Privacy Policy for VivaSona Stage

Account information

If you create an account, authentication (your email address, password or sign-in method, and account session) is handled by our backend provider, Supabase. We don't independently store your password — Supabase does, using its own security practices.

Your musical content, if you sign in

Signing in is optional. VivaSona Stage works fully offline with all of your data stored locally on your device. If you sign in, the following is also stored in our Supabase database and Supabase Storage, tied to your account, so it can sync across your devices:

• Songs (title, artist, key, tempo, tuning, performance notes, lyrics/chords)
• Setlists (venue, gig date, curfew time, gig notes, song order)
• PDF chord charts/lead sheets you upload, and your hand-drawn annotations on them
• Your subscription tier (free / Pro / Studio)

This data is protected by database-level access rules (Row Level Security) that restrict every row to your own account — enforced by the database itself, not just the app.

Setlist sharing: if you share a setlist with someone else via a share code, that code lets the recipient copy the setlist into their own account. It doesn't give them ongoing access to your account, and the code expires automatically.

Subscription and payment information

Subscription purchases are processed by Stripe (on the web) or by Apple's and Google's own in-app purchase systems (on iOS and Android). VivaSona never sees or stores your full card number — that's handled entirely by Stripe, Apple, or Google. We use RevenueCat to keep track of which subscription tier is active on your account so the app and our servers can unlock the features you've paid for.

AI Practice Coach (Studio tier only)

If you're signed in on the Studio tier and choose to use the AI Practice Coach feature, the song title, artist, key, tempo, and whatever practice question or topic you type are sent to Google's Gemini API to generate a response. We don't send your account identity, email, or any other personal data as part of that request — just the practice-session details above. This only happens when you actively use the feature.

Real-time band sync ("Band Clock")

If you use the Band Clock feature to sync tempo and set information live with other band members' devices, a temporary room code, a device name you choose, and your instrument role are relayed between the devices in that session. This relay is in-memory only — it is not written to a database and does not persist after the session ends. The device name and role you enter for this feature are not tied to your account identity.

Information we do not collect

We do not use third-party analytics, advertising SDKs, or tracking pixels. We do not collect your device's advertising identifier. We do not sell or rent your data to anyone.