BioBand Privacy Policy

BioBand ("the app") is a music practice app for Piano, Drums, Guitar, Violin, and Pads. This policy explains what data the app collects, how it's used, and your choices.

Using the app as a guest

If you don't sign in, BioBand works entirely on your device. Nothing you do — recordings, practice progress, settings — is sent anywhere, and none of it is kept between app launches: closing and reopening the app resets it to a fresh state.

Signing in with Google or Apple

You can sign in with Google or with Sign in with Apple. Either one is used only to authenticate you and to give your profile a name to start from. Signing in lets the following small pieces of data sync to our cloud database, so they follow you across devices:

• Your display name, favorite instrument, and profile photo URL
• Practice progress: streaks, total practice time, completed challenges, earned badges
• Your practice-reminder time preference

This data is tied to your account and is only ever read or written by you (enforced server-side, not just in the app).

What each provider gives us

• Google — your name, e-mail address and profile photo URL. The name and photo prefill your BioBand profile, and you can change or clear both in the app.
• Apple — your name and your e-mail address. Apple sends the name only the very first time you authorize BioBand and never again; we use it to prefill your display name, which you can change at any time. Apple does not give us a photo. If you choose Hide My Email, Apple gives us a private relay address (…@privaterelay.appleid.com) instead of your real one, and that relay address is the only address we ever see.

In both cases your e-mail address is stored alongside your account in our cloud database, and the app shows it back to you in Profile → Settings. It is not synced into the practice data above, we do not use it to contact you, and we never send marketing e-mail.

What we never collect or upload

Your recordings, Studio projects, imported songs, and any audio you create or import stay only on your device. We do not upload, transmit, back up, or have any access to your audio. We do not use advertising identifiers, and we do not track your activity in other apps or on other websites. We do not use any third-party analytics service.

If you sign in, your profile row additionally carries a small set of feature counters — how many times you have opened Tutorial Mode, finished a tutorial, opened Studio or the Drum Machine, saved a recording, imported a file, or exported/restored a backup. These are running totals only: no timestamps, no order of actions, nothing about which song, recording or file was involved. They exist so we can tell which parts of the app people never find, and they are stored in your own row under the same Row Level Security as the rest of your data. In guest mode nothing is uploaded, counters included.

Third-party services

• Google Sign-In — used solely for authentication. See Google's Privacy Policy for how Google handles your account data.
• Sign in with Apple — used solely for authentication. Apple tells us your name (once) and an e-mail address, which may be a private relay address if you asked Apple to hide your real one. See Apple's Privacy Policy for how Apple handles your account data.
• Our cloud database — a third-party hosting provider we use only to store the small progress/settings data described above, plus the account record (your user ID and the e-mail address from your sign-in provider).

Your rights (KVKK / GDPR)

The developer of BioBand acts as the data controller for the account data described above (contact: the email below). Because our cloud database may host data outside Türkiye/the EU, choosing to sync your account data means you consent to this transfer.

Depending on your country's law — including Turkey's Personal Data Protection Law (KVKK) and the EU's GDPR — you have the right to: learn whether your data is being processed, request information about it, request correction of inaccurate data, request deletion of your data, object to its processing, and seek compensation for damages caused by unlawful processing. To exercise any of these rights, contact us at the email below.

Your choices

• Sign out at any time from Profile → Settings. This immediately clears all data stored on that device and returns the app to a fresh guest state.
• Delete your account from Profile → Settings. This permanently removes the account itself and everything stored under it — the progress, settings and reminder data listed above — and then wipes the copy on your device. It cannot be undone.
• Delete without the app installed: see Account deletion, which also lists exactly what is deleted, what is kept, and for how long.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a new "Last updated" date.

Contact

Questions about this policy or your data? Email: bilalsanli129@gmail.com