Privacy Policy

1. What we collect

Breve is usable without an account — browsing, search, lead sheets, harmonic analysis and the metronome need no login. We measure how the app is used, as described below. You create an account to save favorites and to import sheets.

• Email — to sign in. You can create an account with email and password, or sign in with Apple or Google. With Apple or Google we receive your email and, if the provider shares it, your name.
• Favorites — the songs you save, linked to your account.
• Scan counter — how many charts you imported this month, so we can apply the quota. Importing requires an account, so the counter is linked to yours.
• Subscription and credits — if you subscribe to a paid plan or buy credits, we keep your subscription status (active, trialing, cancelled) and credit balance, to unlock the paid features. Payment itself is processed by the store (App Store or Google Play) and RevenueCat; we never see or store your card details.
• Crash reports — if the app crashes, a technical report of the failure (device model, OS and app version, and the error that occurred) is sent to our diagnostics provider so we can fix it. It contains none of your songs, files, or email.
• App and site usage — which screens and features get opened, how often, and on which version, so we know what to improve. These events never say which song you played, searched, or imported. Without an account they're tied to a random identifier the app itself creates; with an account they're tied to it and deleted along with it. On the website, the measurement uses no cookies. Our provider is PostHog, hosted in the United States.

2. What we don't collect

We don't collect practice history or the content of what you play, search, or import — the measurement described in section 1 counts screens and features, never songs. We use no ads, no advertising identifiers (IDFA/GAID), no cross-app tracking, and no session recording, and we don't sell your data. Your recently viewed songs stay only on your device.

3. Chart import

When you import a chart, the file is processed at your request and on your behalf — as your agent — solely to produce the result that comes back to your device. The scan itself keeps nothing: the service that reads the chart doesn't store, cache, or log the file or the result. The original file, if you choose to keep it, lives only on your device — always, with no setting to change that. If you have an account, the data extracted from the chart (not the file) is also saved to your library; see section 4.

If you import from a link, your device downloads the file directly from the source. Breve's servers never fetch, proxy, or store that link — the source sees a download from your device, not from Breve.

To read the sheet, the file is sent to our extraction provider (Anthropic), which processes it to return the result and, under its API terms, does not use that content to train models. The only thing left on our servers is your monthly scan counter and a technical record of each scan — and, if you have an account with sync enabled, your chart library.

That technical record holds the cost, the tokens used, the model, the outcome (success, error, or refusal), how long it took, the size and type of the file you sent, and structural counts about what was read (how many bars, how many chords it couldn't identify, how many spots it flagged as unclear) — never the file itself, what it read, or any text from the chart such as its title, composer, key, or chords. We keep this record indefinitely, in anonymized form, even after you delete your account — it's never deleted, only unlinked from your identity.

4. Your library

If you have an account, the data extracted from the charts you import — title, sections, chords, form, and any corrections you make — is saved to your account and available on any device you sign in on. The original file (PDF or photo) is never uploaded: it stays only on the device that scanned it, always, with no setting to change that.

This sync is on by default for signed-in users, and we tell you before the first upload. You can turn it off at any time in Settings, or exclude a single chart from sync — in both cases the corresponding data is deleted from our servers, not just paused. Guests (no account) keep working exactly as today, with nothing sent to the server.

We keep this data while your account exists. Deleting your account (Settings → My account → Delete account) permanently deletes your library too.

5. How we use it

• Authenticate your sign-in (email + password, or Apple/Google).
• Save and sync your favorites across devices.
• Save and sync your imported-chart library, if you have an account with sync enabled.
• Apply your subscription's chart-scan allowance (Terms of Use §8).

6. Sharing

We don't sell or trade your data. We use providers to run the service: Supabase (account, favorites, imported-chart library, and scan-counter storage), Apple and Google (social sign-in, when you choose it), RevenueCat (managing in-app subscriptions and purchases), Resend (sending emails such as password resets), Sentry (app and service crash reports), PostHog (usage measurement for the app and the site, hosted in the United States), Expo (app update checks — the app asks whether newer code is available, no personal data involved), and Anthropic (scanning the charts you import, with no retention by Breve). We may disclose data if required by law.

7. Your rights and deletion

You can delete your account and all associated data at any time, right in the app, under Settings → My account → Delete account. Deletion permanently removes your account, favorites, and imported-chart library, and forfeits any unused scan credits. It does not cancel an active subscription purchased through the store (App Store or Google Play) — it keeps renewing until you cancel it there; see the Terms of Use.

• Access and correct your data.
• Delete your account and data in the app or by email request.
• Withdraw consent by no longer using the account.

8. Children

Breve is not directed to children under 13, and we do not knowingly collect personal data from them.

9. Security and retention

Session tokens are kept in the device's secure storage. We retain your data while your account exists; deleting it removes them. If you have an account, the usage events linked to it are deleted when you delete it. The original file of an imported chart is never retained by us, at any point; the extracted data is retained only if you have an account with sync enabled, as described in section 4.

Contact

For privacy questions or to request data deletion, reach us at: suporte@heartsing.co