1. Who We Are
PopSongChordBook ("we", "us", "our") is an interactive chord practice tool for musicians available at www.popsongchordbook.com and as an Android app on Google Play. It is operated as a personal/indie project.
This Privacy Policy explains what personal data we collect, why we collect it, and how you can control it. If you have any questions, please contact us via the details at the bottom of this page.
2. What Data We Collect
We collect only the data necessary to provide the service. We do not sell your data, run advertising, or use third-party analytics trackers.
| Data | Why collected | Required? |
|---|---|---|
| Email address | Create and identify your account; send password reset emails | Yes |
| Username (display name) | Show your name in band sessions and teacher/student features | Yes |
| Password (hashed) | Secure your account — stored as a one-way hash by Firebase; we never see your password | Yes |
| Songs & setlists | Store your personal chord library and setlists in the cloud so they sync across devices | No (optional feature) |
| Last login timestamp | Internal housekeeping; detect inactive accounts | Automatic |
| Online presence (real-time) | Power the Band Practice live session feature (who is currently online) | Automatic when logged in |
| Referral code (optional) | Track which teacher or friend invited you | No (optional) |
We do not collect: location data, device identifiers, payment details, contacts, microphone or camera input, or browsing history.
3. How We Use Your Data
Your data is used exclusively to provide and improve the PopSongChordBook service:
- Account management — creating, securing, and maintaining your login
- Cloud sync — storing your songs and setlists so they appear on all your devices
- Band Practice — showing live presence during real-time practice sessions
- Teacher & Student — linking teacher and student accounts at your request
- Password reset — sending a reset link to your email address when requested
- Email verification — confirming your email address when you create an account
We do not send marketing emails, newsletters, or promotional messages.
4. Data Storage & Security
All data is stored in Google Firebase (Firebase Authentication and Firebase Realtime Database), hosted in Google's secure cloud infrastructure. Firebase encrypts data in transit (HTTPS/TLS) and at rest.
Your password is never stored in plain text — Firebase handles it as a secure hash that we cannot read.
Data is stored in Google's data centres, which may be located in the United States and/or the European Union. Google Firebase is GDPR-compliant as a data processor under a Data Processing Agreement.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties for commercial purposes.
Data is shared only in these limited circumstances:
- With Google Firebase — our infrastructure provider, acting as a data processor under our instructions
- With other users you explicitly invite — for example, your username is visible to a teacher or bandmate you connect with inside the app
- If legally required — to comply with applicable law, court orders, or government requests
6. Data Retention
We keep your data for as long as your account is active. If you request deletion of your account, all associated personal data (email, username, songs, setlists) will be permanently deleted within 30 days.
To request deletion, contact us using the details at the bottom of this page, or use the delete account option in the app (Profile → Delete Account).
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Correction — ask us to fix inaccurate data (your username and email can be changed in-app)
- Deletion — request that we delete your account and all associated data
- Portability — request your data in a portable format (your song library can be exported from the app)
- Objection — object to how we process your data
- Withdrawal of consent — you may stop using the service and request account deletion at any time
To exercise any of these rights, contact us at the address below. We will respond within 30 days.
If you are located in the EU/EEA and believe we are handling your data unlawfully, you have the right to lodge a complaint with your local supervisory authority.
8. Children's Privacy
PopSongChordBook is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13.
If you are a parent or guardian and believe your child under 13 has created an account, please contact us immediately and we will delete the account and all associated data.
Users between 13–17 should use the app only with parental consent.
9. Third-Party Services
The app integrates with the following third-party services. Each has its own privacy policy:
- Google Firebase (authentication & database) — firebase.google.com/support/privacy
- YouTube (embedded play-along videos, optional) — policies.google.com/privacy. YouTube may set its own cookies when you use embedded videos.
- Google Fonts (typography) — fonts are loaded from Google's CDN; Google may log the request. See Google's Privacy Policy.
We do not use Google Analytics, Facebook Pixel, or any other advertising or tracking technology.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page.
For significant changes, we will notify registered users via the email address on their account. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, please contact us:
- Website: www.popsongchordbook.com
- Email: privacy@popsongchordbook.com