Privacy Policy
The short version: audio from your microphone is processed on your device, never sent to our servers and never stored by us. A song you upload for analysis is sent to a cloud server temporarily and deleted from it as soon as the result reaches your phone. An account is optional. Your payment details never reach us.
1. In short
Cantavo is an iOS app for practising singing with your own recordings. We designed it to run on as little data as possible: the core features — practice, exercises, recording, scoring — work without an account and without an internet connection. This policy explains what is processed, why, where it sits and how long it stays.
2. Data controller
The controller under the EU General Data Protection Regulation ("GDPR") and the data controller (veri sorumlusu) under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") is:
- Ra. Soft LTD (developer of Cantavo)
- Email: destek@cantavo.app
3. Scope
This policy covers the Cantavo mobile app (com.cantavo.app) and this website. Third-party destinations you reach from the app (the App Store, for example) are governed by their own policies.
4. What we process
| Data | Where it is processed | Purpose | Legal basis |
|---|---|---|---|
| Microphone audio (live pitch tracking) | On your device only | Measuring the note you sing; producing the live trace and score | Consent (microphone permission) / performance of the contract |
| Your recordings (takes) | On your device only | Playing back, autotuning and exporting your own take | Performance of the contract |
| Audio/video file you upload | Your device + analysis server, temporarily | Separating the vocal, extracting the notes | Performance of the contract (at your request) |
| Device identifier (randomly generated UUID) | Your device + analysis server | Returning the analysis job to the right device; enforcing quota | Legitimate interests (operating the service, preventing abuse) |
| Email address and account ID (if you sign up) | Firebase Authentication | Verifying sign-in; carrying a subscription across devices | Performance of the contract |
| Subscription status and anonymous purchase ID | RevenueCat + Apple App Store | Verifying and restoring entitlements | Performance of the contract / legal obligation |
| Progress, scores, theme, settings | On your device only | Picking up where you left off | Performance of the contract |
| Support correspondence | Our email provider | Resolving your issue | Legitimate interests / performance of the contract |
The app contains no advertising networks and no third-party tracking SDKs. We do not read the advertising identifier (IDFA), we do not track you across apps or websites, and we do not sell personal data.
5. Microphone and your recordings
The microphone is only listened to while you have it switched on in the practice view. The incoming audio is fed to a pitch detection engine running inside your phone; the measured value becomes the red trace on screen and your score.
- Microphone audio is never sent to our servers and is not recorded by us.
- Recordings of your singing (takes) stay in the app's storage on your own device. We have no access to them.
- Exporting a take (as audio or video) and sharing it with another app is your choice; once shared, the file is subject to the destination platform's rules.
- You can delete recordings in the app, or remove all of them by deleting the app.
6. Uploaded songs and cloud analysis
When you ask for a song to be analysed, the file is first copied onto your device. If you have a connection, it is then uploaded to the analysis server (a GPU worker running on Modal), where vocal separation and note extraction happen. The results — analysis data, vocal and instrumental stems, and cover art if present — are downloaded to your phone.
- As soon as the download completes, the server-side copy is deleted — both the source file you uploaded and the stems produced from it. If the deletion fails for any reason, the app retries on next launch.
- As a safety net, an automatic sweep runs on the server and deletes any song folder older than 14 days.
- Uploads carry a randomly generated device identifier. It is not linked to your name or email; it routes the job back to the right device and tracks the quota.
- With no connection, or if the cloud is unreachable, the app asks you and — with your approval — runs the analysis entirely on the device. In that case the file never leaves your phone.
- You can delete the analysis, the stems and the source file from inside the app at any time.
We do not listen to the content you upload, do not review it manually, do not use it to train models and do not share it with third parties. Uploading only content you are entitled to use is your responsibility; see the Terms of Use.
7. Accounts and sign-in
Creating an account is optional. You can practise songs, run exercises, record takes and keep your scores without ever signing in.
If you do sign up, authentication is handled by Firebase Authentication (Google Ireland Limited / Google LLC). You can use email and password, "Continue with Google" or "Continue with Apple". The data processed is: your email address, the user ID Firebase generates and sign-in timestamps. Your password is not stored by us; password verification happens at Firebase.
With "Continue with Apple" you may choose to hide your email address, in which case we only receive Apple's relay address.
You can delete your account from inside the app (account panel → delete account). This removes your authentication record. Your library and recordings stay on your device; deleting the app removes those as well.
8. Subscriptions and payment
Cantavo Pro is sold through the Apple App Store. Apple handles the payment end to end.
- Your card number, billing address and Apple ID never reach us. We have no access to your payment data at any point.
- We use RevenueCat to keep track of subscription status (active / expired). What goes to RevenueCat: an anonymous user identifier generated by the app, Apple's purchase receipt and the resulting entitlement status.
- You manage and cancel the subscription in your App Store account settings. Refund requests are decided by Apple.
9. Data kept on your device
The following stays on your device and is never sent to us:
- your song library (source file, separated stems, analysis result, cover art),
- your recordings and studio settings,
- progress records, your list of difficult notes, streak and weekly goal counters,
- theme preference, audio/mixer settings, language choice,
- your free analysis credit counter and last known subscription status.
Deleting the app removes all of it from your device. This cannot be undone — export anything you want to keep first.
10. App permissions
| Permission | Used for | If you decline |
|---|---|---|
| Microphone | Measuring and recording the pitch you sing | You can still play songs and watch the notes; the live trace and score will not work |
| File access (document picker) | Choosing the song you want analysed | You work with the demo songs bundled with the app only |
| Saving to Photos / Files | Exporting your recording or video | Export is unavailable; in-app playback is unaffected |
We do not ask for location, contacts, calendar, health data or the advertising identifier.
11. Service providers
We rely on the following processors to operate the service:
| Provider | Role | Data shared |
|---|---|---|
| Apple (App Store) | Distribution and payment | Purchase transaction, receipt, subscription status |
| RevenueCat, Inc. | Subscription status management | Anonymous user ID, receipt, entitlement status |
| Google (Firebase Authentication) | Authentication (only if you create an account) | Email, user ID, sign-in timestamps |
| Modal Labs, Inc. | GPU processing for song analysis | The audio file you upload and a random device ID (temporary) |
| Vercel Inc. | Hosting for this website | Standard server request logs (IP address, user agent) |
12. International transfers
These providers largely operate servers in the United States and the European Union, so the relevant data is transferred internationally. Transfers are made on the basis of the providers' Standard Contractual Clauses and data processing addenda, in line with Chapter V of the GDPR and Article 9 of the KVKK. The file transferred for song analysis is temporary and deleted within the periods set out in section 6.
13. Retention periods
| Data | Kept for |
|---|---|
| Microphone audio | Not retained — processed in real time |
| File uploaded for analysis (server side) | Until the result is downloaded; 14 days at the latest |
| Library and recordings on your device | Until you delete them or remove the app |
| Account record | Until you delete the account |
| Subscription and purchase records | As long as tax and commercial law require |
| Support correspondence | Up to 2 years after the request is closed |
14. Security
All traffic between the app and our servers is encrypted with TLS. On the analysis server, each device identifier is isolated in its own directory. Access rights are limited to what is necessary. That said, no system is absolutely secure; should a breach affect your personal data, we will notify you and the competent authority within the periods required by law.
15. Children's privacy
Cantavo is not directed at children. We do not knowingly collect personal data from anyone under 13 (or a higher age if your country sets one). If we learn that a child's data has reached us, we delete it. If you notice such a case, write to destek@cantavo.app.
16. This website and cookies
This website uses no cookies. There are no analytics, advertising or tracking scripts, and we build no profile of your visit. There are no session, cart or preference cookies either.
The site is hosted on Vercel. As with any web server, your request appears in the host's technical logs (IP address, user agent, requested path, timestamp); those logs keep the site running and help prevent abuse. We do not access them for marketing.
If we ever add analytics, we will update this section and ask for consent where required.
17. Your rights (GDPR / UK GDPR)
If you are in the European Economic Area, Switzerland or the United Kingdom, you have the right to access your personal data, to have it rectified or erased, to restrict or object to processing, and to data portability. Where processing rests on consent (the microphone permission, for instance) you may withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out beforehand.
The legal bases are listed in the table in section 4. To exercise a right, write to destek@cantavo.app. You also have the right to lodge a complaint with your local supervisory authority.
18. Your rights (Turkish KVKK)
Under Article 11 of the KVKK you may learn whether your personal data is processed, request information about the processing, learn its purpose and whether it is used accordingly, know the third parties to whom it is transferred at home or abroad, request correction of incomplete or inaccurate data, request erasure or destruction under Article 7, request that such actions be notified to third parties, object to a result produced solely by automated analysis, and claim compensation for damage caused by unlawful processing.
Send requests to destek@cantavo.app. We respond within 30 days of verifying your identity. If our answer does not satisfy you, you may complain to the Turkish Personal Data Protection Board.
19. Changes
We may update this policy as the app changes. The current text is always published at this address and the effective date in the header changes with it. For material changes we also notify you inside the app.
20. Contact
For any privacy question: destek@cantavo.app
Turkish version: Gizlilik Politikası (Türkçe)
Questions: destek@cantavo.app