Schubird

Privacy Policy

Effective September 13, 2026

Information we collect

• Account information: your name, email address, encrypted password credentials, account role, and authentication sessions.
• Profile information: a profile photo if you choose to add one.
• Music-study content: YouTube links and identifiers, captions, lesson notes, repertoire, practice history, recordings or reference links, practice plans, messages sent to the repertoire assistant, and personal prompt overrides.
• Audio and video you choose: when you import a lesson from Files or Photos on iPhone or iPad, the app extracts audio locally and sends audio chunks through our backend to OpenAI for transcription and timing. Voice input also sends audio for transcription. The original lesson media, playback links, and thumbnails remain on your device. Transcripts, generated notes, and basic recording metadata are saved with your account.
• Service and performance information: limited request, diagnostic, and security logs produced by our hosting infrastructure, plus content-free workflow diagnostics such as actions, outcomes, error codes, request timing, app/session references and app versions. Regular-user notes, transcripts, messages, filenames and custom prompts are excluded from these diagnostic events. We also collect anonymous iOS app-start duration, React Native initialization duration, app version and environment, and whether the first screen was Lessons or sign-in.

How we use information

We use this information to authenticate you, keep each user’s data separate, provide lesson transcription and note generation, answer repertoire questions, generate practice plans, send invitations and password-reset messages, maintain security, troubleshoot problems, and improve reliability.

Service providers

Schubird uses service providers only as needed to deliver the app:

• Google Cloud hosts the backend, database, and private profile-photo storage.
• OpenAI processes audio you submit for transcription, lesson captions, and relevant study context when you request AI-generated notes, repertoire assistance, or practice-plan suggestions.
• Supadata retrieves available captions for YouTube videos you submit.
• Brevo sends account invitations and password-reset email.
• YouTube displays videos and may receive standard device and network information when you play or open a video.

These providers process information under their own terms and privacy practices. Your OpenAI and other service credentials remain on the Schubird backend and are not included in the mobile or web frontend.

Sharing and sale

We do not sell or rent personal information. We share information with the providers listed above only to operate requested features, or when required to comply with law, protect users, or defend the security and integrity of the service.

Retention and deletion

We retain account information and music-study content while your account remains active. Anonymous app-start measurements and workflow diagnostic events are retained for 30 days. Routine operational logs are retained for two days; aggregate counts and timing distributions without account or session references are retained for 90 days. Separate, restricted developer-account content diagnostics, when enabled, are retained for seven days. Diagnostic delivery is best-effort and may be limited during heavy traffic. Regular invited users can permanently delete their account from Account → Privacy & data in the iOS or web app. This removes the account, active sessions, profile photo, lessons, repertoire, practice plans, and personal AI configuration from active systems. Limited infrastructure logs or backups may persist temporarily before routine deletion.

Our backend relays audio in memory without storing audio files. The app deletes generated audio chunks after saving the completed transcript. Interrupted imports retain local chunks and progress so processing can resume. Optional timestamp diagnostic reports remain on your device until you delete or explicitly export them. Service providers may retain information under their own privacy and data-retention practices.

Security

Schubird uses encrypted HTTPS connections, hashed passwords, private cloud storage, access-controlled database records, and per-user authorization. No internet service can guarantee absolute security, but we take reasonable measures designed to protect your information.

Children

Schubird is not directed to children under 13. Invitations for minors should be managed by a parent, guardian, or authorized music educator consistent with applicable law.

Your choices

You can change your password, remove your profile photo, edit or delete study content, sign out, and—if you have a regular invited account—delete your entire account from the app. For privacy questions or assistance, contact us.

Contact

Schubird is operated by Tianchi Ma. Email: tianchima@gmail.com.

Changes

We may update this policy as Schubird develops. We will revise the effective date above when material changes are published.