Privacy Policy

OpenScore is provided by Nemo Studio (“we”). This policy explains how the OpenScore app and this website handle information, as the product actually works.

Send questions and requests to [email protected]. Our privacy contact can be reached at the same address.

At a glance

• Scores, annotations, recordings, and practice history are stored on your device by default.
• What reaches a server is limited to features you turn on (cloud sync, score analysis), messages and photos you send through support chat, purchase checks, and app usage statistics and ad measurement.
• We never sell your scores or recordings or use them for advertising.

What stays on your device

Imported scores (PDFs, photos, scans, blank staff paper), handwriting and labels, setlists, tags, favorites, practice history, recordings, and settings are stored on your device. Nothing is uploaded unless you turn on cloud sync.

• Camera: used to scan printed scores and to turn pages with a wink or head movement. Face images for page turning are processed only on this device and are never stored or transmitted. Scanned pages are saved to your library.
• Microphone: used only while you record a performance. Recordings stay on your device and only leave it when you share them yourself.
• Photos: we import only the images you pick.
• Bluetooth pedals: pedal presses arrive as key presses; we collect no information about the pedal.
• Scores and recordings moved to Trash are deleted from the device after 30 days.

Face data (page turning)

The optional face page-turning feature lets you turn pages with a wink or a head movement. It is off by default, runs only while you turn it on in the score view, and stops as soon as you turn it off or leave the score.

• What is collected: On iOS devices with a TrueDepth camera, the app uses Apple’s ARKit face tracking and reads only two values per frame: how far the left eye and the right eye are closed. On other devices, Apple’s Vision framework estimates the same eye values or the direction the head is facing from the front-camera image. No face image, depth map, face mesh, or facial geometry is kept.
• Purpose: solely to decide whether a wink or a head turn happened so the page can be turned. The values are not used for identification, analytics, advertising, or any other purpose.
• Storage and retention: the values exist only in memory for the fraction of a second needed to compare them with the previous frame and are then discarded. They are never written to disk, never included in scores, recordings, usage statistics, or crash reports, and never linked to you or your account.
• Sharing: face data never leaves your device. It is not sent to us or to any third party, including the service providers listed below.
• Deletion: because nothing is stored, there is nothing to delete. Turning the feature off ends processing immediately.
• This feature does not use Face ID and cannot unlock the device or any purchase.

Cloud sync and accounts

Cloud sync is optional and included in OpenScore Pro. To use it, you sign in with Apple or Google.

• What we collect: the account identifier from your sign-in provider, your email address (a relay address if you use Apple’s Hide My Email), your name if provided, a random identifier created for each device together with its name and platform, and when it last connected.
• Synced data: server copies of score files, annotations, setlists, tags, practice history, and recordings, so you can continue on another device. The originals on your device remain yours.
• Each account has a limit on linked devices and storage. You can unlink devices in Settings.
• Signing out does not delete scores on your device.

Retention and deletion

• You can delete your account and all server data in Settings at any time. Local files on your device are kept.
• If your Pro subscription ends and is not renewed, we clear only the server copies one year after we last confirmed an active subscription. We check your subscription status again before deleting. Account details may remain; files on your device are never deleted.
• To prevent one subscription from being moved between accounts, the link between a subscription and an account may be kept after the account is deleted.

Score analysis (smart organizing)

Score analysis is off by default and only runs if you turn it on during onboarding or in Settings. When on, the first few pages of a newly imported score are rendered as images and sent to our analysis server, which suggests details such as title, composer, key, and time signature. You can edit or ignore suggestions.

• The analysis server sends the images to an AI model provider (OpenAI) to get results. We do not store analysis images on our server.
• To count your allowance (free trial pages, monthly Pro pages), we use a random identifier created per app install and, for subscribers, a purchase identifier.
• For scores downloaded from IMSLP, we keep the IMSLP file number, page number, and the analysis result (score details as text) on our server and reuse it for other users so the same file isn’t analyzed twice. This record does not include who downloaded it.

IMSLP

IMSLP search and downloads are requested by the app directly from imslp.org and its mirror servers, without passing through our servers. IMSLP’s privacy policy applies to those requests.

Purchases

Subscriptions (Pro) and the tool pack (Plus) are paid through the Apple App Store or Google Play, and RevenueCat manages purchase status on our behalf. We never receive your card number.

• Purchase status is used to unlock features.
• So purchases carry across devices without signing in, on iOS we use the anonymous user ID of your iCloud account (CloudKit) as the RevenueCat purchase identifier. This ID does not reveal your iCloud email or name.

App usage statistics

To improve the app, we collect usage statistics with Google Firebase Analytics. This includes events such as which kind of screen you view, score imports (method and count), tool selection, recording start and length, paywall views, and purchases, along with device model, OS, app version, and approximate region. Score titles, score contents, and recordings are not sent.

Ad measurement

We use the Meta (Facebook) SDK to measure which ads lead to installs. It sends events such as app launches, trial starts, and purchases, and RevenueCat may forward purchase events to Meta.

• On iOS, the advertising identifier (IDFA) is collected only if you allow tracking when asked through App Tracking Transparency. Declining does not limit any feature. You can change this anytime in Settings > Privacy & Security > Tracking.
• Apple’s SKAdNetwork may report install counts that do not identify you.

Support chat

In Settings > Contact Support you can chat one-on-one with the developer. It only runs when you use it.

• What we collect: the messages and photos you send, plus the device model, OS version, app version, platform, language, and plan (Free/Plus/Pro) that help us look into a problem. The conversation is tied to a random conversation key and, on iOS, your anonymous iCloud user ID (CloudKit) or, on Android, your purchase identifier (RevenueCat). We do not receive your email or name.
• Notifications: if you turn on reply notifications, we keep a push notification token (Firebase Cloud Messaging) and use it only to tell you about replies. You can turn them off at any time in the conversation, which deletes the token.
• Purpose: only to answer your request and fix problems. Never for advertising or statistics.
• Retention: photos are deleted 90 days after the last message in the conversation. Messages are kept so we can follow up on the same request.
• Deletion: deleting the conversation in the app means it can no longer be opened from the app, and the notification token is discarded. To have the remaining record erased completely, email us at the address below.

Service providers and international transfers

The companies below process data on our behalf, and data may be processed and stored on servers outside your country (mainly in the United States). Data is transmitted over encrypted connections (HTTPS).

Each provider handles data under its contract with us and its own privacy policy. We do not share personal information with any other third party unless required by law.

This website

openscore.nemostudio.net is a static site. It needs no account and uses no cookies or tracking scripts. The hosting provider’s server logs may record IP addresses and user agents for security and operations, kept only as long as the host retains them.

Children

OpenScore does not knowingly collect personal information from children under 13 (or the minimum age in your country). If you learn that a child’s information was collected, contact us and we will delete it promptly.

Your rights and choices

• You can use the app without signing in. Your scores stay on your device.
• You can turn off score analysis.
• You can decline tracking when the system asks.
• You can delete your account and server data in Settings.
• You can email us to access, correct, delete, or restrict processing of personal information we hold, even if you can no longer open the app. We verify the request and respond within the time required by law.
• Depending on where you live, you may lodge a complaint with your data protection authority.

Deletion

When information is no longer needed or you ask us to delete it, we delete it without delay. Server data is deleted so it cannot be recovered, and copies in backups and logs are removed on their regular cycle. Information we must keep by law is stored separately only for the required period.

Security

Data in transit is encrypted with HTTPS, sign-in tokens are kept in the device keychain, and server access is limited to those who need it. No system can guarantee perfect security.

Changes

If the way the product handles data changes, we will update this page and the date above. We will announce significant changes in the app or on this page.