隐私政策Privacy Policy

1. Scope

CleverJazz ("the app") is operated by 珠海市香洲区律动空间科技中心 (a sole proprietorship in Zhuhai, China) ("we"). This policy explains what personal information we handle when you use the app (on iPhone, iPad and Android) and the cleverjazz.com website, why we handle it, where it is stored, how long it is kept, and how you can manage it.

This policy is organised by kind of information and purpose. A new feature that handles information only within the kinds and purposes described here is explained inside the feature without changing this policy. Before we collect a new kind of information, use it for a new purpose, use a new third-party service or change where it is stored, we update this policy first (see section 16).

The first time the Android app opens, it shows the main points of this policy and asks you to choose. Until you tap Agree and continue, the app collects nothing, starts no third-party SDK such as WeChat's, and sends nothing to our servers; if you disagree you can quit. Whether usage statistics go to Singapore is asked separately (section 10). These choices are asked only once.

2. Account information

We handle account information only if you sign up or sign in. Depending on how you sign in, it includes:

• Email and password: your email address and a one-way hash (bcrypt) of your password. We cannot see your password.
• Phone number (mainland China numbers only for now): the number and when it was verified. Codes are sent and checked by Alibaba Cloud's Phone Number Verification Service, to which we pass your number; our servers neither create nor store the codes. A number can belong to only one account. We never use your phone number for marketing SMS. You can also set a password for a phone account.
• Sign in with Apple: the user identifier, the email (possibly Apple's private relay address) and the name you choose to share, as provided by Apple.
• WeChat sign-in or binding: WeChat's user identifiers (openid, unionid), nickname and avatar.
• The nickname you set. If you make something public, such as a playlist, other users can see it and your nickname.

Purpose: to create your account and sign you in, recognise you on several devices, recover or reset your password, confirm it's you when you have an account problem, and prevent abuse. To prevent abuse, the server briefly counts code requests and failed sign-ins (by phone number and network address) in memory only, never in the database; phone numbers in server logs are partly masked. Setting, changing or resetting your password signs you out on your other devices.

3. Content you create and import

What you record, photograph, import or write in the app is kept on your device by default:

• On your device only: recordings and takes, photos and PDFs of sheet music, imported files, and the results of transcription (turning a recording into notes) and sheet reading (turning a photo of sheet music into a score you can play). Recognition runs on your device with models inside the app; this content is not uploaded to us, so we cannot use it to train models. The models themselves may be downloaded from our server; that download sends none of your content.
• Synced after sign-in: to sync between your devices, once you sign in we store this learning data on our servers: favourites, playlists and lick folders, chord charts you write or import (with their analysis, solo and band settings), practice time and practice records, review schedules, proficiency, results of scale, chord and other exercises, check-ins, preferences such as instrument and level, and your answers to the first-launch questions. Recordings, photos and files are not synced.
• When you upload or share: content leaves the device only when you use an upload, publish or share feature. When you export through the system share sheet, the app you choose receives it under its own privacy policy. If we later offer saving files to the cloud, it will upload only the files you choose, when you use it; they will be stored in mainland China and used only to provide that feature, which the feature will explain.

If a future feature needs to use your content for any purpose beyond those described here (for example improving recognition models), we will ask for your separate consent first.

4. Device and usage data

To learn whether features work well and to find and fix problems, the app sends usage statistics to our server, which stores them in an analytics database (see section 10 for where). They include:

• which screens you open and which features you use (for example playback, practice, steps of the purchase flow), the words you search for in the app, and how you heard about the app;
• when something fails, the error type and code location (not your content), and diagnostics such as playback being interrupted;
• whether you are signed in, and whether you are a member and of which plan;
• device model, OS version, app version, platform, language, time zone and network type (Wi‑Fi or cellular);
• a randomly generated device identifier and a session identifier. On iPhone and iPad the device identifier is kept in the device keychain, so it may survive reinstalling the app; on Android it is kept in the app's own storage and is normally removed when you uninstall. Once you sign in, these records also carry your account identifier.

You can turn usage statistics off at any time in Settings › Privacy & Permissions › Share Usage Data. Once off, nothing more is sent and what had not yet been sent is deleted.

We do not collect the advertising identifier (IDFA) or the Android advertising ID, do not track you across apps or websites, and the app contains no third-party analytics, crash-reporting or advertising SDK (the WeChat and Alipay SDKs are used only for sign-in and payment; see section 9). We use your account status and activity (for example whether you are a member or have used the app recently) to decide which in-app messages to show you, and to suggest practice material in the app. To show in-app messages we record whether each was delivered, read or tapped.

When your device connects to our servers they receive your network (IP) address, which is used to communicate and to prevent abuse; we do not store it with usage statistics.

5. Payments and membership

• App Store: on iPhone and iPad, subscriptions and purchases are handled by Apple. We never see your card or payment account; we receive and keep the transaction ID, product, amount, time and status, and receive Apple's notices about renewals and refunds, to grant, restore and check your membership.
• Android: Alipay: on Android you can buy a monthly or yearly pass with Alipay. Each purchase is a one-time payment and never renews by itself. Payment happens inside Alipay, so we never see your card or payment account; we keep the order number, Alipay's transaction number, the product, amount, time and status (including the payment result we ask Alipay for), and receive Alipay's notices about payments and refunds, to grant and check your membership.
• Android: redeem codes: when you use a redeem code to start membership, we keep the code, when it was used and by which account.
• Membership given in promotions (such as the sharing plan) is recorded separately. If you join the sharing plan we keep the post links you submit and their platform.

Transaction records are used to grant and check membership, handle refunds and disputes, prevent fraud, and meet legal bookkeeping and record-keeping duties.

6. Device permissions

The app asks for a permission only when you use a feature that needs it. You can turn any of them off in system settings at any time; only the feature that needs it stops working.

• Microphone: features that listen to you play, such as the tuner and timbre measurement, plus recording and transcription. Live analysis such as the tuner records and keeps nothing; recordings stay on your device; all analysis happens on the device and no sound is uploaded.
• Camera: to photograph sheet music to read beside a chart or to have it read. Photos stay on your device.
• Photos: to pick a photo of sheet music or a video to transcribe from your library, and to save pictures from in-app messages to your library. What you pick is processed on the device.
• Notifications: see section 7. On Android 13 and later the system asks whether to allow them when needed.
• Boot completed (Android): the app receives the system's boot-completed broadcast only to schedule again, after the phone restarts, the practice and check-in reminders you set; it is used for nothing else.

Importing through the system file picker needs no extra permission, and the app can read only the files you choose. The app does not read your location, your contacts, or anything on your clipboard that you have not pasted.

7. Notifications

• Local reminders: practice and check-in reminders are scheduled by your device from your settings, which stay on the device and do not pass through our servers.
• Push notifications: if we later offer push notifications, we will send them through your device platform's push service (for example the Apple Push Notification service) and keep your device's push token for that. Account notices (for example a membership starting) are kept apart from promotional notices, which need your separate consent.

You can turn notifications off in the app or in system settings at any time.

8. Support and feedback

You can send feedback in the app (no account needed), email us, or message us on social media. In-app feedback keeps what you write and its category, the contact you choose to give (email, phone or WeChat ID), the page you sent it from, the device identifier, app version and platform; if you are signed in, also your account and its email. It is used only to reply to you and fix problems, never for marketing. A social platform handles what you send through it under its own policy.

9. Third-party services

We give the following service providers only what each needs to do its job:

• Alibaba Cloud: servers, database and file storage in Guangzhou, China; the Phone Number Verification Service (receives your number to send and check codes); hosting for cleverjazz.com.
• Supabase (Supabase Pte. Ltd., privacy@supabase.com): stores the usage statistics in section 4, in Singapore (see section 10).
• Apple: Sign in with Apple; in-app purchases and subscriptions (Apple takes payment and we verify transactions with Apple); the App Store rating prompt.
• Tencent (WeChat Open Platform, 深圳市腾讯计算机系统有限公司): WeChat sign-in and binding. The Android app contains the WeChat Open Platform SDK: after the app starts (on Android, after you agree to this policy) it registers the app with WeChat, and starts a sign-in only when you tap WeChat sign-in or Bind WeChat; sign-in gives WeChat what it needs to sign you in and returns the WeChat identifiers, nickname and avatar in section 2. Device and network information the SDK itself may collect is handled by Tencent under its privacy policy.
• Alipay (支付宝（中国）网络技术有限公司): Android passes are bought with Alipay. The Android app contains the Alipay SDK, which is called only after you tap to buy, to open Alipay and take payment; we send Alipay the order number, product name and amount, and get the payment result back. Device and network information the SDK itself may collect is handled by Alipay under its privacy policy.
• iReal Pro forums: only when you paste a forum link to import a chart, the app opens that page directly.

If we later offer push notifications we may also use the device platform's push service. Before we use any service not listed here, we add it here with what it receives and why. Otherwise we disclose your information only when the law or a competent authority lawfully requires it.

10. Where data is stored; transfers abroad

• Account information, phone numbers, synced learning data, transaction records and feedback are stored in mainland China (Alibaba Cloud, Guangzhou).
• The usage statistics in section 4 are stored in Singapore (Supabase, on AWS's Singapore region). What goes there: the random device and session identifiers, your account identifier (if signed in), whether you are a member, device model, OS and app versions, platform, language, time zone, network type, feature-use records, search terms, how you heard about the app and your first-launch answers — not your phone number, email, password, IP address, recordings or photos. The only purpose is statistics to improve the app. You can exercise your rights in section 12 over this data through us (section 17) or with Supabase (privacy@supabase.com).
• Separate consent: this is a transfer of personal information abroad. When the Android app first opens, besides agreeing to this policy it asks separately whether you agree to usage statistics being sent to and stored in Singapore; the box is unticked by default, and if you leave it unticked the app works the same but sends no usage statistics. You can change the choice at any time in Settings › Privacy & Permissions › Share Usage Data; when you turn it off, what had not yet been sent is deleted.
• If where data is stored changes, we update this section first.

11. How long we keep it

• Account information and synced learning data: while your account exists; after deletion, as in section 13.
• Transaction records: for as long as the law requires, for bookkeeping, refunds and disputes.
• Feedback: as long as needed to deal with your issue; you can ask us to delete it at any time.
• Usage statistics: no longer than needed for the purposes in section 4.
• Anti-abuse counts: briefly, in server memory only.
• Content on your device: until you delete it or the app.

When a retention period ends we delete or anonymise the information.

12. Your rights

You can access, copy, correct and complete your personal information, ask us to delete it, withdraw your consent, delete your account, ask us to explain this policy, and, where the law allows, ask us to transfer your personal information to another handler you choose.

• In the app: change your nickname, bind or change your phone number, set or change your password, turn off Share Usage Data, delete your account; in system settings, turn off microphone, camera, photos and notification permissions.
• Anything else (for example a copy of your personal information, or deleting the usage statistics linked to your account or device identifier): email cleverjazzofficial@gmail.com. To protect your account we may need to confirm it's you first; we reply within 15 working days of receiving your request.

Withdrawing consent does not affect processing done before. If you believe our handling harms your rights, you can also complain to the relevant regulator.

13. Deleting your account

You can choose Delete Account in the app's account settings. Deletion takes effect at once and cannot be undone:

• We immediately delete your account (including email, phone number, password hash, Apple and WeChat sign-in identifiers and nickname), your synced learning data, favourites and playlists, membership information and in-app message records.
• Other records linked to the account (such as practice records, feedback, and the account identifier in usage statistics) are deleted or anonymised within 30 days.
• Transaction records the law requires us to keep are kept, unlinked from your identity, until the required period ends.
• Deleting your account does not cancel an App Store subscription; cancel it first on the iPhone in Settings › Apple Account › Subscriptions so you aren't charged again. Passes bought on Android never renew, so there is nothing to cancel. Content kept on your device is not affected; deleting the app removes it.

14. Children and minors

The app is meant for a general audience. If you are under 14, please use it only with the consent and guidance of a parent or guardian, who should read this policy. We do not knowingly collect personal information from children under 14 without a guardian's consent; if we find we have, we delete it promptly. Guardians can contact us as in section 17.

15. The cleverjazz.com website

The website uses no cookies, analytics or advertising tools; it only remembers your language choice in your browser. It is hosted on Alibaba Cloud Object Storage; when you download the Android installer from this site, Alibaba Cloud may record the time and network address of the request for operations and security, and we do not use it to identify you.

16. Changes to this policy

We post any update on this page and change the date at the top. For a significant change — to purposes, methods, kinds of information, third parties or where data is stored — we notify you in the app, and where the law requires your consent we ask for it again before the new processing.

17. Contact us

Operator: 珠海市香洲区律动空间科技中心 (a sole proprietorship in Zhuhai, China)
Email: cleverjazzofficial@gmail.com
For any question, comment or request about privacy or your personal information, please contact us.