Privacy policy

Musical setup, saved songs, progressions, sets, practice history, program progress, custom rhythms, prepared shows and other local work are stored in browser storage on your device. Microphone analysis and generated playback happen on the device. Barre None does not record microphone audio or send it to a server.

Key, tuning, capo and other musical selections can appear in the page URL. They are sent to the site when you open the page and travel with a link you copy or share. A manual backup includes the supported content identified before download; it excludes account credentials, session cookies, license keys and theme.

If you sign in, Barre None processes your email address, an encrypted copy and a one-way lookup value, verification challenges, browser sessions, account and entitlement state, device activity, the accepted policy version and adult-attestation time, and records needed to provide or secure the account. Verification codes expire after 10 minutes. Sessions normally expire after 30 days and cannot continue past 90 days without a new sign-in.

Sync is optional per device. When enabled, its private document can include songs, arrangements, song vocal demands, set lists, saved progressions, practice history, goals, plans and completions, program progress, living charts and owned events. An owned event can contain its frozen set and recap. Standalone prepared shows and standalone recaps remain outside automatic sync. The service can read synced content; it is not end-to-end or zero-knowledge encrypted.

A workspace owner chooses when to publish a separate copy of a set, referenced song text, arrangement details and rehearsal notes. Active members receive that copy according to their role. Events can include schedule, time zone, venue, member responses, a frozen set and a recap. Invitations and reminders contain limited event or workspace details and a random expiring link.

Teacher Studio stores teacher-created aliases, assignments, submissions and private notes. Students do not receive accounts. A submission is sent only after explicit review and can include activity ID, completion time, attempts or score, self-rating and a short note. Online retrieval and submission are restricted to students who confirm they are at least 13. The submission record keeps that minimum-age basis, policy version and attestation time; the teacher does not receive that metadata. Teachers must use nicknames or initials and must not enter student email addresses, birth dates, school identifiers, health information or other sensitive details.

Removing access prevents future online retrieval but cannot erase a copy someone already downloaded. Membership does not expose unrelated songs, account information, practice history, vocal profiles or other private collections.

Import and operating-system share actions stage chosen text and files in this browser for preview. A random local handle, rather than file contents, appears in the share URL. A delivery remains recoverable until it is fully accepted, explicitly removed or expires.

A Pro user may explicitly upload a supported chart, image or rehearsal recording. Cloudflare R2 stores the bytes under a random internal key; D1 stores limited ownership, type, size, checksum, visibility and reference data. Filenames, titles, lyrics, notes, audio bytes, signed download URLs and extracted text are excluded from application logs. The service does not claim to scan files for viruses, transcribe audio or perform server OCR. Only upload material you are authorized to use.

A signed-in user can separately opt in to share tool names, a small allowlist of product actions, and daily visit counts linked to the account. Product actions include opening a free demo, loading a chord sheet, seeing a Pro gate, opening the account purchase path, or requesting launch updates. It is off by default and excludes typed text, song titles, content, audio, URL parameters, recordings and time spent. Turning it off stops collection in that browser immediately and requests deletion of prior shared usage. The browser retains the choice and a local account fingerprint only to prevent an unfinished opt-out from being lost across sign-ins.

Separate anonymous aggregate counters help measure whether the local-first product is being used. They record only a daily count for the first meaningful tool use, PWA installation, an online standalone launch, a returning local user, and these allowlisted actions: opening the free song sample, loading a personal chord sheet, opening the set demo, saving a song, applying a capo recommendation, or starting the tuner. The browser records the first-use signal once, deduplicates each other signal once per day, and stores only the dates needed for that deduplication. It sends no offline queue. The Worker stores global daily counts only—no anonymous ID, account link, IP address, song content, or query string. These counters do not turn on or change signed-in account usage sharing.

Feedback stores the message, category, selected tool and replies with your account. It never attaches your library. Security and operational records use bounded identifiers, statuses and timestamps. When an unexpected browser error prevents normal use, Barre None sends the page pathname, error type, a sanitized error message and sanitized stack trace. The reporter does not read or attach URL parameters, account identity, cookies or local libraries; it also scrubs common identifiers from browser-provided error text. It does not queue reports while offline and groups repeated reports before the owner reviews them.

Public purchasing is currently closed. If opened, Lemon Squeezy will process checkout, tax, payment, subscription, receipt and refund information as merchant of record. Barre None receives provider identifiers and limited subscription, invoice, amount, currency and status data needed to grant access, reconcile billing and handle support; it does not receive full card details.

An activated legacy license key is sent only to the configured license provider and can be revalidated at most weekly while eligible. The key stays in this browser and is not included in account sync or manual backup.

Cloudflare provides site delivery, security checks, Workers, D1 database storage, R2 file storage and authentication-email delivery. These providers process information under their own service and privacy terms. Workspace members, event participants, teachers and students receive only the content deliberately shared with them.

Account authentication, sync, collaboration, assignments and paid access are processed to perform the service contract requested by an adult account holder or authorized user. Support, feedback handling, security, abuse prevention and limited delivery diagnostics rely on the operator's legitimate interests in operating and protecting the service, except where a different basis is required. Optional account-linked usage sharing is based on consent, which can be withdrawn in Account. Billing, tax and required legal-response records are processed to meet legal obligations; dispute records may also be used to establish, exercise or defend legal claims.

Local information remains until you remove it, clear browser storage or uninstall the stored site data. Account information remains while the account exists. Deleting an account removes its active cloud content and identifying links as described in Account; it does not delete independent local copies or copies already downloaded by another authorized user.

Synced paid content becomes read-only when paid access ends and is scheduled for deletion 90 days after that access end. Sync tombstones are kept for 90 days so a deleted item does not reappear from another device. Account-linked shared tool usage expires after 90 days. Anonymous aggregate daily counters are retained for up to 90 days and contain no event-level identity. Sanitized browser error reports expire after 30 days, feedback after one year from its last update, and owner-access audit records after 180 days with identifying account links removed on account deletion. Expired invitations, sessions and operational records are removed on their documented schedules. Account policy-acceptance records remain with the account. Assignment minimum-age metadata follows the submission and is deleted with that submission, alias, studio or account. Transaction and dispute records may be kept longer where required by law or the payment provider.

Signed-in account service uses a secure, same-site, HTTP-only session cookie that is necessary to authenticate requests. Barre None does not use advertising cookies and does not currently enable Cloudflare Web Analytics. If enabled later as a host-side switch, Cloudflare Web Analytics will provide cookie-free aggregate traffic and performance analytics only after this policy and the deployment evidence are updated. Cloudflare necessarily receives ordinary request, network-diagnostic, bot-detection and security information when it delivers or protects the site. Optional account-linked usage sharing remains off by default. Anonymous product counters do not identify a browser or account, do not queue offline analytics and do not send authored content or musical URL parameters as product events.

Barre None does not sell personal information or share it for cross-context behavioral advertising. It does not use personal information to build advertising audiences.

Barre None does not make legal, employment, credit or similarly significant decisions about people. Practice suggestions are calculated from local musical preferences and activity and can be ignored or changed by the player.

Cloudflare and Lemon Squeezy operate internationally, so account or transaction data may be processed in the United States or another country where they or their subprocessors operate. Where data-protection law requires a transfer mechanism, Barre None relies on the applicable provider data-processing terms, Standard Contractual Clauses, UK transfer addendum or another lawful mechanism. Contact Barre None for the relevant provider, destination, role and a copy or description of the safeguards available for your account.

Barre None limits stored fields, hashes bearer tokens, encrypts account email at rest, restricts service origins and provides deletion and session-revocation controls. No internet service or browser store can promise absolute security. Keep a manual backup and report suspected unauthorized access promptly.

Account holders and purchasers must be adults. Barre None is not directed to children under 13 and does not knowingly create accounts for them. Children under 13 may use the local browser tools with an adult, but they may not retrieve or submit a cloud assignment. The assignment page asks for an age group before retrieving cloud assignment data; the choice itself is not stored in the browser. For an eligible submission, the service keeps only confirmation that the student is at least 13, the policy version and time—not a birth date or exact age. Contact Barre None to remove information believed to have been submitted by a child under 13 or without required authority.

Depending on how California law applies, the categories described above may include identifiers, account and commercial information, internet or device activity, user content and inferences limited to local practice suggestions. Sources are you, your browser or device, people who deliberately collaborate with you, Cloudflare and Lemon Squeezy. They are used for the service, security, support, billing and the other purposes stated in this policy, and disclosed to the provider or collaborator categories stated above. Barre None does not sell personal information or share it for cross-context behavioral advertising and has not done so in the preceding 12 months.

Where California privacy rights apply, you may request access, correction, deletion or a portable copy and may use an authorized agent subject to identity and authority checks. Barre None will not discriminate against you for exercising an applicable privacy right. Use the contact below; no opt-out-of-sale link is offered because the service does not sell or share personal information as those terms are used for that right.

Account provides access to export, sync opt-in and opt-out, session revocation, cloud-copy deletion and account deletion. You can also ask to access, correct, delete or receive a portable copy of personal information, restrict or object to processing, or withdraw consent where those rights apply. Identity verification may be required before acting on a request. Some records may be retained where the law permits or requires it.

Send a request or privacy question to support@barren.one. You may also complain to the privacy or data-protection authority where you live. A material change to this policy will be posted here with a new effective date and, where required, additional notice before the new use begins.