Privacy Policy
What we collect, why we are allowed to, how long we keep it, and the buttons that let you take it back.
1. Who is responsible for your data
Guitar PS is operated by Braza Holding, which acts as the data controller for the GDPR (Regulation (EU) 2016/679) and as the controller for the Brazilian LGPD (Law 13.709/2018). You can reach us about anything on this page at legal@guitarps.com.
If you are in the European Economic Area or the United Kingdom and believe we have handled your data unlawfully, you may lodge a complaint with your national supervisory authority. If you are in Brazil, the competent authority is the ANPD. You may do this without contacting us first, though we would rather have the chance to fix it.
2. What we collect, and why we are allowed to
We process the following to provide the account and practice tools. Each row states the lawful basis we rely on under GDPR Article 6. Advertising is described separately below.
| Data | Purpose | Lawful basis |
|---|---|---|
| Email address and password (stored only as a salted hash) | Creating and securing your account, signing you in, password resets | Performance of a contract (Art. 6(1)(b)) |
| Display name, profile slug, bio | Showing who wrote a published tab, score or chord chart. Practice time is never published. | Performance of a contract (Art. 6(1)(b)) |
| Tabs, sheet music, chord charts and the files you upload | Storing your private library and, only if you publish, showing an item to other signed-in users | Performance of a contract (Art. 6(1)(b)) |
| Publication rights declarations: account, item, wording version, date and time | Recording the declaration you make before sharing music and handling copyright disputes | Legitimate interests (Art. 6(1)(f)): preventing infringement and establishing or defending legal claims |
| Practice progress: time, attempts, accuracy, tempo milestones, daily totals | Building your routine, showing your history and consistency | Performance of a contract (Art. 6(1)(b)) |
| Record of your consent to these terms, with a timestamp | Demonstrating that consent was given, as the GDPR requires us to | Legal obligation (Art. 6(1)(c)) |
| Authentication events, error logs, browser and device type | Keeping the service running and detecting abuse | Legitimate interests (Art. 6(1)(f)): operating a secure service |
Audio from the tuner is analysed inside your browser and never leaves your device. We do not record it, upload it or store it.
Your music starts as a private draft. Publishing is optional and makes an item available only to signed-in Guitar PS users. We do not expose user library items to anonymous visitors, index them for search engines or use song-specific user uploads as marketing pages.
We use Google AdSense to support the service. Google and other advertising vendors may use cookies and similar identifiers to serve and measure ads, including ads based on your visits to this site and other websites. We do not sell or rent your account or library data to advertisers or data brokers.
When AdSense code loads, your browser may send Google the page URL, IP address and browser information. Google may use the IP address to estimate your general location. The advertising vendors and purposes available to you are described in the consent message where one is required.
You can opt out of personalised ads in Google Ad Settings. Where an advertising consent message is shown, you can decline consent and continue using Guitar PS, or change your choice later using its privacy and cookie settings control.
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you (GDPR Art. 22). Your practice routine adapts to your own scores, which affects only what the app suggests you play next.
Google Ad Settings · How Google uses information from partner sites
3. Where your data is stored, and who else touches it
For the account and practice service, we use Supabase for authentication, the database and private file storage, and our hosting provider to deliver the application. Google and its advertising partners may separately process information collected through AdSense under their own privacy terms.
Data may be processed outside your country. Where it leaves the EEA or the UK, the transfer relies on the European Commission’s Standard Contractual Clauses together with the supplementary measures required by those clauses. You can request a copy of the safeguards at legal@guitarps.com.
Your browser also keeps a local copy of practice progress and interface preferences so the app works between sessions. That copy is on your device, under your control, and clearing your browser data removes it.
4. How long we keep it
These periods apply to data kept by Guitar PS. Google and its advertising partners describe their own retention periods in their privacy terms.
| Data | Retention |
|---|---|
| Account, library and practice data | While your account is open. Deleted within 30 days of you deleting the account. |
| Published tabs, scores and chord charts | Until you unpublish or delete them. Deleting your account unpublishes them. |
| Publication rights declarations and copyright claim records | While the item or account exists and for 5 years afterward, solely to document publication decisions, resolve disputes and establish or defend legal claims. |
| Consent records | 5 years after the account closes, because we must be able to evidence consent. |
| Security and error logs | 90 days, then deleted automatically. |
| Backups | Rolling 30-day window. Deleted data disappears from backups within that period. |
5. Your rights, and how to use them
Under the GDPR and the LGPD you have the rights below. Most are a button in Settings rather than an email, because a right you have to ask permission to use is not much of a right.
| Right | How to exercise it |
|---|---|
| Access a copy of your data (Art. 15) | Settings → Your data → Export |
| Portability in a machine-readable format (Art. 20) | Settings → Your data → Export, which produces JSON |
| Correct inaccurate data (Art. 16) | Settings → Account, or email us |
| Erasure (Art. 17) | Settings → Delete account |
| Withdraw advertising consent (Art. 7(3)) | Use the privacy and cookie settings control shown with the advertising consent message, or email us |
| Restrict or object to processing (Art. 18, 21) | Email legal@guitarps.com |
| Complain to a supervisory authority (Art. 77) | Your national authority, or the ANPD in Brazil |
We answer within 30 days. We do not charge for this, and we will not ask you why. We may ask you to confirm your identity first, so that nobody else can use these rights against your account.
6. Children
Guitar PS is not directed at children under 16, or under the higher age of digital consent that applies in your country. We do not knowingly collect data from children below that age. If you are a parent or guardian and believe a child has created an account, email us and we will delete it.
7. Changes to this policy
If we change how we handle your data in a way that affects you, we will tell you inside the app before the change takes effect, not by quietly editing this page. The date at the top of this page is the last time it changed.