Privacy

SongCharter LLC · Effective 9 September 2026

The short version: your charts live on your device, not on our servers. There are no accounts, nothing collected in the app, and nothing to sell. Data leaves your device only when you do one of three things — import a photo or PDF, share a set, or import from a link — and in each case this page says exactly what happens to it. This website counts visits; the app does not, and the two are kept separate.

What we don't do

• No accounts, and no sign-in. We don't know who you are.
• No analytics, tracking, or advertising of any kind in the app — it contains no third-party SDKs that phone home, which is why its App Store privacy label reads "Data Not Collected." Website measurement is described below.
• We never sell, rent, or trade data — there is nothing collected to sell.
• We can't read your song library. It never reaches us.

Where your charts live

Your whole library — songs, sets, edits — is stored on your device, inside the app. Backups are files you export and keep wherever you choose; they never pass through us. Delete a song and it's gone. Delete the app and the whole library goes with it, which is why the app keeps a Back up button in plain sight.

The three moments data leaves your device

1. Importing a photo, screenshot, or PDF. The image is sent to our server, which passes it to our AI provider (Anthropic) to transcribe into a chart, and the chart comes straight back to your device. Our server keeps no copy — the image is read, the reply is returned, and nothing is written to disk or logged. Anthropic processes it to produce the transcription and, under its commercial API terms, does not use that data to train its models.

2. Sharing a set. Before anything is uploaded, your device encrypts the set (AES-256-GCM) with a key it just generated. Only the encrypted bytes reach our server. The key travels in the part of the link after the #, which browsers never send to any server — it goes from your message to your bandmate's device and never to us. We cannot read what we store for you, and shared sets are deleted automatically after about 90 days. There is no way to look one up without its link, and we can't recover a lost link — not as a policy choice you could talk us out of, but because we don't have the key.

3. Importing from a link you paste. The app fetches that page directly, the way a browser would, so the site you pasted sees an ordinary request from your device. Nothing about it is sent to us.

Purchases

The unlock is a one-time purchase handled entirely by Apple. We never see your name, your payment details, or your Apple Account — Apple tells the app only that this device owns the purchase.

The plumbing

Being honest to the bottom of the stack:

• Hosting (Vercel). Our site and the two functions above run on Vercel, which keeps standard, short-lived access logs (IP address, time of request) the way virtually every host does.
• Rate limiting. To keep the import service working for everyone, our server counts recent requests per IP address in memory. Those counts are never written to storage and evaporate on their own.
• Share storage (Upstash). Encrypted share blobs sit in a managed database until their expiry deletes them. The provider holds ciphertext it cannot read either.
• On-device text recognition. Where available, the app first reads pages with Apple's Vision framework, which runs entirely on your device.

This website

songcharter.app counts visits using Vercel Web Analytics, so we can tell which pages people read and which ones send them to the App Store. It sets no cookies, follows nobody between sites, and stores no identifier that persists: Vercel derives a visitor hash from ordinary request data using inputs that rotate every day, so yesterday's reader and today's are not connected to each other, and neither is connected to you. We see counts and pages, never people.

This is the website only. The app measures nothing at all — it loads no analytics of any kind, and the boundary is enforced by a check that fails our build if analytics code ever reaches the app.

Children

SongCharter is not directed at children under 13, and since it collects no personal information, it has none to collect from anyone of any age.

Changes

If a future version of the app changes what leaves your device, this page changes with it, and the date at the top moves. A change that weakened a promise on this page would be announced in the app, not slipped into a footnote.

Contact

SongCharter LLC, Colorado, USA
support@songcharter.app