SpeakSheet Privacy Policy

Effective: May 20, 2026 · Updated: [TO CONFIRM: date the beta signup form goes live] to cover beta signups

1. Who we are

SpeakSheet is operated by Dennis Dyallo, Sweden. Contact: [email protected]. We are the data controller for the personal data described in this policy.

2. Quick summary

• We're a chord-sheet app. We process your microphone audio (when you tap dictate) so AI can transcribe what you sang or said into a chord sheet. Audio is never stored on our servers.
• We process the text content of your chord sheets when you tap "AI Edit" so AI can improve it.
• Our website collects anonymous usage analytics (no name, no account); native Android and iOS builds do not. We collect crash reports to keep the app stable.
• If you ask for Android or iOS beta access on our website, we store the name and email address you type into that form. That is the only personal data SpeakSheet holds about you, it is entirely optional, and we use it only to run the beta. See the Beta Terms.
• We don't sell your data. We don't show ads. We don't send newsletters.
• Your library lives locally on your device. Sharing a song uploads only that one song to our backend so the recipient can open it.

3. Data we process

We do NOT process:

• Your name or email address, unless you choose to submit the beta signup form on our website — that form is the only thing that gives us either, and the row above says exactly what happens to it. There are still no accounts: nothing you do in the app is linked to a beta signup.
• Your phone number or postal address
• Photos or camera data (camera permission is not requested in v1)
• Location
• Contacts
• Calendar
• Payment information

4. Third parties

International transfers: Some processors are in the USA. We rely on Standard Contractual Clauses (SCCs) under GDPR Art. 46 for these transfers. By using SpeakSheet you consent to this transfer.

5. Your rights

Depending on where you live, you have rights including:

• Access — see what data we hold about you: your beta signup record if you submitted that form, and your shared-song payloads if you used Share. There are no accounts, so there is nothing else
• Deletion — ask us to delete your beta signup record and/or your shared songs and we will (email [email protected]). Deleting a beta signup removes you from the beta list
• Rectification — correct inaccurate data
• Restriction / objection — ask us to stop processing
• Portability — receive your data in a machine-readable format
• Withdrawal of consent — withdraw your beta signup consent at any time by asking us to delete the record; withdrawal does not affect processing already carried out. Native Android and iOS builds do not use Umami analytics; contact us to object to website analytics processing
• Complaint — to your local data protection authority (e.g., your national DPA in the EU; California AG for CCPA)

To exercise any right, email [email protected] — with the share code(s) you want deleted, and/or the email address you used on the beta signup form.

6. Children

SpeakSheet is intended for users 13 years and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has used SpeakSheet, contact us and we will delete any associated data.

App Store listing: "Made for Ages 4+" rating is appropriate (no objectionable content), but the privacy policy explicitly limits the audience to 13+ to comply with COPPA / GDPR-K.

7. Security

• All API traffic is HTTPS / TLS 1.2+
• Crash reports contain stack traces, page URLs, and breadcrumbs but do not include the text of your chord sheets or your dictation audio. IP addresses are not sent to Sentry.
• Shared songs are stored in a database on a private server; only the share code grants access
• Short codes are 6 characters from a 32-character alphabet (~10⁹ combinations) — not enumerable in practice
• Beta signup records are stored in the same private database and are not reachable through any public endpoint. The signup form answers identically whether or not an address is already on the list, so it cannot be used to find out who has signed up

8. Microphone permission

SpeakSheet uses the microphone only when you tap the dictate button. Audio is captured for the duration of your dictation, sent for AI transcription, and immediately discarded. We do not store or share the audio. Microphone access can be revoked at any time in iOS / Android system settings.

9. AI processing transparency

When you use dictation, your audio is transcribed by Google's Gemini AI model (via OpenRouter). When you use AI edit or generation, the chord/lyric text is processed by Anthropic's Claude model (via OpenRouter). These models do not retain your data per their terms of service. We do not use your data to train any AI model.

10. Changes to this policy

We may update this policy. Material changes will be announced in-app on the next launch. Continued use after notice constitutes acceptance.

11. Contact

• Email: [email protected]
• Postal address: not published. As an EU-based individual sole trader, no jurisdiction we serve requires a publicly-disclosed postal contact. If a Data Protection Authority requests one, it will be provided directly.

Apple App Privacy / Google Play Data Safety mapping

For App Store Connect "Privacy" section + Play Console "Data Safety" form: