Privacy Policy
The short version: we store what the app needs to work, we don't sell anything about you, and the only optional data collection is performance telemetry you explicitly opt into.
What we store, and why
- Your email address: it's your sign-in and how we can reach you. Sign-in emails are delivered via Resend.
- Your library: when sync is on, your PDFs (stored in Cloudflare R2), and your titles, metadata, setlists, and annotations (stored in Supabase/PostgreSQL). Signed out or with sync off, everything stays on your device.
- Shared binder data: memberships, roles, your display name, and content shared with your binders (visible to their members).
- Error reports: if the app hits certain failures (sync protection events, file-transfer errors) it records a short technical description tied to your account so we can fix it.
Optional telemetry (opt-in)
If, and only if, you enable it during onboarding or in Settings → Privacy, the app sends anonymous performance samples: how long pages take to render, frame times, your device model (like "iPad13,4"), and app version. Never your music, titles, annotations, or anything you typed. Turn it off anytime; nothing else changes.
What we never do
- No selling or sharing personal data with third parties for their purposes.
- No advertising, no trackers, no analytics SDKs.
- Annotations on your private layer are never shared with anyone, including your shared binders.
Where data lives
Supabase (database & authentication), Cloudflare R2 (files), PowerSync (sync service), Resend (sign-in email). Each processes data only to provide the service.
Payments are handled by Paddle.com as merchant of record: your card or wallet details go to Paddle, never to us. We receive your email, the plan you bought, and Paddle's ids for the subscription, which is what turns the plan on in your account.
Support access
Support can access your account only if you grant a time-limited window from Settings, and every such access is permanently logged.
Deletion
Email hello@sheetsystems.com and we'll delete your account and associated data. Files no library references are purged from storage.