Mobile app privacy policy

Who is responsible

KORDEUS LTD is responsible for the personal information it processes to provide GigMaster. Contact support@kordeus.co.uk with privacy questions or requests. GigMaster does not require a separate GigMaster or Musignite account.

This policy covers the mobile app. The Musignite teaching platform has its own privacy policy. Features described here may depend on the app version and your choices; older versions may not include advertising or purchases.

Songs, settings and files

GigMaster stores your songs, setlists, lyrics, notes and metronome settings in app storage on your device. Ordinary library editing and metronome playback do not upload your library to our servers. GigMaster does not need microphone access to generate its metronome sound.

If you export or share a library or setlist, Android lets you choose the destination or recipient. That destination may have its own privacy policy. Exported files remain wherever you save them until you delete them.

Android backup or device-transfer features may copy app data according to your device settings. Purchase credentials and nearby-device trust records are excluded from GigMaster's configured backup rules. Song-library exports do not include your ad-free purchase entitlement.

Optional song lookups

When you request an online song lookup, GigMaster sends the song title, artist if provided, and lookup type to our backend hosted by Supabase. The service may return a cached result or send the query to Anthropic to find song information. Avoid entering personal or confidential information in lookup fields.

Lookup queries and results may be cached for reuse, including across GigMaster installations. The app also keeps a local lookup cache. Network providers receive technical connection information such as your IP address when handling a request. Manual entry and the metronome remain available without using song lookup.

Nearby sync sessions

If you start or join a sync session, GigMaster uses local-network and nearby-device connections to discover devices and exchange session information, song and timing information, and playback commands. Other participants can receive information shared in the session.

Nearby sessions use authenticated, encrypted connections over a private Wi-Fi Direct link. A shared Wi-Fi network is not required. The older shared-Wi-Fi sync option has been removed from current builds.

Android may ask for nearby Wi-Fi, Bluetooth or, on older Android versions, location permission for device discovery. You can manage these permissions in Android Settings. Use sessions with people and devices you trust, and disconnect when you have finished.

Advertising and privacy choices

Ad-supported versions use Google AdMob for banners on eligible song and setlist browsing screens. GigMaster suppresses advertising during playback, count-in, Showtime and sync sessions. An active, verified ad-free purchase removes app advertising.

Starting with version 1.5.6, every ad request uses Google's teen-restricted treatment, which disables personalised advertising and remarketing, and a maximum ad content rating of G. This applies to adults too; GigMaster does not ask you to enter your age.

To encourage relevant advertising, version 1.5.6 sends the same general music-related keywords with every ad request: music, musical instruments, bands, live music, rehearsal and music equipment. These describe the app, not your interests. We do not use your saved songs, lyrics, notes or lookup history for ad targeting. These hints do not guarantee that every advertisement will relate to music.

Google's advertising software may process IP addresses (which can indicate approximate location), device and advertising identifiers, ad and app interactions, and diagnostic information to deliver and measure ads and prevent fraud. The information used depends on your region, device settings and consent choices. Advertising partners shown in the consent message may also process information for the purposes described there.

Where required, Google's consent message asks for your choices before eligible ad requests. You can refuse consent and continue using GigMaster. Where available, open Settings → Privacy choices to review or withdraw your choice. Changing a choice applies going forward; it does not undo processing that already took place lawfully.

Non-personalised ads can still involve information needed for delivery, measurement and fraud prevention. See Google's privacy policy and how Google uses information from partner apps. Development and designated test builds use Google's sample advertisements.

The one-time ad-free purchase

Google Play handles payment for the optional permanent ad-free purchase. We do not receive your card number or payment-account password. Starting with version 1.5.2, the app checks ownership and acknowledges completed payments directly through Google Play. It checks Google's signed purchase receipt on your device. Pending payments do not enable the unlock.

Version 1.5.2 and later do not send purchase tokens to our Supabase or Vercel services. The app stores only the ad-free entitlement privately on your device for offline use; it is excluded from library exports and Android backup. The app checks ownership with Google Play when opened, when connectivity returns, and when you select Restore purchases. Refunds or revoked access are reflected when Google Play reports changed ownership during an online check, rather than through a separate background refund service.

Restore purchases uses the purchasing Google Play account. We do not create a separate GigMaster identity or receive your Google account password. A temporary network failure does not remove an existing unlock. Earlier test versions used a Supabase verification service and a Vercel connection to Google. Those clients may still send purchase tokens until updated; existing backend records contain a one-way token hash, entitlement and acknowledgement status, and timestamps.

Why information is used and who receives it

We process information needed to provide features you request, verify your purchase and respond to support requests. Where this involves personal information, providing the requested service is our contractual basis. We rely on legitimate interests to protect the service, prevent fraudulent purchase claims and investigate faults, and on legal obligations where records must be retained by law. Advertising consent is requested where required.

The relevant recipients include Google for Play purchases, consent and advertising; Supabase for optional song lookups; Vercel for this website; Anthropic for requested song lookups when needed; and the recipients or file services you choose for exports and sharing. Earlier test versions also used Supabase and Vercel for purchase verification, as explained above. Tokens handled by that older connection are not deliberately written to application logs. If you contact support, we receive your contact details and the information you include. Please do not send card details, passwords or service-account keys.

These providers operate internationally and information may be processed outside the UK or your country. Their published privacy and data-processing terms describe their processing and transfer arrangements. Contact us for details of the safeguards applicable to GigMaster's processing. Provider information is available from Supabase, Anthropic, Vercel and Google.

How long information is kept

Your local library remains until you delete it, clear the app's storage or uninstall it; separately saved exports and device backups may remain. Cached lookup information is retained for reuse and may be replaced or cleared as the cache is maintained.

Current versions keep the ad-free entitlement on your device until ownership changes or app storage is removed. Earlier test-version backend entitlement and revocation records have no automatic expiry and are retained to support those installations and prevent reuse of revoked purchases. Queued notification messages from the older integration can remain in private Google Cloud queues until their configured seven-day retention expires. Support and technical records are kept for as long as needed to address the request, maintain security and meet applicable obligations. Advertising and payment providers apply their own retention policies to information they control.

Your choices and data deletion requests

You can use local features without song lookup, leave sync sessions, control Android permissions, delete local data and manage advertising choices. Export your library before clearing app storage if you want to keep it.

To request deletion of information held for the GigMaster mobile app:

1. Email support@kordeus.co.uk with the subject GigMaster data deletion request.
2. Describe the information you want deleted, such as a support conversation or an optional lookup, and give enough context for us to find it. Do not send passwords, payment details or purchase tokens.
3. We will explain any verification needed to identify the record and which information can be deleted or must be retained. GigMaster has no separate user account; some anonymous records cannot be linked to you from an email address alone.

We can review identifiable support records and lookup-cache records for deletion. Purchase entitlement and revocation records may need to remain to support the permanent unlock, prevent reuse of revoked purchases or meet legal obligations; they have no automatic expiry. Google controls its advertising and payment records under its own policies. Songs and settings held only on your device must be deleted in the app or through Android Settings; deleting server information does not remove your exports or device backups.

Depending on the applicable law and the processing involved, you may request access, correction, erasure, restriction or portability of personal information. You can object to processing based on legitimate interests. Contact support@kordeus.co.uk. We may need information to locate the relevant record and verify your request; we do not hold a named GigMaster account for every installation. Some information may need to be retained for legal reasons or to resolve a dispute.

You can raise a concern with the UK Information Commissioner's Office or your local data-protection authority. GigMaster is intended for musicians aged 13 and over, including teens and adults, and is not directed at children under 13. If you believe a child under 13 has provided personal information through the service, contact us.

Changes to this policy

We update this page when GigMaster's features or data handling change. The date above identifies the latest version. Where required, we will provide notice or request a new choice before using information for a materially different purpose.