Privacy Policy
This policy explains what information Picksmith (“the app”, “we”) collects, why, where it goes, and the choices you have. It covers the Picksmith Android app and this website (picksmith.app).
Summary in plain English
- You can use most of Picksmith without creating an account.
- If you sign in, we store your account info and practice data so we can sync it between your devices.
- We never listen through your microphone outside the tuner, and the tuner processes audio on your device only — no audio ever leaves your phone.
- We do not sell your data. We do not use advertising SDKs.
- You can delete your account and all associated data at any time from inside the app.
Who runs Picksmith
Picksmith is developed by an independent developer based in Iceland. For any data-protection question, email privacy@picksmith.app.
What we collect
1. Account information (only if you sign in)
If you choose to sign in, we store your email address, display name, and a unique user identifier supplied by the sign-in provider (Google, Facebook, or email/password). Sign-in is optional and is powered by Firebase Authentication, provided by Google LLC.
2. Practice data
When you are signed in, the following is synced to Google Cloud Firestore so you can access it on any device:
- Your profile (display name, avatar choice, XP, level, skill goals)
- Saved chord progressions
- Repertoire (songs you are learning) and confidence ratings
- Practice-session summaries (duration, date, tools used)
- Achievements and streak data
- Social activity if you use it: friends, kudos, challenges, direct messages
If you stay signed out, this data is stored only on your device and is never transmitted to our servers.
3. Diagnostic data
We use Firebase Crashlytics and Firebase Analytics to understand how the app is used and to get notified when it crashes. This data is pseudonymous — it is tied to a random Firebase ID, not to your email or name. It includes:
- Events such as “opened tuner”, “started practice session”, “tapped upgrade”
- Crash stack traces and device model / OS version when a crash occurs
- Approximate country (derived from IP, not stored as your IP)
We do not collect your precise location, address book, photos, or any content outside the app.
4. Purchase information
Pro subscriptions are processed by Google Play Billing. Google shares a purchase token and subscription status with the app so it can unlock Pro features. We do not receive or store your payment-card details — Google handles payment and VAT.
5. Push-notification token
If you allow notifications, Firebase Cloud Messaging assigns your device a token so we can send reminders about practice streaks and social signals (friend requests, kudos). You can disable notifications in your device settings at any time.
Microphone, camera, and other permissions
- Microphone — used only by the in-app tuner to detect pitch. Audio is processed on-device in real time and is never recorded, stored, or uploaded.
- Notifications — used for practice reminders and optional social alerts.
- Vibration — metronome and tuner haptic feedback.
- Internet — required only for sign-in, cloud sync, subscription checks, and optional SoundFont downloads.
Third parties we use
- Google / Firebase — Authentication, Firestore (cloud data), Crashlytics, Analytics, Cloud Messaging. Data is processed by Google LLC. See Firebase's privacy documentation.
- Google Play Billing — handles subscriptions and payments. See Google's privacy policy.
- Facebook Login — only if you choose it to sign in. See Meta's privacy policy.
We do not use advertising networks, user-profiling SDKs, or data brokers.
How long we keep data
Practice data and account information are kept as long as your account is active. Crash logs are retained for 90 days by Firebase. Analytics events are retained for 14 months by default and then aggregated. When you delete your account, all personal data tied to it is removed from our systems within 30 days.
Your rights
Under GDPR (EU/EEA) and similar laws, you have the right to:
- Access the personal data we hold about you
- Correct or delete it
- Export it in a portable format
- Object to processing, or withdraw consent
- Lodge a complaint with your local data-protection authority (in Iceland: Persónuvernd)
The fastest way to exercise these rights is inside the app (Settings → Account → Delete my data / Export my data), or by emailing privacy@picksmith.app. We respond within 30 days.
Children
Picksmith is not directed at children under 13. If you believe a child under 13 has created an account, email privacy@picksmith.app and we will remove it.
International transfers
Firebase services store data in Google's data centres, which may be outside the EEA (typically in the United States). Google operates under Standard Contractual Clauses to protect transfers of personal data out of the EEA.
Changes to this policy
When we change this policy we will update the “Last updated” date above and, for significant changes, notify signed-in users inside the app.
Contact
Questions, complaints, or requests: privacy@picksmith.app.