Privacy policy

Effective October 18, 2026

Your musical life is personal. Here’s what stays on your device, what’s shared, and how to manage it.

This policy covers the Repertoire iPhone and iPad app and this website, maintained by the developer at middleclicker.

Your account

Repertoire asks you to register or sign in. You can use an email address and password, Sign in with Apple, or Google sign-in, and you can link Apple or Google to your account from Profile → Account. Firebase sends a verification email for email registrations and handles password reset emails. Community features require a verified email address. Earlier anonymous accounts are linked in place when you register, so they keep their profile, follows, contributions, and referral credit.

The service stores your account identifier, email address, linked sign-in providers, email verification status, and account creation date. Your email address and password are never shown on your public profile. Passwords and Apple or Google sign-in tokens are not saved in your journal; refresh credentials and limited account details, such as your opaque Apple user ID, are kept in the device Keychain. Signing out removes this device’s push registration from your account.

On your device

Repertoire saves your journal on your device: your pieces and their status, personal difficulty and enjoyment ratings, comparison history, practice history, imported PDFs, favorite excerpts, profile preferences, and appearance settings. Each account has its own separate journal on the device, and signing out keeps it for when you sign in again. Your full journal is not uploaded or synced across devices by Repertoire. Device backups you enable through Apple may include app data.

Public profiles and community features

Profiles are public by default. When the online service is configured, completing setup or using an existing journal publishes your name or nickname, instrument, experience level, bio, saved piece titles and statuses, favorite excerpt bar ranges and notes, and selected Loved pieces. Updates are shared automatically. There is no private-profile switch. Avoid putting sensitive information in your profile or excerpt notes.

Personal numeric ratings, individual comparison history, and saved recording URLs are not included in your public profile. Follow relationships and repertoire overlap support feeds, musician suggestions, and recommendations. A new follow creates an Activity notification for the person you follow.

Community difficulty features can automatically send eligible piano comparisons, catalogue identifiers, your stated experience level, and answer revisions to the backend. These contributions are linked to your account identifier and used to estimate community difficulty. They are not shown on your public profile.

Where referral features are available, the service stores an account-linked referral code, account creation date, referral redemption and inviter relationship, and qualifying referral count to manage access and prevent abuse.

Reports, blocks, and moderation

You can report or block another musician from their profile. A report stores your account identifier, the reported account, the reason and any details you add, and a copy of their public profile at that moment. Reports are reviewed by the developer and are never shown to the person you reported. Blocks are stored on the server and hide each account from the other; you can see and remove your blocks in Profile → Settings → Blocked musicians.

Authorized administrators can look up accounts by email or identifier, review reports, hide or restore public profiles, suspend accounts, and permanently delete accounts that break the rules. Each action is recorded in a private audit log with the operator’s reason. Administrators cannot see your on-device journal.

Online services

• Google Firebase provides account authentication, verification and password reset emails, database storage, and backend processing. Service providers also process connection information, such as IP addresses and operational logs, to deliver and secure the service. See Firebase’s privacy information.
• Apple handles Sign in with Apple if you choose it, and may share a private relay email address instead of your own. Apple also receives composer and piece-title searches for representative album artwork through iTunes, along with the connection information needed to serve searches and images. If you enable push notifications, Repertoire stores an APNs device token and notification preference to send follow alerts. See Apple’s privacy policy.
• Google handles Google sign-in if you choose it and shares your account’s email address with Repertoire. See Google’s privacy policy.
• External recording links open the provider you choose, such as YouTube. That provider’s privacy policy applies when you visit it.

Repertoire does not include advertising or third-party behavioral analytics, sell your personal data, or use your activity for cross-app advertising tracking.

Your choices and deletion

Edit your profile and remove individual pieces or excerpts in the app. Disable notifications in iOS Settings. Sign out from Profile → Account.

Use Profile → Delete account to permanently delete your account. After you confirm with your password, Apple, or Google, Repertoire deletes your sign-in identity, public profile, incoming and outgoing follows, notification inbox, registered push devices, blocks and reports, community difficulty contributions, and referral code and credits, then erases that account’s journal and settings on this device. For Sign in with Apple, the app also revokes Repertoire’s access with Apple. If deletion is interrupted, you can retry it. Registering again starts a new account.

Removing the app alone does not delete your account or server data. Deletion cannot erase files you exported or copies on other devices. Moderation audit entries keep the account identifier and the reason for any action taken, without your profile content.

For access or correction requests, or if you can no longer access the app to delete your account, email cxy20052008@gmail.com. We may need information to locate your records and verify that they are yours. Do not send passwords or authentication tokens.

Retention and security

Local data remains until you remove it or delete your account. Server records are retained to operate community features, maintain the integrity of contributions and referrals, and prevent abuse, until you delete your account or an administrator removes them. There is no single automatic deletion period for all server data. Providers’ logs and backups may follow their own retention schedules. Services may process data outside your country.

Repertoire uses HTTPS for online requests, device Keychain storage for credentials, and authenticated backend access. Sensitive actions such as account deletion require a recent sign-in. No storage or transmission method can guarantee absolute security.

This website and contact

This website uses no analytics scripts, forms, cookies, or browser storage. GitHub Pages hosts it and may process IP addresses and request information under the GitHub Privacy Statement. If you contact us, we use your message and contact information to respond and handle your request.

For privacy questions or support, email cxy20052008@gmail.com or visit the issue page. Issues are public; use email for personal information or privacy requests.

We will update this page when our data practices change and revise the effective date above.