Privacy policy

The short version. Your songs live on your devices and, if you sync, in your own iCloud or Google Drive, not on our servers. We only receive what a feature needs: an account if you sign in, what your band shares, set links you publish, live sessions you run, your purchases, crash reports and, unless you switch it off, usage counts that aren't linked to you. We don't show ads, we don't sell your data, and we don't use your songs to train AI.

Who we are

Capobook is made and run by an independent developer registered as a business in Israel ("Capobook", "we", "us"). We are the controller of the personal data described here. This policy covers the Capobook apps for iPhone, iPad and Android, the web app at capobook.com, and the website around it.

Questions, requests or complaints: privacy@capobook.com. Postal address: on request, by email to support@capobook.com.

What stays on your device

Capobook works without an account. Everything below stays on your phone, tablet or computer, and we never receive it:

Your songs, versions, sets, notes, timers, drawings and settings. In the web app they are kept in your browser's storage.
PDFs and photos you import or scan, and the backups Capobook makes on your device.
The tuner. It listens through the microphone only while it is open, works out the pitch on your device, and never records, stores or sends any sound.
Scanning. The text on a photo is read on your device. On phones this uses Google's ML Kit; in the browser it uses Tesseract. The photo itself is never uploaded.
Find online. The chord sites you open are shown in an in-app browser, as in Safari or Chrome. Capobook reads a page only when you tap Import, and only on your device. Those sites see your visit as they would in any browser, under their own terms and privacy policies.

What we collect, and why

What	When	Why	Legal basis (EU and UK)
Account: your email address; your name if Apple or Google shares it; a user ID; sign-in times	Only if you sign in (to sync, to use a purchase in the browser, or to join a band). Sign in with Apple lets you hide your email address.	To give you an account and keep your purchases and bands with it	Contract
Band data: the band's name, plan and size; each member's name, role and instrument; the band library (songs, versions, PDFs) and band sets	When you make or join a band and share songs with it	To share a library with your band, with each person keeping their own key and capo	Contract
Set links: the set's name, date, time and venue, the name you publish it under, and the songs in it with their charts	When you publish a set link	To show the set to anyone you send the link to, without the app	Contract
Live sessions: the set and its songs, where the leader is in it, and each follower's name, part, whether they're following and when they were last seen	While you lead or follow a live session. Followers without an account get a random anonymous ID.	To turn everyone's pages together	Contract
Purchases: what you bought, when, the price, currency, store country, and whether a subscription is active	When you buy or restore Pro or a Band plan	To unlock what you paid for on every device	Contract
Usage counts: a random ID made on your device; which screens are opened (with names and IDs removed); milestones such as "a song was added" or "Perform started"; device model, system and app version, language and time zone	Unless you switch off Share usage (You › Help & about › Advanced). It starts off in the EU, EEA, UK and Switzerland.	To see where people get stuck, so we can fix it	Legitimate interests; consent where it starts off
Crash reports: what went wrong in the code, device model, system and app version, and the screens just before the crash. Never song text, typing or console lines.	When the app crashes	To find and fix crashes	Legitimate interests
Messages to us: your email address and what you write	When you email us	To answer you	Contract or legitimate interests
Website and server logs: IP address, browser and the pages requested	When you visit capobook.com or open a set link	To deliver pages and keep the service secure	Legitimate interests
Scanning diagnostics: on phones, Google's ML Kit sends Google technical data such as device model, system version, app version, an identifier and error codes. Never the image or its text.	When you scan a chart on a phone	Google uses it to keep ML Kit working	Legitimate interests

We never ask for your location, contacts, calendar or advertising ID, and we don't combine your data with data from other companies.

If you don't give us data. You never have to give us anything to use Capobook on one device. Without an account you can't sync, use a purchase in the browser or join a band. Without a name, your bandmates can't tell who you are.

If you open a set link or follow a session

You don't need the app or an account to open a set link someone sent you.

What we collect from you: only what any website receives (your IP address and browser, in our server logs for about 30 days). The page sets no cookies.
What the page shows: the name the publisher chose, and the set's name, date, time and venue, as the publisher entered them.
Following a live session: the leader and other followers see the name and part you enter, and whether you're following.

If you are named on a set link or in a session and want it changed, ask the person who shared it, or write to privacy@capobook.com.

Sync through your own iCloud or Google Drive

With Pro, Capobook can sync your library through your own cloud. We never receive the synced data.

iCloud: Apple stores the data in your iCloud account under Apple's privacy policy.
Google Drive: Capobook asks for access to a hidden folder in your Drive that only Capobook can see (the drive.appdata permission). It can't see any of your other files. The access keys stay on your device.

Capobook's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use the Google account information we receive (your name, email address and the app folder) only to sign you in and sync your own library. We never use it for advertising, never sell it, and never let anyone read it.

People you share with.

Your band sees the band library, band sets, and each member's name and role. If your account has no name, your bandmates see your email address instead.
Anyone who has a set link can open it and see what it shows, including the charts. The page tells search engines not to list it.
People following a live session see the set and its songs while the session lasts.

Companies that run parts of Capobook for us. They may use the data only to provide their service to us, under data protection terms we have agreed with them, and they must protect it at least as well as this policy does:

Provider	What they do	Where
Google Firebase (Google LLC)	Accounts, band data, set links, live sessions, our website and servers. It may also check that requests come from a genuine copy of the app (Google Play Integrity, Apple App Attest and, on the web, Google reCAPTCHA).	United States and other Google locations
RevenueCat, Inc.	Keeping track of purchases across the App Store, Google Play and the web	United States
PostHog Inc.	Usage counts	European Union (Germany)
Functional Software, Inc. (Sentry)	Crash reports	United States
Zoho Corporation	Our email	United States

Companies that act on their own account.

The App Store (Apple) and Google Play sell what you buy in the apps and handle payment.
Paddle (Paddle.com Market Limited) is the seller for purchases on our website. It collects your payment and billing details under its own privacy notice. We pass Paddle an ID for your Capobook account, so that the purchase reaches your account.
Apple and Google run sign-in.
iCloud and Google Drive hold your synced library.

We receive purchase records from these companies, never your card details.

When the law requires it. We disclose data if a valid legal process obliges us to, or where it's needed to protect someone's safety, or our rights or users' rights. Where the law allows, we tell you first.

If Capobook changes hands. If the business is sold or merged, your data passes to the new owner under this policy, and we tell you before that happens.

We do not sell your personal data, or share it for advertising.

Where your data is processed

We are based in Israel, which the European Commission recognises as giving EU-level protection to personal data. Our providers process data in the United States and the European Union.

Transfers to the United States rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses (and the UK addendum for UK users).
For users in Israel, transfers abroad follow the Privacy Protection (Transfer of Data to Databases Abroad) Regulations: the recipients have agreed in writing to protect the data and to use it only for the services they provide us.

How long we keep data

Data	How long
Account	Until you delete it. We then delete it within 30 days. Google, which runs our sign-in, removes it from its own backup systems within 180 days.
Band data	While the band exists. The band owner can delete the band at any time. If a band's plan ends and nobody renews it, we keep the band for 12 months so it can be picked up again, then delete it after telling the owner.
Set links	Revoking a link deletes it at once. Otherwise the link stops working the day after the set's date (or 7 days after you publish it, if the set has no date), and its data is deleted 30 days later.
Live sessions	Deleted when the leader ends the session, and in any case within 48 hours.
Band invites	Valid for 14 days; deleted 30 days after that.
Purchase records	As long as you have the purchase, and then as long as tax and accounting law requires (up to 7 years).
Usage counts	Up to one year
Crash reports	Up to 90 days
Emails with us	Up to 3 years after the conversation ends
Server logs	About 30 days

Copies in our database backups are deleted within 35 days.

Cookies and storage on your device

The website (capobook.com/welcome, the blog and these pages) uses no cookies. If you choose the dark theme, your browser remembers that choice in its own storage, on your device only.
The web app keeps your library and settings in your browser's storage, because that is where your songs live. When you sign in, Firebase keeps you signed in using the same storage. If Share usage is on, PostHog keeps a random ID there too.
On our website, Paddle's checkout sets its own cookies to process the payment and prevent fraud.
On the web, Google reCAPTCHA may set cookies to protect our servers from abuse, once that protection is on.

We use no advertising or cross-site tracking cookies, so we don't show a cookie banner. In the EU, EEA, UK and Switzerland, usage counts are off unless you turn them on.

Do Not Track. Capobook doesn't follow you across other websites or apps, and doesn't let anyone else do so through Capobook. So we treat every visit the same way, whether or not your browser sends a Do Not Track or Global Privacy Control signal.

Your choices and rights

Choices you can make at any time:

Switch Share usage on or off (You › Help & about › Advanced).
Export everything (You › Backup, import & export).
Revoke a set link, or leave a band.
Delete your account (how to delete your account).
Remove Capobook's access to Google Drive in your Google account settings.

Your rights. Depending on where you live, you can ask us to:

give you access to, or a copy of, your personal data
correct it
delete it
restrict or object to how we use it (including our legitimate interests)
move it to another service

Where we rely on your consent, you can withdraw it at any time.

Write to privacy@capobook.com. We answer within 30 days, and we may ask you to confirm the request comes from your account's email address. We won't treat you differently for using these rights.

Complaints. You can complain to:

in Israel, the Privacy Protection Authority (gov.il/en/departments/the_privacy_protection_authority)
in the EU and EEA, your local data protection authority
in the UK, the Information Commissioner's Office (ico.org.uk)

We'd like the chance to put things right first: if you complain to us, we acknowledge it within 30 days and tell you what we'll do.

United States. We don't sell or share personal data for targeted advertising, and we don't use sensitive personal data. Wherever you live in the US, you can make the requests above in the same way.

Children

Capobook isn't made for children under 13, and we don't knowingly collect their personal data. You need to be at least 13 to create an account or join a band (16 where local law says so). If you're under 18, a parent or guardian should agree to how you use Capobook. If you think a child has given us personal data, write to privacy@capobook.com and we'll delete it.

Security

Data travels encrypted (HTTPS).
Access to band data is limited by each person's role in the band.
Set links can only be read while they are live.
We use our providers' security features and two-step verification on our accounts.

No service is perfectly secure. If a breach puts your data at risk, we'll tell you and the authorities as the law requires.

Changes to this policy

When we change this policy, we update the date at the top. If a change matters, for example a new kind of data or a new use of it, we tell you in the app or by email before it takes effect.

Contact

Capobook

Email: privacy@capobook.com
Postal address: on request, by email to support@capobook.com

This policy is also available in Hebrew. For users in Israel, if the two versions differ, the Hebrew version applies.