Privacy Policy

The controller is Andrea Libutti (VAT no. 18598921007), author of Onset. For any request about your data: support@onsetlyrics.app.

Onset has no backend where we store your content: songs, setlists, lyrics, chords, notes and recordings stay locally on your device. The only exception, at your explicit request, is share links (point 3.c). We don't see your content, we don't sell it, we don't use it to profile you.

a. Content you create (songs, setlists, lyrics, chords, timing, notes, recordings). It stays on your device, to make the app work. Legal basis: performance of the service.

b. Backup to your cloud (optional). If you enable backup, your data is saved to your iCloud account (iOS) or Google Drive (Android), not on our servers. We don't access it. On Android, access to Google happens through Google Sign-In with permission only to the app's dedicated folder on your Drive (drive.appdata): we don't see the rest of your Drive. Onset's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Legal basis: consent — you enable the backup and you can disable it whenever you want from the settings.

c. Share links. If you generate a link to share a setlist, the shared content is uploaded to a service of ours (a Cloudflare Worker) and kept for 30 days, then automatically deleted. Anyone who has the link can view its content. Legal basis: performance of the service, at your request.

d. Diagnostics and crash reports. To fix bugs we use Sentry (servers in the EU): we collect error logs, technical information about the device and a technical identifier of the installation, which serves only to group crashes together. We never send your lyrics or data that directly identifies you (name, email). You can turn off this collection from the settings. Legal basis: legitimate interest in keeping the app stable.

e. In-app purchases. Any subscriptions are handled by Apple (App Store) or Google (Play), through RevenueCat to recognize your subscription status. RevenueCat receives an anonymous identifier of the installation and technical device identifiers, needed to recognize the subscription across your devices — not your name or your email. We don't see your card details: the payment stays between you and the store. Legal basis: performance of the contract.

f. Online lyrics search (optional, off by default). If you enable search in the built-in lyrics database (LRCLIB), your search (title/artist) is sent to the external service lrclib.net. It stays off until you turn it on. Legal basis: consent.

g. Audio features (optional). If you use the recording or reference-audio features, the recordings stay on your device. Some transcription features, where available (iOS), may use Apple's speech recognition, which may process the audio on Apple's servers according to Apple's privacy policy. Similarly, any connection to Apple Music is governed by Apple. Legal basis: consent — these features start only if you launch them. For non-EU transfers, what is stated in point 5 applies.

We don't sell your data and we don't hand it over for marketing. The only parties involved are providers that help us run the app, each according to its own privacy policy:

• Apple and Google — store, payments, backup to your cloud, system services.
• RevenueCat — subscription management.
• Sentry (EU) — diagnostics and crashes.
• Cloudflare — domain, website and share links.
• LRCLIB — only if you enable online lyrics search.

Some providers (Apple, Google, RevenueCat, Cloudflare) are based in the USA and may process data outside the EU, on the basis of the EU-US Data Privacy Framework and, where needed, the standard contractual clauses provided for by the GDPR. This also applies to share links, distributed over Cloudflare's global network. Diagnostics (Sentry) are hosted in the EU.

Local data stays until you delete it (from the app or by uninstalling it). Share links delete themselves after 30 days; if you want to remove one sooner, write to us and we'll delete it. Diagnostics are kept by Sentry for 90 days and then automatically removed.

Backup: you can delete it from the app at any time; on Android you can also revoke Onset's access to your Google Drive at myaccount.google.com/permissions, on iOS you manage the storage from Settings → iCloud.

You have the right to access, rectify, erase, restrict, object to the processing of and to the portability of your data, as well as to withdraw consent at any time. In practice: you delete your content directly from the app or from your cloud; withdrawing a consent is as concrete as turning off the relevant switch in the settings (backup, online lyrics search), and for diagnostics there's a dedicated toggle. For the few pieces of data we process ourselves (crash reports, share links, subscription status) we handle it at your request: write to support@onsetlyrics.app. You can also lodge a complaint with the Italian Data Protection Authority (Garante) (garanteprivacy.it).

Onset is intended for people who are at least 13 years old and does not knowingly collect data from children. If you are under 14 and live in Italy, the features that require consent (backup, online lyrics search) need a parent's authorization.

We adopt reasonable measures to protect data (e.g. encryption in transit, minimization: no lyrics or personal data in the diagnostics logs). No system is 100% secure, but the local-first model cuts the risk surface at the root: your content doesn't pass through our servers.

onsetlyrics.app is a static site: no cookies, no analytics, no tracking. It's hosted on Cloudflare which, like any hosting, temporarily processes visitors' IP addresses to serve the pages and protect them from abuse (legal basis: legitimate interest). The fonts are hosted directly on the site: no request goes out to third parties.

Onset is in beta and evolves. If we change this policy, we'll update the date at the top; for significant changes we'll flag it in the app and on this page.

For any question about privacy: support@onsetlyrics.app. I read and reply myself.

This is an English translation provided for convenience. In case of any discrepancy, the Italian version prevails.