ChoirCue Privacy Policy

Effective date: January 2026

This Privacy Policy explains how Pink Z Software ("we", "us") collects, uses, and shares information when you use the ChoirCue mobile application and related services.

1. Overview

We collect only what we need to provide the app, secure our services, enable community features, and improve the experience. We do not upload audio files that you import into ChoirCue; they remain on your device. If you choose to use optional features that download audio (for example “choir‑only” practice tracks), those audio files are downloaded from our cloud storage provider to your device.

2. Information We Collect

Account Information

• Email address, username/handle, Firebase user ID, verification status, creation time.
• For Sign in with Apple, Apple may share your name and email (Apple may provide a private relay email).

Community Content

• Community content you choose to share, which may include cue set title, composer, arranger (if provided), optional description, creator display name and handle, cue timings/labels (bookmarks), cue count, duration, optional source title/filename, public‑domain designation, and related community signals (download counts, ratings you submit, and flags you file).

Usage and Diagnostics

• App usage signals (for example onboarding completion, importing a file, opening the player, and community actions such as browsing, uploading, downloading, rating, and flagging).
• Marketing message preference state stored on your device (and may also be recorded as an analytics user property when analytics is enabled).
• Technical data processed by our providers (such as IP address and device information) to deliver security features (including App Check), operate the service, and (if enabled) analytics.

Security

• Firebase App Check tokens to protect our backend from abuse.

3. How We Use Information

• Provide and secure the service (authentication, App Check, moderation, fraud prevention).
• Provide optional cloud‑delivered audio downloads you request (such as “choir‑only” tracks) and store those downloads on your device.
• Enable community features (share, download, rate, and flag cue sets) and maintain related counts/anti‑abuse markers.
• Improve the app via analytics and show in‑app tips/promotions with consent where required.
• Communicate about updates, support, and important account notices.

4. Authentication Providers and Account Linking

We use Firebase Authentication to let you sign in with Apple or with email and password. When you sign in with Apple, we may receive your name and email from Apple (Apple may provide a private relay email). We use this to create and manage your account. You can link your Apple login with an email/password login (and vice versa) so you keep a single account.

5. Audio Files

Audio files you import into ChoirCue stay on your device and are not uploaded to our servers.

If you choose to download optional audio (such as “choir‑only” practice tracks), the app downloads those files from our cloud storage provider to your device.

When you share a cue set to the community, we store the cue set data you submit (including cue timings/labels and related metadata such as title/composer/arranger, optional description, duration, and creator name/handle) in the cloud.

6. Analytics and In‑App Messaging

ChoirCue includes Google Firebase Analytics and Firebase In‑App Messaging. Analytics collection may be enabled or disabled in the app configuration. When enabled, analytics helps us understand feature usage and improve performance.

We may show occasional tips and promotions via in‑app messages. Where required (for example in the EEA/UK), we ask for your choice before showing marketing messages. Your marketing-message preference is stored on your device, and may also be recorded as an analytics user property when analytics is enabled. You can change this preference at any time in the app’s settings.

7. Sharing and International Transfers

We use service providers to operate the app, including Google Firebase (Authentication, Firestore, Cloud Functions, App Check, In‑App Messaging, Analytics (if enabled), and Storage). These providers may process data in countries outside your own, including the United States. We rely on appropriate safeguards for such transfers as required by applicable law.

8. Your Choices and Controls

• Marketing messages: In regions requiring consent, you can opt in/out in app settings and we honor your choice (suppression is applied to in‑app messages).
• Profile: You can update your handle/username and email in Profile Settings.
• Account deletion: You can delete your account in the app as described below.

9. Data Retention and Deletion

You can delete your account in the app. We delete your profile records we control (including any public-profile mirror records), your shared cue sets, and your ratings and flags that we control, and then delete your authentication record. For security, we may require recent re‑authentication (for example, before account deletion). Content already downloaded by other users cannot be recalled. We may retain limited information in backups or logs for a reasonable period for security, fraud prevention, or legal obligations.

10. Children’s Privacy

ChoirCue is not directed to children under 13, and we do not knowingly collect children’s personal data. If you believe a child has provided personal data to us, please contact us and we will take appropriate action.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted in‑app or on our website. Your continued use of ChoirCue after changes take effect signifies acceptance of the updated policy.

12. Contact

Questions or requests regarding privacy can be submitted at https://pinkzsoftware.com/support.html.