Privacy Policy

The short version

We do not sell your data, and we do not use your recordings or transcriptions to train machine-learning models. With Help improve NoteFusion on, the recordings it keeps are used only to test and tune our own transcription engine (below). Our public web pages show ads from Google, and the Android app shows them to some free accounts once their free trial is used; Pro members, anyone who has paid and the signed-in web app see none, and nothing you record, save or upload is used for advertising.

Who we are

NoteFusion (“we”, “us”) operates the NoteFusion app and the web app at notefusion.studio. They listen to music, a tune you hum, a recording, or a song you link to, and write it out as Tonic Solfa and staff notation. This policy explains what we collect, why, and what you can do about it. It applies to the app, the web app, and this website.

Questions or requests: privacy@notefusion.studio.

What we collect

Account information

• Your name and email address.
• A phone number, only if you choose to add one.
• A password, stored only as a bcrypt hash. We never store, log, or transmit the password itself, and we cannot recover it.

If you sign in with Google

Google sends us your name, email address, profile picture URL, and a stable account identifier. We store these to create and recognise your account. We receive nothing else from your Google account, so no contacts, files or calendar. Google’s own handling of the sign-in is covered by Google’s Privacy Policy.

Accounts created this way have no password on our side.

Audio you record or upload

Audio is sent to our servers, passed to our transcription engine, and deleted once the job completes. It is not archived, not backed up, and not reviewed by a person. Transcription runs on our own infrastructure; your audio is not sent to a third-party AI service.

One exception: when you upload a whole song and we separate the voice from the music, we keep the instrumental (the backing, without the voice) with the sheet it made, so you can practise over it later, offline too. It is stored with our media host, Cloudflare (R2 object storage), only you can play it, it is not backed up, and it is deleted when you delete that sheet or close your account.

Help improve NoteFusion (off unless you turn it on)

In the app's Settings and the web app's Account page, under Your recordings. While it is on, each recording you send is held for up to two days after it is transcribed. If you tell us the transcription came out off or close, that recording is kept for 30 days, with what you said was wrong and the sheet as you corrected it, so we can run our engine on it again and see whether a change fixes it. A member of the NoteFusion team may listen to it to find what went wrong. If you say it was spot on, or say nothing, it is deleted within two days. It is stored with Cloudflare (R2 object storage), not backed up, never shared or sold, never sent to a third-party AI service, and never shown with your name. Turn the switch off and everything it kept is deleted at once; closing your account deletes it too. Links you paste are never kept this way.

Separately, and whether or not the switch is on, our engine tunes a few of its own settings (such as when to ask “which doh is it?”) from what people change on their sheets and their answers to “How did this transcription come out?”, counted together without names.

Songs you link to

When you paste a YouTube, Spotify or Apple Music link, our server fetches the song’s audio, isolates the voice, transcribes it, and deletes the audio the moment the job finishes; none of it is kept with your sheet, not even the instrumental. We keep the song’s title and artist so the sheet can credit them. The link you pasted is not kept against your account beyond the job.

Transcriptions you save

When you save a result to your library we keep the musical data, which covers note events, detected key, tempo, time signature, solfa labels, MusicXML, any lyrics you type, the alto, tenor and bass parts written for it, and the title you gave it. This is what lets your library persist across the app and the web.

If you share a sheet, we create a link that anyone holding it can open without an account. The page shows the sheet and your name as the person who shared it, and we count how often it is opened. Stop sharing at any time and the link stops working.

A take you sing back

Pro accounts can sing a part and have each note marked. That recording is compared with the sheet and discarded straight away; neither the audio nor the marks are stored.

Profile picture

If you upload one, the image file is stored with our media host, Cloudflare (R2 object storage), and we keep the resulting URL against your account.

Device and technical data

• A push-notification token per device, if you allow notifications. It tells us where to send your notifications, and nothing more: a transcription that is ready or could not be made, practice reminders, an answer from support, and now and then a note or a tip. A tip is chosen from your own activity in NoteFusion (a sheet you have not opened yet, your free transcription for the week being ready, something you have not tried), one a day at most. You can turn tips off under “Tips for you” in Settings, or mute them in your phone’s notification settings.
• Sign-in session tokens, so you stay logged in without re-entering credentials.
• Your approximate country, inferred from your IP address, so the website and app show the pricing available in your region. An anonymous website lookup is used for that response and is not attached to an account.
• A device identifier, held as a one-way hash, together with the country it was first seen in. It exists so the free allowance (the first transcription, then one a week) is counted per device as well as per account, which is what stops one device claiming it over and over with new sign-ins. It is not used for advertising and is not shared.
• For your first transcription (the free trial), your network address, held only as a one-way hash, so many new accounts on one connection cannot each take a trial. It is not used for anything else.
• For the free 30-second preview on the website, a random identifier your browser keeps and your network address, so the preview is counted per browser and per address. If you then create an account, the preview is attached to it. We also record whether an account was created on the web or in the app, so we can see which parts of the service people find useful.
• Ordinary server logs, including IP address and error diagnostics, used to keep the service running and to investigate abuse.

Error reports

When something breaks, an error report is sent to Sentry so that we can find and fix it. From the app, a report holds what went wrong in the code, your phone’s model and operating system, the app version, your IP address and your account’s id, and for about one report in ten a short screen recording of what led up to the error. The app also records about one session in twenty this way, error or not, so we can see where people get stuck. These recordings show the screen as you saw it, including your name, email address, sheets and lyrics; password fields are always blanked, whether hidden or shown. Our team watches them in Sentry and in our admin console, only to fix problems and make the app easier to use. From the web app and our servers, a report holds only what went wrong in the code, which page or request it happened on and, from the web app, your browser’s name and version: no IP address, no email address and no link you pasted. The web app loads Sentry’s code only once an error has happened, to send its report. Sentry keeps reports for at most 90 days.

Support chat, feedback and our assistant

When you write to us in the support chat or send feedback, our assistant, built on Anthropic’s Claude, reads your message, the conversation so far and a short summary of your account (your first name, when you joined, your country and time zone, your plan, the free transcriptions you have left, and the dates and outcomes of your latest transcriptions and checkouts), and usually answers within a minute in the same chat. Its answers are always shown as the “NoteFusion assistant”, never as a person. It is never given your email address, password or card details, and it cannot refund you, give you Pro or change your account: when your message needs one of those, or it is not sure of the answer, it says so and a person on our team replies. Our team can read every conversation. The same assistant drafts some of our team’s replies, which a person reads before sending.

Payments

Pro is paid for on a checkout page hosted by a payment provider: Paystack for naira, Bachs for US dollars. They receive your email address and the amount, and take your card details themselves; we never see or store card numbers. They tell us whether the payment succeeded, and we keep that record so your plan is right.

Browser storage

Apart from the advertising described below, which runs only on our public pages, the website and web app set no advertising cookies. Your browser keeps your sign-in tokens, the preview identifier above, and a few preferences (such as whether sounds are on) in its local storage, for the web app alone. Our website measures page views and clicks with first-party requests to our own server: the page you are on, the site you came from and any campaign tags in the link you followed (such as utm_source or ?ref=), the label of what you clicked, and two random identifiers the browser keeps in its own storage so that return visits can be counted; a measurement that could not be sent yet waits there too (a week at most) until it reaches us. With each measurement we keep the name of your browser and operating system (such as “Chrome” and “Android”, without versions) and your approximate country, worked out from your IP address when the measurement arrives. We do not keep your IP address, your full browser details or your screen size, and no third-party analytics scripts run on the site. If you use the chat button to write to us, we keep what you write and our answers, with your account when you are signed in, or otherwise with a random key your browser keeps and the name and email you chose to leave, so we can answer you; it is deleted with your account. When you are signed in to the web app, the things you do there (a tune recorded, a sheet saved or shared, a checkout started) are recorded against your account so that we can see how the product is used and support you. The same goes for the phone app: what you do in it (the screens you open, a recording made, a sheet played, saved, shared or exported, a setting changed, a checkout opened) and what our server does for your account (each sign-in, a sheet renamed or deleted, a choir joined) are recorded against your account. These records never include your audio, the words or notes of your sheets, or anything you typed; they are deleted with your account, and otherwise after two years at most.

Advertising

Our public pages (the home page and our policy pages at notefusion.studio) show ads served by Google AdSense. The signed-in web app at notefusion.studio/app does not show ads.

The NoteFusion Android app shows ads served by Google AdMob to some free accounts after their free trial, never to a Pro member, a choir’s singer or anyone who has bought a song or a membership: a banner while a transcription is being written, and, only if you tap Watch an ad to play it on a sheet, a short video that opens playback and Learn my part on that sheet. When you watch that video to its end, Google tells our server, with your account id and which sheet it was for, so we can open it; nothing else about you is sent to Google by us. AdMob may use your phone’s advertising ID, which you can reset or delete in Android’s Settings (Privacy, then Ads). If you are in the European Economic Area, the UK or Switzerland, the app asks for your consent before any ad is shown, and personalises ads only if you agree.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You can opt out of personalised advertising in Google’s Ads Settings, or opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info.

Google acts as an independent controller of the data it collects through these cookies; see how Google uses information from sites that use its services. If you are in the European Economic Area, the UK or Switzerland, you are asked for your consent before ads that use cookies are personalised, and you can change your choice at any time from the privacy link on the page. We never pass your account details, recordings or transcriptions to Google for advertising.

Why we are allowed to hold it

Where the UK/EU GDPR applies, our lawful bases are:

• Performance of a contract, for account data, saved transcriptions, and the processing of audio you submit. Without these the app cannot do what you asked it to do.
• Consent, for push notifications, microphone access, your profile picture, and advertising cookies on our public pages. Each is optional and each can be withdrawn.
• Legitimate interests, for security logging and abuse prevention, balanced against your rights.

Who else sees it

We share data only with the providers that run the service:

• Amazon Web Services: the servers that run the API, the transcription engine and the database.
• Vercel: hosting of this website and the web app.
• Cloudflare: profile picture storage and delivery.
• Resend: the emails we send you, such as the sign-up code and password resets, the occasional note from the founder, and occasional offers (for example a seasonal discount on Pro). You can turn the notes and offers off with the “Notes and offers from NoteFusion” switch in your account settings or the unsubscribe link in any of them. An offer email carries a tiny image from our own server, so that when your mail app shows it we record the time it was first opened (and when its button is clicked); it records nothing else, and an email shown with images turned off is not counted.
• Expo: delivery of push notifications to the app.
• Google: if you choose Google sign-in, and, through AdSense, the ads on our public pages, and through AdMob, the ads in the Android app (see Advertising).
• Paystack and Bachs: payment, as above.
• GeoJS: IP-to-country resolution for regional pricing.
• Sentry: error reports from the app, the web app and our servers (see Error reports).
• Anthropic: its Claude model reads what you write in the support chat and in feedback, with the account summary described above, to answer you (see Support chat, feedback and our assistant). It also reads a photo or PDF of a tonic solfa page you send to be transcribed, the words you type to find a hymn on a result, and the marks of a practice take (never its audio) to write Doh’s tip. Anthropic processes it on our behalf under its commercial terms, which do not let it train its models on it.
• Meta (Facebook and Instagram): only if you reach our website from one of our own ads on Facebook or Instagram. The link carries Meta’s click identifier (fbclid); we keep it, with your browser’s user agent, for 28 days. If in that time you create an account, start a checkout or pay on our website, our server tells Meta that it happened (with the amount and plan for a checkout or payment), together with that click identifier, your browser’s user agent, your country, and your email address and account id in hashed (one-way scrambled) form, so Meta can tell which of our ads worked. Nothing is sent about anyone who did not come from one of our ads on Facebook or Instagram, and no Meta script or pixel runs on our pages.

Each processes data on our instructions, except Google for advertising, which acts as an independent controller as described above, and Meta, which uses what we send it to measure and deliver our ads under its own terms. We do not sell personal data. Apart from telling Meta about the sign-ups and payments that came from our own ads on Facebook or Instagram (above), we do not share your account data, recordings or transcriptions for advertising. We may disclose data if the law requires it.

How long we keep it

• Audio recordings are deleted as soon as the transcription job finishes. The instrumental of a whole song you upload is kept with its sheet until you delete the sheet or close your account. With Help improve NoteFusion on, a recording is held up to two days, and one you said came out off or close for 30 days, or until you turn the switch off.
• Saved transcriptions and account data stay until you delete them or close your account.
• Session tokens last until they expire, you sign out, or you change your password.
• Server logs are kept for a short rolling window, for diagnostics only.

Your choices

In the app, and in the web app’s account settings, you can edit your profile and photo, delete individual transcriptions, stop sharing a sheet, revoke microphone or notification permission at any time through your device or browser settings, and close your account outright.

You can also delete your account through the app, from the web app’s account settings, or in a browser via our account deletion page. Depending on where you live you may have the right to access, correct, export, or restrict the processing of your data, and to complain to your data protection authority. Write to privacy@notefusion.studio and we will respond within 30 days.

Security

Traffic runs over HTTPS. Passwords are hashed with bcrypt. Access tokens are short-lived and refresh tokens rotate on every use, so a stolen token has a narrow window. Closing your account or changing your password invalidates existing sessions.

No system is perfectly secure, and we do not claim otherwise. If you believe you have found a vulnerability, please tell us at security@notefusion.studio before disclosing it publicly.

Children

NoteFusion is not directed at children under 18. If you are 13 to 17, you may use it only with a parent or guardian’s permission, and we will treat that as your consent to our processing. If you are under 13, please do not use the app or give us any personal information.

If you believe a child has given us personal information without the right permission, contact us at privacy@notefusion.studio and we will delete it.

International transfers

Our providers may process data outside your country, including in the United States. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

Changes to this policy

If we make a material change we will update the date at the top of this page and, where the change is significant, notify you in the app. Continuing to use NoteFusion after a change means you accept the revised policy.

Related documents

• Terms of service
• How to delete your account