Privacy Policy
The short version: audio from your microphone is processed on your device, never sent to our servers and never stored by us. A song you upload for analysis is sent to a cloud server temporarily. Once the results are saved on your phone, the app requests deletion of the server copy and retries if that fails. An account is optional. Your payment details never reach us.
1. In short
Cantavo is an iOS app for practising singing with your own recordings. We designed it to run on as little data as possible: the core features — practice, exercises, recording, scoring — work without an account and without an internet connection. This policy explains what is processed, why, where it sits and how long it stays.
2. Data controller
The controller under the EU General Data Protection Regulation ("GDPR") and the data controller (veri sorumlusu) under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") is:
- Ra. Soft LTD (developer of Cantavo)
- Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Email: info@rasoft.uk
3. Scope
This policy covers the Cantavo mobile app (com.cantavo.app) and this website. Third-party destinations you reach from the app (the App Store, for example) are governed by their own policies.
4. What we process
| Data | Where it is processed | Purpose | Legal basis |
|---|---|---|---|
| Microphone audio (live pitch tracking) | On your device only | Measuring the note you sing; producing the live trace and score | Consent (microphone permission) / performance of the contract |
| Your recordings (takes) | On your device only | Playing back, autotuning and exporting your own take | Performance of the contract |
| Uploaded song, file tags and embedded cover art, if present | Your device + analysis server, temporarily | Separating the vocal, extracting the notes | Performance of the contract (at your request) |
| Guest device identifier or user identifier derived from your account | Your device + analysis server | Returning the analysis job to the right device; enforcing quota | Legitimate interests (operating the service, preventing abuse) |
| Name, email address and account ID (as shared by your sign-in provider) | Firebase Authentication | Verifying sign-in; carrying a subscription across devices | Performance of the contract |
| Subscription status, purchase history and user identifier | RevenueCat + Apple App Store | Verifying and restoring entitlements; purchase analytics | Performance of the contract / legal obligation |
| Progress, scores, theme, settings | On your device only | Picking up where you left off | Performance of the contract |
| Analysis job and error logs | Analysis server | Resolving errors and operating the service using account/device and job identifiers | Legitimate interests (service reliability and security) |
| Support correspondence | Our email provider | Resolving your issue | Legitimate interests / performance of the contract |
The app contains no advertising networks and no third-party tracking SDKs. We do not read the advertising identifier (IDFA), we do not track you across apps or websites, and we do not sell personal data.
5. Microphone and your recordings
The microphone is only listened to while you have it switched on in the practice view. The incoming audio is fed to a pitch detection engine running inside your phone; the measured value becomes the red trace on screen and your score.
- Microphone audio is never sent to our servers and is not recorded by us.
- Recordings of your singing (takes) stay in the app's storage on your own device. We have no access to them.
- Exporting a take (as audio or video) and sharing it with another app is your choice; once shared, the file is subject to the destination platform's rules.
- You can delete recordings in the app, or remove all of them by deleting the app.
6. Uploaded songs and cloud analysis
When you ask for a song to be analysed, the file is first copied onto your device. If you have a connection, it is then uploaded to the analysis server (a GPU worker running on Modal), where vocal separation and note extraction happen. The results — analysis data, vocal and instrumental stems, and cover art if present — are downloaded to your phone. On iOS, a selected video is first converted to audio on your device; the extracted audio is uploaded rather than the whole source video. Embedded cover art and audio file tags may also be processed.
- Once all results are saved on your device, the app requests deletion of the server-side copy — both the source file and the generated stems. If deletion fails, the app retries on next launch.
- A daily automatic sweep removes song folders last modified more than 14 days ago. This is not a guaranteed maximum retention period: deletion depends on the next daily sweep completing successfully.
- Guest uploads carry a randomly generated device identifier. When signed in, uploads use a user identifier derived from your Firebase account ID. It routes the job back to you and tracks quota. Your name and email are not sent to the analysis server, but a signed-in identifier is still linked to your account.
- With no connection, or if the cloud is unreachable, the app asks you and — with your approval — runs the analysis entirely on the device. In that case the file never leaves your phone.
- You can delete the analysis, the stems and the source file from inside the app at any time.
We do not listen to the content you upload, do not review it manually, do not use it to train models. Files are shared only with the service processor that performs the analysis. Uploading only content you are entitled to use is your responsibility; see the Terms of Use.
7. Accounts and sign-in
Creating an account is optional. You can practise songs, run exercises, record takes and keep your scores without ever signing in.
If you do sign up, authentication is handled by Firebase Authentication (Google Ireland Limited / Google LLC). You can use email and password, "Continue with Google" or "Continue with Apple". Data includes the name and email shared by your provider, the Firebase user ID and sign-in timestamps. Firebase also processes IP and browser/device information for security. Your password is not stored on our own server; password verification happens at Firebase.
With "Continue with Apple" you may choose to hide your email address, in which case we only receive Apple's relay address.
You can delete your account from inside the app (account panel → delete account). In the current iOS version, after you verify your identity again, deletion removes the cloud analysis files linked to your account, the RevenueCat customer record and the Firebase authentication record. Apple access is also revoked if you use Sign in with Apple. The app confirms success only after completion; connection or provider errors require a retry. Your local library and recordings remain; you can delete them in the app or remove the app.
To prevent an older app version or an unfinished analysis from recreating the deleted account, we retain a minimal deletion-status record keyed by a cryptographic digest of its identifier. It contains no name, email or song content. Security logs and store transaction records retained for legal reasons follow separate retention rules. Deleting your account does not automatically cancel your store subscription.
8. Subscriptions and payment
Cantavo Pro is sold through the Apple App Store. Apple handles the payment end to end.
- Your card number, billing address and Apple ID never reach us. We have no access to your payment data at any point.
- We use RevenueCat to keep track of subscription status (active / expired). RevenueCat receives purchase receipts/history and entitlement status. Guests use a RevenueCat-generated identifier; signed-in users use an identifier derived from their Firebase account. We do not send raw names or email addresses, but signed-in purchase history is linked to the account. This data supports verification, restoration and RevenueCat customer/purchase analytics.
- You manage and cancel the subscription in your App Store account settings. Refund requests are decided by Apple — see the Refund and Cancellation Policy.
9. Data kept on your device
The following practice data is stored on your device. Temporary cloud analysis of song files is described in section 6; account and subscription data are described in sections 7–8:
- your song library (source file, separated stems, analysis result, cover art),
- your recordings and studio settings,
- progress records, your list of difficult notes, streak and weekly goal counters,
- theme preference, audio/mixer settings, language choice,
- your free analysis credit counter and last known subscription status.
Deleting the app removes all of it from your device. This cannot be undone — export anything you want to keep first.
10. App permissions
| Permission | Used for | If you decline |
|---|---|---|
| Microphone | Measuring and recording the pitch you sing | You can still play songs and watch the notes; the live trace and score will not work |
| File access (document picker) | Choosing the song you want analysed | You work with the demo songs bundled with the app only |
| Saving to Photos / Files | Exporting your recording or video | Export is unavailable; in-app playback is unaffected |
We do not ask for location, contacts, calendar, health data or the advertising identifier.
11. Service providers
We rely on the following processors to operate the service:
| Provider | Role | Data shared |
|---|---|---|
| Apple (App Store) | Distribution and payment | Purchase transaction, receipt, subscription status |
| RevenueCat, Inc. | Subscription management and purchase analytics | Guest or account-linked user ID, receipt, purchase history, entitlement status |
| Google (Firebase Authentication) | Authentication (only if you create an account) | Name/email, user ID, sign-in timestamps and security information |
| Modal Labs, Inc. | GPU processing for song analysis | Temporary song file, cover/tags and analysis results; device/account ID and technical job logs |
| Vercel Inc. | Hosting for this website | Standard server request logs (IP address, user agent) |
| Google LLC (YouTube) / Spotify AB | Match by link: reading only the title, artist and cover of a song link you paste, from the provider's public oEmbed service | Only the link you paste. No request is sent unless you paste a link; no audio or video is ever downloaded, and the cover image is not stored on your device |
12. International transfers
These providers largely operate servers in the United States and the European Union, so the relevant data is transferred internationally. Transfers are made on the basis of the providers' Standard Contractual Clauses and data processing addenda, in line with Chapter V of the GDPR and Article 9 of the KVKK. The file transferred for song analysis is temporary and deleted within the periods set out in section 6.
13. Retention periods
| Data | Kept for |
|---|---|
| Microphone audio | Not retained — processed in real time |
| File uploaded for analysis (server side) | Deletion requested after results are saved, with retries on failure; remaining folders older than 14 days are removed by the daily sweep |
| Library and recordings on your device | Until you delete them or remove the app |
| Account record | Until you delete the account |
| Deletion-status record | As needed to prevent older clients from recreating a deleted account; identifier digest and operation status only |
| Subscription, purchase and security records | The RevenueCat customer record is removed during account deletion. Store transaction records and provider security logs follow their legal and security retention periods |
| Support correspondence | Up to 2 years after the request is closed |
14. Security
All traffic between the app and our servers is encrypted with TLS. On the analysis server, each device identifier is isolated in its own directory. Access rights are limited to what is necessary. That said, no system is absolutely secure; should a breach affect your personal data, we will notify you and the competent authority within the periods required by law.
15. Children's privacy
Cantavo is not directed at children. We do not knowingly collect personal data from anyone under 13 (or a higher age if your country sets one). If we learn that a child's data has reached us, we delete it. If you notice such a case, write to info@rasoft.uk.
16. This website and cookies
This website uses no cookies. There are no analytics, advertising or tracking scripts, and we build no profile of your visit. There are no session, cart or preference cookies either.
The site is hosted on Vercel. As with any web server, your request appears in the host's technical logs (IP address, user agent, requested path, timestamp); those logs keep the site running and help prevent abuse. We do not access them for marketing.
If we ever add analytics, we will update this section and ask for consent where required.
17. Your rights (GDPR / UK GDPR)
If you are in the European Economic Area, Switzerland or the United Kingdom, you have the right to access your personal data, to have it rectified or erased, to restrict or object to processing, and to data portability. Where processing rests on consent (the microphone permission, for instance) you may withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out beforehand.
The legal bases are listed in the table in section 4. To exercise a right, write to info@rasoft.uk. You also have the right to lodge a complaint with your local supervisory authority.
18. Your rights (Turkish KVKK)
Under Article 11 of the KVKK you may learn whether your personal data is processed, request information about the processing, learn its purpose and whether it is used accordingly, know the third parties to whom it is transferred at home or abroad, request correction of incomplete or inaccurate data, request erasure or destruction under Article 7, request that such actions be notified to third parties, object to a result produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.
Send requests to info@rasoft.uk. We respond within 30 days of verifying your identity. If our answer does not satisfy you, you may complain to the Turkish Personal Data Protection Board.
19. Changes
We may update this policy as the app changes. The current text is always published at this address and the effective date in the header changes with it. For material changes we also notify you inside the app.
20. Contact
For any privacy question: info@rasoft.uk
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Turkish version: Gizlilik Politikası (Türkçe)
Questions: info@rasoft.uk