Privacy Policy

Last updated: 25 August 2026

This Privacy Policy explains what data KeyEar ("the App") processes and why. The data controller is Rasmus Møller Larsen, a private individual based in Germany, reachable at keyear.app@gmail.com.

1. Data that stays on your device

The App is designed to run almost entirely client-side. The following data is stored only in your own browser or device storage (localStorage/IndexedDB) and is never transmitted to us:

• Your settings — theme, key label mode, piano range, accent color, and similar preferences.
• Songs you've imported, recorded, or transcribed, and your progress/streak data.
• Microphone audio, used only for on-device pitch detection while the Microphone input is active — the raw audio is processed locally and is never uploaded, recorded to a server, or stored by us.
• MIDI data from a connected device (via Web MIDI or Bluetooth LE MIDI) — handled locally in your browser, never sent to us.

Because this data never leaves your device, uninstalling the App or clearing your browser's site data for KeyEar deletes it.

2. Hosting

The App is served via Cloudflare. Like any web host, Cloudflare's infrastructure processes standard connection metadata (e.g. IP address, request timing) to deliver the App to your browser, acting as a data processor on our behalf. We don't run any analytics, tracking scripts, or advertising cookies ourselves.

3. Purchase and email data

KeyEar is unlocked with a one-time purchase. Depending on platform, payment is handled directly by Stripe (web), Apple (iOS), or Google (Android) under their own privacy policies — we never see or store your card details.

To let one purchase unlock the App on web, Android, and iOS, we use RevenueCat to link your purchase to an email address you provide. We send you a one-time "magic link" to verify that address — no password is created or stored. Your email and purchase status are stored by RevenueCat, acting as a data processor on our behalf, solely to recognize your unlock across devices. We don't use this email for marketing, and we don't otherwise link it to the on-device data described in Section 1.

4. Your rights

If you're in the EU/EEA, the GDPR gives you the right to access, correct, delete, or restrict processing of your personal data, to data portability, and to object to processing — and the right to lodge a complaint with your local data protection authority. Beyond the email address held by RevenueCat for unlocking a purchase (see Section 3), we don't hold personal data on our own servers — the rest of these rights concern data already stored locally on your own device, which you control directly. To exercise a right over the data held by RevenueCat, contact us and we'll action or forward the request.

5. Children

The App is not directed at children under 16 and we don't knowingly collect data from them.

6. Changes to this policy

We may update this policy as the App changes, in particular once a payment processor is chosen. The "Last updated" date above reflects the latest version.

7. Contact

Questions about this policy or your data: keyear.app@gmail.com.