not bill children directly

Parental Rights

• Parents may review their child's information via the Parent Dashboard within the App
• Parents may request deletion of their child's information at any time
• Parents can disable social features and limit classroom interactions through privacy settings

For COPPA inquiries, contact: privacy@reprisemusic.app

European Union & United Kingdom (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalents apply to our processing of your personal data.

Lawful basis

• Performance of a contract — for account creation, practice tracking, subscriptions, classroom and social features you use
• Legitimate interest — for security, abuse prevention, crash diagnostics, and basic product analytics
• Consent — for optional features (voice transcription, optional cloud-storage integrations, push notifications)
• Legal obligation — where retention or disclosure is required by law

Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure (the "right to be forgotten")
• Restrict or object to certain processing
• Receive a portable copy of your data
• Withdraw consent for consent-based processing at any time
• Lodge a complaint with your local data-protection authority

To exercise any of these rights, email privacy@reprisemusic.app. We will respond within one month, as required by GDPR Article 12.

International data transfers

Your data is processed on servers located in the United States and other regions used by Google Cloud, Cloudflare, and Turso. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms approved by the European Commission and the UK Information Commissioner's Office.

California Residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the rights below.

Categories of personal information we collect

Identifiers (email, account ID, device ID); commercial information (subscription status); audio recordings; internet/network activity (usage data); inferences drawn from practice activity. The "Information We Collect" section above gives the full detail.

"Do Not Sell or Share My Personal Information"

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising. There is nothing to opt out of, but you may still email us to confirm.

Your rights

• Know what personal information we have collected about you
• Request deletion of your personal information
• Correct inaccurate personal information
• Limit use of sensitive personal information
• Non-discrimination for exercising any of these rights

To exercise these rights, email privacy@reprisemusic.app. We will respond within 45 days as required.

Your Choices Inside the App

• View and edit your profile information
• Delete individual recordings, voice notes, or your entire account
• Control push notification preferences (per-device)
• Manage your subscription via iOS Settings or Google Play (Apple/Google handle cancellation, refunds, and billing inquiries)
• Use core features offline

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by posting the new policy at this URL and updating the "Last Updated" date above. Material changes will be announced in the App.

Contact Us

If you have questions about this Privacy Policy or wish to exercise any of the rights described above, contact us at:

• Email: privacy@reprisemusic.app
• Operator: Bradley Moller (Reprise)

For California residents who require a postal address for CCPA requests, please contact us via email and we will provide one.