Privacy notice

Last updated: 16 October 2026

This notice explains what OnPitch does with your personal data, why, and what you can do about it. It is written to be read, not to be survived — if anything here is unclear, ask us and we will fix the wording.

Who is responsible

We are established in Latvia, so we need no Article 27 representative in the EU. We are not required to appoint a Data Protection Officer — we are not a public authority, we do not process personal data on a large scale, and we process no special categories of data — so we have not appointed one. Write to support@onpitch-music.com and a person will read it.

The short version

• We store your email address, and the songs you analyse. Nothing else about you.
• Your microphone is only ever recorded when you press record. In the tuner, the sing-along and the practice room it is analysed inside your browser and never uploaded, recorded or stored. In Record Studio, which exists to record you, the takes are yours, and they are now saved to your account so they are there on your other devices. See The microphone — this is the one section worth reading in full.
• The audio file you upload is deleted as soon as the analysis finishes. The separated tracks stay until you delete the song.
• There is no advertising, no analytics and no tracking of any kind. We set no cookies, which is why you have never seen a cookie banner here.
• You can have everything erased. Email us and we will do it within one month.
• You can complain about us to the Latvian Data State Inspectorate, whose details are at the end.

What we collect

Your account

The songs you analyse

• The name of the file you upload. This is free text that you control, and it is the one field that could contain your name or anyone else's if you name your files that way.
• The audio itself, while it is being analysed.
• The separated tracks produced from it, so you can play them back.
• What we worked out about the song: its key, tempo, chord changes, and the pitch curve for the voice. These are measurements of the recording, not of you.
• Its duration, its size on disk, and when you added it.

A recording can contain other people. If you upload a rehearsal, a lesson or a live take, somebody else's voice or playing may be on it, and a recognisable voice is personal data about that person. Two things are worth being exact about. We never try to work out who anyone is — nothing here identifies or verifies a speaker, nothing compares one recording against another, and no recording is ever used to build a profile of a voice. And it is your upload: when you submit a recording of other people, you are the one deciding to, which is why our terms ask you to have their agreement first. If you are on a recording somebody else uploaded and you want it removed, write to support@onpitch-music.com and we will deal with it — and you have every right in Your rights over that audio, not a lesser set. We cannot write to such a person to tell them we hold it, because we have no idea who they are or how to reach them, which is one of the situations the GDPR accepts as a reason not to; this notice is the public account instead.

A photo of a tab, when you ask the app to read one

In the Android app, Photo existing tab takes a picture of a tab written on paper and turns it into a tab you can edit. What happens to that picture, in order:

• It is taken by your phone's own camera app, which hands the app that one picture. The app never looks through your photo library.
• It is re-saved on your phone before it is sent, which removes the hidden data a phone writes into a photo — including the location where it was taken. A close-up is also made smaller; a whole page held upright is instead cut into up to four strips between its tab lines, so the reader can see every number. The strips are the same picture, in pieces.
• It is sent to our server and passed on to an AI model that reads it: Google's Gemini, reached through OpenRouter (both named under Who else is involved). The model sends back the strings, frets and bars it can see, and the song's title and artist when they are written on the page.
• Nobody keeps it. We do not store the photo: it exists on our server only for the seconds the reading takes. The request asks OpenRouter to use only providers that keep nothing and do not use what they are sent for training. The copy on your phone is deleted once it has been read.
• What comes back is offered, not saved. You see the photo beside what was read, and the tab is only kept if you choose to keep it — after which it is an ordinary tab of yours, like any other.

The reading is made by a machine and it makes mistakes — most often with numbers written between the lines rather than on them. Check every note before you play from it.

Technical data

• Your IP address is seen by our servers and by our hosting providers, as it is by every website you visit. We record it in a log line only when a request is refused for asking too often — see Keeping the service working.
• Our servers keep ordinary request logs, which include IP addresses and the paths requested. Our hosting and database providers keep their own logs under their own retention rules.

What we deliberately do not collect

We say this explicitly because the industry norm is otherwise, and because you can verify most of it by inspecting the page:

• No advertising identifiers, no cross-site tracking, no behavioural profiles.
• No analytics — there is no analytics package in this application at all.
• No third-party scripts. No fonts loaded from another company's servers.
• No location data, no device fingerprints, no contacts, no photo-library access.
• No information about other devices on your network.
• No date of birth, no gender, no phone number, no postal address, no profile picture.

Do you have to give us any of this?

No — and the law asks us to say so rather than leave you to infer it.

• The tuner, the practice room and the tab editor need nothing at all. No account, no email, no upload. They work signed out, and offline.
• An account needs an email address and a password, because there is no other way to hand your songs back to you and only to you. Not giving them means not having an account. There is no other consequence, and we will not ask you for anything else in exchange.
• Analysing a song means giving us the recording. There is no way round it — separating a track into its parts is work no browser can do. If you would rather not, do not upload it, and nothing else stops working.

None of it is required by any statute. It is all what the service needs to do the job you asked it to do.

The microphone

This section is deliberately specific, because a microphone is the most intrusive permission this application asks for and because the answer is better than you may expect.

There are two different things here, and the difference is the whole section. Most of what OnPitch does with a microphone is listen and measure. One feature, Record Studio, exists to record you — and it records only when you press record.

Listening: the tuner, the sing-along, the practice room

This audio never leaves your device. Your browser captures it and analyses it in the browser:

• The detection runs as code inside the page, on your computer or phone — the note you are singing, or in the timing drill simply the moment you played something. Nothing is sent to us to be analysed.
• The audio is not recorded. No file is written and no buffer is kept; nothing survives the moment the sound has passed through. What the timing drill keeps is a handful of measurements — when an attack happened and how loud it was — and never the sound itself.
• In the sing-along, the audio goes to your own speakers or headphones if you turn the monitor up, and to nothing else. In the tuner and in the timing drill it goes nowhere at all, not even to your speakers.
• We never receive your voice or your playing from these features, so we cannot store it, share it, lose it, or be compelled to hand it over. There is nothing to hand over.

Recording: Record Studio

This one does the opposite, deliberately, and only when you ask it to:

• Nothing is captured until you arm a track and press record, and it stops when you press stop. The page shows you while it is recording, and your browser shows its own indicator as well.
• A take is saved on your device the instant you stop, so a lost network or a closed tab cannot cost you a performance.
• A take is then uploaded to your account, so it is there on your other devices and survives a cleared browser. It goes straight from your browser to our storage provider (Cloudflare R2, in the EU) without passing through our own servers, and the record of it — its length and its size, never its contents — is held in our database alongside your songs. The copy on your device is removed once the upload is confirmed, so the take exists in one place rather than two.
• So is how the studio is laid out. The track names you type, their levels, mutes and solos, and which recording sits on which track are saved to your account as well, so the studio looks the same on every device you sign into. With each recording go a few facts about how it was made, shown in the clip's Details: when it was recorded, the name your browser gives the input it came through (for example "MacBook Pro Microphone" or the name of an audio interface), its sample rate and the format it was saved in. Which input a device will use for the next recording, and which track is armed, stay on that device.
• Until that upload finishes, the only copy is on your device. If you are offline, or it fails, the take waits on your device and goes up next time. Nothing is lost in between — that is the entire reason it is written down before anything is sent.
• Playing a take needs a connection. It is fetched from your account when you press play. The rest of Record Studio — arming a track, recording, the tuner, the metronome, the tab editor and the practice room — still works with no connection at all.
• A take is yours. We do not listen to it, we do not analyse it unless you ask us to, and we never try to work out who is on it. Delete it and the audio goes with it.
• Everything in How long we keep things and Erasing everything applies to a take exactly as it applies to a song.

If somebody else can be heard on a take — a bandmate, a teacher, whoever is in the room — then what this notice says about recordings containing other people applies here too. A microphone in a room raises the same question as an uploaded file, and we answer it the same way.

What else persists from the microphone: your measured vocal range, and only if you use the practice room's range check. Two note names such as G3 and E5, plus the date, saved in your own browser's storage so that exercises start somewhere you can actually sing. You can clear it from within the app.

Your browser asks for permission before any of this, and you can withdraw that permission at any time in your browser's settings. While a microphone is live, your browser shows its own indicator; that indicator is the browser's, not ours, and it is a more trustworthy signal than any promise we could make.

Please note the boundary. The audio files you upload for analysis are a third case again: those reach our servers because separating a recording into tracks is work no browser can do. They are covered above and in How long we keep things.

Why we process your data, and on what legal basis

One purpose per row, one legal basis per purpose, and where we rely on a legitimate interest we say what that interest is.

We do not currently send any marketing email at all. The last row exists so that if we start, the basis is already stated and it is consent.

Where we rely on a legitimate interest, you may object — see Your rights. We will stop unless we can show compelling grounds, and for the abuse-prevention row we generally can, since without it the service would not survive.

No automated decisions. Nothing here makes an automated decision with a legal or similarly significant effect about you. Being told you have used your three free songs is a contractual limit being applied, not a judgement about you, and no profile is built from it.

Who else is involved

Named, not described as "categories of recipients", so you can look each one up.

That is the complete list. The last two see a photo only when you use Photo existing tab, and nothing else of yours ever. There is no advertising network, no analytics provider, no customer data platform, no email marketing tool, and no payment processor — because there is nothing to pay for yet. There is also no video or streaming service on this list, and there used to be: until August 2026 the application could fetch audio from a link you gave it, which meant our server contacted that site. It cannot any longer — the capability was removed, not merely hidden — so nothing about your song reaches anyone outside this table.

We will also disclose data if we are legally required to, and we will tell you when we are allowed to tell you.

Sending data outside the EU

Our database and sign-in are hosted in the EU West (Ireland) region, so your account data stays in the European Economic Area.

Cloudflare, Modal, Resend, OpenRouter and Google are United States companies operating global networks, so some processing may happen outside the EEA. Where it does, transfers are covered by the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards that apply and we will send them.

How long we keep things

Concrete periods, including the awkward one.

Erasing everything

Email support@onpitch-music.com and ask. We will confirm it is you, delete your account, your song records, every separated track and analysis file, every guitar tab you have written, and every take you have recorded, and confirm when it is done — within one month, as the law requires, and normally within a few days.

We are honest about why this is not yet a button in the app: deleting the account row does not by itself delete the audio files, and a button that left your recordings behind would be worse than no button. We do it with a tool that removes both, and we check afterwards. A self-service version is on our list.

Anything held only in your own browser — your vocal range and per-song corrections — is yours to clear, and clearing your browser's site data for OnPitch removes all of it.

Your takes are no longer in that category. Since 13 September 2026 they are uploaded to your account, so clearing this browser no longer loses them and erasing your account erases them with everything else. A take still on its way up, which has not yet been uploaded, is the one case where clearing site data would lose it.

Your rights

Under the GDPR you have the right to:

• Know what we hold about you, and get a copy.
• Correct anything inaccurate.
• Erase it — see above.
• Restrict what we do with it while a dispute is resolved.
• Take it with you, in a structured, machine-readable format.
• Object to processing based on a legitimate interest, including at any time.
• Withdraw consent, where we rely on it, without affecting what was done before.
• Not be subject to a solely automated decision with legal or similarly significant effect. As above, we make none.

To use any of them, write to support@onpitch-music.com. We will reply within one month. It is free; we will only charge, or refuse, if a request is manifestly unfounded or excessive, and we will explain why if we ever do. If you ask for a copy, what you get is a machine-readable file — your account details and song records as JSON, and your audio files as they are stored.

One of those rights we are required to put in front of you rather than bury in a list, and it is the right to object. Where we rely on a legitimate interest — the abuse limits, the server logs, acting on a report, defending a claim — you may tell us to stop at any time, and we must stop unless we can demonstrate compelling grounds that override your interests. Write to support@onpitch-music.com and say that you object; you do not have to give a reason or cite anything. And the easy half: we send no direct marketing at all, but if we ever do, an objection to it is absolute — there is no balancing to be done, and we would simply have to stop.

You can also complain to a supervisory authority. Ours is:

Datu valsts inspekcija (Data State Inspectorate)

Elijas iela 17, Riga, LV-1050, Latvia

pasts@dvi.gov.lv — dvi.gov.lv

You may also complain to the authority in the EU country where you live or work.

What is stored on your device

We use no cookies. Nothing here tracks you between sites, and that is why you have not been asked to accept anything. What we do store is strictly necessary to make the app work, which is why it needs no consent:

The app also keeps a small offline cache so it can start without a network, and so the tuner, metronome, practice room and tab editor work with no connection at all. That cache holds the application itself, plus up to 30 recent API responses for up to 24 hours. No audio is ever put into that cache — stems are excluded deliberately, and so are takes. onpitch-takes is not a cache: it is a store you filled by pressing record, and nothing evicts it behind your back.

One consequence worth stating plainly, and a larger one since Record Studio: on a shared or borrowed computer, that cache and the storage above outlive your visit, and signing out does not currently clear them. That now includes recordings of you playing or singing. Clear the site's data if the device is not yours.

On the Android app

The Android app is a separate program on your phone, so none of the browser storage above applies to it. What it keeps is kept in the app's own private storage, which no other app can read, and all of it goes when you uninstall the app or clear its data:

The app records nothing except in Record Studio. The tuner, the sing-along — on the song screen and in Car mode — and the practice room open the microphone, read the pitch, and keep no audio at all — the same promise the website makes, and for the same reason: they have no need of it.

Keeping the service working

We limit how often one connection can start an analysis, because a single script could otherwise spend our entire computing budget. When a request is refused for this reason, we write one log line containing the connection's IP address and how long it must wait. That is the only place we record an IP address ourselves, and it exists to tell abuse from a person having a busy afternoon.

How we protect it

Factually, without claiming perfection:

• Everything travels over HTTPS.
• We never see your password. It goes from your browser to our authentication provider, which stores only a hash.
• Access to your data is enforced by the database itself, not only by our application code, so a mistake in our code cannot expose another account's songs — the database refuses.
• Every request for one of your files checks that the file is yours. A request for someone else's is answered exactly as one for a file that does not exist, so an outsider cannot even learn what exists.
• Uploads are capped in size and length, and file paths are validated so a crafted request cannot read anything outside the intended folder.

No system is perfect. If you find a problem, please tell us at support@onpitch-music.com — we would far rather hear it from you.

If something does go wrong. If personal data is lost, altered or exposed, we will contain it, write down what happened, and assess what it means for you. Where there is a risk to your rights, we must and will report it to the Data State Inspectorate within 72 hours of becoming aware — even if the picture is still incomplete, because a partial report on time is worth more than a complete one late. Where the risk is high, we will tell you directly, in plain language, without waiting to be asked. We deliberately do not promise to email you about every incident regardless of severity: that is a promise products make in a privacy notice and then quietly break, and the legal test is the honest one.

Children

OnPitch accounts are for people aged 16 or over, and we do not knowingly create accounts for anyone younger. If you believe a child has an account, tell us and we will remove it.

The tuner and the practice room need no account and collect nothing. The tab editor needs no account either, and used without one it collects nothing; signed in, a tab you write is saved to your account. All of them can be used by anyone.

Changes to this notice

If we change it, we will update the date at the top. If a change materially affects your rights, we will tell you in the app or by email before it takes effect, and we will keep the previous version available so you can see what changed.

Contact

support@onpitch-music.com — for any question about this notice, any of the rights above, or anything you think we have got wrong. A person reads it.

OnPitch is run from Latvia.

Version history