TR · EN · ES · PT · DE · FR · IT

Privacy Policy

Last updated: October 28, 2026

Reperto is a repertoire management app for musicians. This policy explains what data we collect and how we use it.

1. Data We Collect

Account info: When you sign in with Google or email/password, your name, email address and (if any) profile photo.
Your content: Songs you add (chords/lyrics), tags, setlists and group information.
Imported files: Links, photos or PDFs you provide to add songs — to be processed by text recognition and AI.
Usage information (if personal learning is on): how long songs stay on screen, the order songs are played in, your "which one is more …?" answers and an AI reading of your setlists — in your own account.
Online song search: when you search for a song by name, your search text is sent to our server and, through Google Gemini, to Google Search; so the same search is faster next time, the search text and the pages found are stored for 30 days without your identity.
Shared song database and catalog: when you import a song by link from a public chord site, the content taken from that site is added to the shared song database without your identity (photos, PDFs, pasted text and personal file links are never added). If community contribution is on, to merge different spellings of the same song, the title, artist and a short irreversible summary derived from the lyrics and chords (a fingerprint — it contains no lyrics or chords) of the songs in your repertoire are sent without your identity.
Where you came from: when you create an account, the app platform (Android / iOS / web), version, your device language and time zone; on the web, the referring site and link tags; your optional answer to "How did you hear about Reperto?" on first launch — stored in your own account, used only to improve the app.

2. How We Use Data

To create your account and sync your songs across devices.
To convert imported songs into chord/lyric format and tag them using AI.
To provide core features (viewing, stage sync, setlists).
To personalize suggestions, Flow and the setlist assistant (learning repertoire).
Anonymous community statistics: if you are signed in, only song title/artist, play order, position in the set and the general mood of a setlist (e.g. "soft slow"), as well as the tags you give songs and keys / tempos you correct by hand, are added to a community pool with an anonymous hash instead of your identity. Your setlist name, any person/place/date, lyrics and chords are never sent. Only statistics aggregated across many users, which cannot be linked to anyone, may be used to improve the service and in the future shared with partners. This contribution is independent of the personal learning setting; you can turn it off with the setting at the bottom of this page. You can turn personal learning off on the Repertoire Optimization screen.

We do not sell your personal data. The free plan shows Google AdMob ads.

3. Third-Party Services

Google Firebase: Authentication, database and file storage.
Google Gemini (AI): Processing of your imported song content.
Google Cloud Vision: Text recognition for photo/PDF imports.
Google AdMob: Ads on the free plan.
Railway: Server hosting.
Firebase Crashlytics and Google Analytics for Firebase: logging app crashes and errors, de-identified usage statistics.
RevenueCat: subscription purchase and validation (through the App Store / Google Play).
Rhythm sync on stage: when you adjust the rhythm delay manually during a stage session, the chosen offset is stored in your account per device model; to improve automatic sync, the device model, chosen offset, round-trip time to the server, audio output latency and connection type are collected with an anonymous hash instead of your identity.

4. Data Retention & Security

Your data is stored securely (over an encrypted connection) on Google Firebase infrastructure. Your data is kept as long as your account is active.

5. Deleting Your Account & Data

You can permanently delete your account and all your data in-app via "My Account → Permanently delete my account".

6. Children's Privacy

The app is not intended for children under 13 and we do not knowingly collect data from this age group.

7. Data Controller and Legal Basis

The data controller for your personal data is Kadir Ağardır, the developer of Reperto (contact: [email protected]). We process your data on the following legal bases:

Performance of a contract: creating your account, storing your songs and syncing them across your devices, handling subscriptions.
Legitimate interests: keeping the service secure, preventing abuse, crash and error logs, improving the service and de-identified community statistics. You can turn off community contribution with the setting at the bottom of this policy.
Consent: personalised ads and tracking for advertising (through your device's permission prompt) and the optional "How did you hear about Reperto?" question. You can withdraw your consent at any time.
Legal obligation: statutory retention and reporting duties.

8. International Transfers

Your account and content data are stored on Google Firebase servers in the European Union. To provide the service, some data is also processed outside the European Economic Area and Türkiye, mainly in the United States, by the service providers listed in Section 3 (for example, our server runs on Railway in the US; AI and text recognition run on Google infrastructure; subscriptions are handled by RevenueCat). These transfers take place only as far as needed to provide the service and under safeguards such as the providers' standard contractual clauses.

9. Retention Periods

Account and content data: for as long as your account exists; permanently deleted when you delete your account.
Database backups: at most 14 days, then deleted automatically.
Online song search cache: 30 days, without your identity.
Crash logs and usage statistics: for the providers' retention periods (crash logs about 90 days, usage statistics at most 14 months).
De-identified community statistics: without a time limit, as they cannot be linked to anyone.

10. Your Rights (GDPR and KVKK)

You have the right to know whether your personal data is processed and to request information, to receive a copy of your data (portability), to have it corrected if inaccurate or incomplete, erased or its processing restricted, to object to processing based on legitimate interests, to withdraw your consent, and to claim compensation if you suffer damage from unlawful processing (EU General Data Protection Regulation Art. 15–22; Turkish Personal Data Protection Law No. 6698, Art. 11).

How to apply: simply write to [email protected] from your account's email address. We will resolve your request within 30 days at the latest.
You can also delete your account and all of your data from inside the app (Section 5).
Complaints: you can contact the data protection authority of the EU country where you live, or the Turkish Personal Data Protection Authority (KVKK).

11. Contact

For questions: [email protected]

Account deletion · Terms of Use · reperto.net