Privacy Policy

NoteFusion ("we", "our", or "us") is a music transcription application that converts live or recorded audio into Tonic Solfa and standard staff notation. This Privacy Policy describes how we collect, use, store, and protect information when you use the NoteFusion mobile application and related services.

By using NoteFusion, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please discontinue use of the app.

We collect only the minimum data necessary to operate and improve NoteFusion.

Audio processing is core to NoteFusion's service. We handle your audio with the utmost care:

• Processing only: Audio is sent to our ML transcription service solely to generate notation. It is never sold, licensed, or shared with third parties.
• Immediate deletion: Raw audio files are permanently deleted from our servers immediately after transcription completes — typically within seconds.
• No training without consent: We do not use your audio to train machine learning models without your explicit, informed consent.
• Transcription results: The generated notation (MusicXML, Solfa) is stored in your account library and is fully under your control — you can delete it at any time.
• Local microphone access: Microphone permission is requested only when you initiate a recording. We do not access the microphone in the background.

We use the data we collect exclusively for the following purposes:

• Service delivery: To transcribe audio into Tonic Solfa and staff notation.
• Account management: To authenticate you, manage your library, and sync your data.
• App improvement: Aggregated, anonymised usage data helps us identify bugs and prioritise features.
• Security: To detect and prevent fraud, abuse, and unauthorized access.
• Support: To respond to your inquiries and resolve technical issues.
• Legal compliance: To comply with applicable laws and regulations.

We do not use your data for advertising, profiling, or sell it to any third party.

We do not sell, trade, or rent your personal information. We may share information in the following limited circumstances:

• Service providers: Trusted infrastructure partners (e.g., cloud hosting, database providers) who process data on our behalf under strict data processing agreements.
• Legal requirements: If required by law, court order, or governmental authority, we may disclose information as legally compelled.
• Business transfers: If NoteFusion is acquired or merges with another company, your data may be transferred. We will notify you before this occurs.
• With your consent: In any other case, only with your explicit prior consent.

We retain your data only for as long as necessary to provide our services or as required by law:

• Audio recordings: Deleted immediately after transcription (within seconds).
• Account data: Retained while your account is active and for 30 days after account deletion (to allow recovery).
• Transcription outputs: Retained until you delete them, or when your account is deleted.
• Anonymised usage analytics: May be retained for up to 2 years in aggregated, non-identifiable form.
• Legal/compliance records: Retained for the period required by applicable law.

We implement industry-standard security measures to protect your information:

• Encryption in transit: All data between the app and our servers is encrypted using TLS 1.3.
• Encryption at rest: Sensitive data stored in our database is encrypted at rest.
• Authentication: JWT-based access and refresh token system with short token lifespans.
• Access controls: Principle of least privilege — only authorised personnel can access production systems.
• Regular audits: We perform regular security audits and dependency scanning.
• Incident response: In the event of a data breach, we will notify affected users in accordance with applicable law.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to certain types of data processing, including analytics.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us. We will respond within 30 days.

NoteFusion is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately and we will promptly delete that information.

Users between 13 and 17 years of age should use the app only with parental consent and supervision.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of significant changes by:

• Posting a notice in the NoteFusion app.
• Sending an email to your registered address (for material changes).
• Updating the "Last updated" date at the top of this page.

Continued use of NoteFusion after any changes constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests about this Privacy Policy or your personal data, please reach out:

We aim to respond to all privacy-related inquiries within 30 business days.