Clefbound

Privacy policy

Last updated 9 October 2026

Clefbound has no accounts, no ads, no tracking and no analytics. Your learning progress stays on your phone and is never sent to us.

This policy covers the Clefbound app for iPhone and Android and this website, clefbound.app.

Who is responsible

Clefbound is made by Tuomas Laiho, a private developer in Finland, who is the data controller for the processing described here. You can reach me at support@clefbound.app.

What stays on your phone

Everything you do in the app is stored only on your device:

  • your answers, progress, streak, game scores and trophies;
  • your settings, such as reminder time, sound and your answers to the questions when you first open the app (your goal, experience and minutes a day).

None of this is sent to me or to anyone else. If your phone's backup is turned on (iCloud or a computer backup on iPhone, Google's backup on Android), it is included in that backup, which Apple or Google keep under their own privacy terms. Deleting the app, or Settings → Reset all progress, removes it from the phone.

Reminders are scheduled on your phone, not sent from a server. A MIDI keyboard you connect talks only to the app on your phone.

Subscriptions and purchases

Subscriptions are bought through the App Store or Google Play. Apple or Google handle the payment; I never see your name, card or other payment details.

To check whether your subscription is active, the app uses RevenueCat, Inc. (USA), which processes the following on my behalf:

  • a random identifier the app creates for your installation, not linked to your name or email;
  • your purchase receipts and subscription history from Apple or Google (product, dates, price, country of your store account);
  • basic technical data: device model, operating system and app version, and the IP address of the request.

This is needed to give you what you paid for (Article 6(1)(b) of the GDPR, performance of a contract), and transaction records are kept as long as accounting law requires. RevenueCat acts under a data processing agreement and uses the European Commission's Standard Contractual Clauses for transfers outside the EU. It does not use this data for advertising.

Crash reports

If you've allowed it in your phone's settings, Apple or Google may share anonymous crash reports and performance data with me. I use them only to fix problems. They do not identify you.

Emails

If you write to support, I use your email address and message only to answer you, and delete them on request.

This website

clefbound.app has no cookies, analytics or trackers. It is served by Cloudflare, which processes visitors' IP addresses briefly to deliver and protect the site.

Children

Clefbound is made for learners of any age. It asks for no name, email or other personal details, and purchases go through the parent's or guardian's App Store or Google Play account, with the store's own parental controls (Ask to Buy, Family Link).

Your rights

Under the GDPR you have the right to ask for access to your personal data, and to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable form. Because the app has no accounts, I can only find subscription records you point me to, for example with a receipt from Apple or Google. Write to support@clefbound.app.

You can also complain to a data protection authority. In Finland it is the Data Protection Ombudsman (tietosuoja.fi).

Changes

If the app starts handling data differently, for example when accounts or syncing are added, this policy will be updated first and the date above changed.