Chopsmith

Effective date: 26 October 2026

1. Who we are

Chopsmith is provided by Ekin Barış Çakır ("we"). Address: Sevgi Mahallesi 665 Sokak 7/6 Gaziemir İzmir Türkiye. Email: chopsmith@ekinbariscakir.com. We are the controller of your personal data.

2. In short

• No accounts. We don't ask for your name, email address or phone number. Our only server is the one that handles Delete my data, and it keeps nothing.
• Your practice history, Clean Tempos, Routines, settings and the pieces you add to My pieces stay only on your phone.
• The microphone is used only for the tuner and the optional timing check. The sound is processed on your phone; it isn't recorded or sent anywhere.
• Only if you allow it, we learn which parts of the app are used (for example which Drills are finished and which tools are opened) and get error reports. You choose each one separately. The answers you give in optional feedback surveys also reach us, without any ID. Usage statistics and error reports are tied to a random ID, not to your name. There are no ads, no tracking across apps and no selling of data.

3. What we process and why

We collect data electronically and automatically, through the app. If you don't allow the microphone, only the tuner and the timing check won't work; if you don't allow notifications, only the daily reminder won't work; refusing usage statistics, error reports or feedback doesn't limit any feature.

a) Microphone

• What: the sound the microphone hears (your guitar) while the tuner is open or a timing check is running.
• Why: to show the note you play in the tuner, and to measure how close your notes land to the metronome in the timing check.
• How long: the sound is processed only on your phone, as it comes in. It isn't recorded, stored, or sent to us or anyone else. Only the result is kept (for example a take's timing summary), and that stays on your phone too.
• We use the microphone only after iOS asks for your permission; you can turn it off any time in iPhone Settings.
• Legal basis: none is needed from us, because the sound never leaves your phone and we never receive it.

b) Purchases

• What: subscription status and purchase history. They come from Apple through RevenueCat, under an anonymous RevenueCat user ID. We never see your payment details; Apple takes the payment.
• Why: to unlock Chopsmith Pro and restore purchases.
• How long: for the length of the subscription and as long as tax law requires.
• Legal basis: performance of the contract and legal obligation (GDPR Art. 6(1)(b), (c); KVKK Art. 5(2)(c), (ç)).

c) Usage statistics, error reports and feedback (only with your permission)

• What:
  • Usage statistics, if you allow them: a fixed list of events about practice. Examples: a Drill finished or left (which Drill, its tempo, which Playground tools were on), a Practice Session's kind and length, the tuner or metronome used (for how long), a Tip card opened, the paywall seen and whether it led to a purchase, timing check results as numbers. Each event carries whether you have Chopsmith Pro, your Experience answer, the app version, device model, iOS version and language; the event sent when you finish setting up also carries your Focus answers.
  • Error reports, if you allow them: when something goes wrong, the error message, where in the app's code it happened (stack trace), app version, device model, iOS version and language.
  • Feedback: if you answer an optional survey in the app and tap Send, the answer you type. Please don't include your name, email address or other personal details.
  • Usage statistics and error reports are linked to a random ID; feedback answers aren't linked to any ID. No screen recordings or taps are collected, and no free text except your survey answers. No sound and no names of imported files or pieces are sent. It isn't combined with your purchase data at RevenueCat. Your IP address isn't stored at PostHog, and no location is worked out from it.
• Why: to see which parts of the app help players and which don't, to improve the paywall, to find and fix bugs, and to improve the app from your answers.
• Who: PostHog (EU region, Frankfurt).
• How long: at most 2 years, then deleted.
• Legal basis: your explicit consent (GDPR Art. 6(1)(a); ePrivacy Art. 5(3); KVKK Art. 5(1)). You give it, or refuse it, the first time you open the app, separately for usage statistics and error reports. You can withdraw it any time in Settings (Usage statistics, Crash reports). Feedback is separate from these two: you consent to each answer by tapping Send.

d) Apple's crash reports

• If you turned on "Share with App Developers" in iPhone Settings, Apple shares Chopsmith's crash logs with us. Apple runs this and Apple's privacy policy applies to it; you can turn it off in iPhone Settings → Privacy & Security → Analytics & Improvements.
• Legal basis: our legitimate interest in finding and fixing crashes (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

e) Delete my data requests

• What: when you tap Delete my data, the app sends its random ID to our server, which runs on Cloudflare. Cloudflare sees your IP address to deliver the request.
• Why: to delete your usage statistics and error reports at PostHog.
• How long: neither the ID nor your IP address is stored or logged. Your IP address is held only briefly, in memory, to limit how often requests can be sent.
• Legal basis: our legal obligation to act on your request (GDPR Art. 6(1)(c) and 17; KVKK Art. 5(2)(ç) and 11).

f) Support emails

• If you email us, we use your email address and message only to reply, and delete them 1 year after your request is closed.
• Legal basis: our legitimate interest in answering you (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

4. Who we share data with

We don't sell your data or use it for advertising. We share it only with these companies, which run the service on our behalf (processors):

We have data processing agreements with these companies. Apple handles payment on its own behalf; Apple's privacy policy applies to it.

We may share data with authorities where the law requires.

5. International transfers

We are based in Turkey; of our processors, PostHog is in the EU, RevenueCat is in the USA, and Cloudflare handles requests in data centers worldwide, including the USA. Transfers rely on the EU Standard Contractual Clauses and on standard contracts under KVKK Art. 9; Cloudflare is also certified under the EU-U.S. Data Privacy Framework. Cloudflare's Data Processing Addendum is part of its self-serve terms.

6. What stays on your phone

Your practice history, Clean Tempos, Routines, settings and the pieces you add to My pieces stay only on your phone and are never sent to us. When you import a Guitar Pro file, the file itself isn't kept; only the notes of the bars you choose are saved on your phone. If iCloud Backup is on, they're included in Apple's backup. Deleting the app deletes them. The daily reminder is a local notification scheduled on your phone; we don't send push notifications, and nothing is sent to us for it.

7. Your rights

Under the GDPR and KVKK Art. 11, you have the right to access, correct and delete your data, to restrict or object to its processing, to data portability, and to withdraw your consent. Since there are no accounts:

• Settings → Delete my data sends your random ID to our server, which deletes your usage statistics and error reports at PostHog right away; some copies can take up to a week to clear. The app then continues under a new random ID, with the same choices. If our server can't be reached, the app offers an email to us with your ID instead, and we delete your data within 30 days.
• Feedback answers aren't linked to any ID, so we can't find them per person; they're deleted after 2 years.
• For other requests, email chopsmith@ekinbariscakir.com. Requests are free; we reply within 30 days at the latest.
• We don't record sound, so there are no recordings to access or delete.

You have the right to complain: in the EU, to the data protection authority of your country; in Turkey, to the Personal Data Protection Board (KVKK).

8. Age

Chopsmith is not directed at children. We don't knowingly collect data from children under 13; if we learn we have, we delete it.

9. Security

Our only server, for Delete my data, keeps no data; its key to PostHog reaches only the people records of Chopsmith's analytics. The app's connections to it and to the companies above are encrypted (HTTPS). No system is perfect; if a breach happens, we'll notify as the law requires.

10. Changes

If we change this policy, we'll update its date, and we'll tell you in the app about significant changes.

11. Contact

chopsmith@ekinbariscakir.com · Sevgi Mahallesi 665 Sokak 7/6 Gaziemir İzmir Türkiye