Privacy Policy

PianoBoo · Last updated: 11 October 2026

PianoBoo is an app that guides children through their first steps at the piano. It was designed to handle as little data as possible.

The app requires no account, shows no advertising, uses no analytics or tracking tools, and analyses the piano's sound on the device itself. The only feature that sends data off the device is Scan music (“Digitalizar música”), which reads the notes from a photo of a music page. This policy explains what happens in each case.

1.Summary

• Piano sound (microphone)Analysed on the device. Never recorded or sent.
• Progress, discoveries and saved piecesStay on the device only.
• Photo of a music pageSent only when you use Scan music, to read the notes, and deleted right after. If the page is difficult or has chords, it is also read by Anthropic, which deletes it within 30 days.
• Installation codeA random code used to count pages read per month. It does not identify the child or the device. Deleted automatically after 400 days.
• Advertising, analytics and trackingNone.

2.Who is responsible

PianoBoo is the controller of the data described in this policy. For any privacy question, or to exercise your rights, contact us at info@pianoboo.com.

3.Microphone

PianoBoo uses the microphone to recognise the notes played on an acoustic or digital piano. Permission is only requested when it is needed.

• the sound is analysed in real time, on the device;
• the sound is not recorded or stored;
• the sound is not sent to our servers or to third parties;
• the sound is not used for advertising or profiling.

To tell the piano apart from other sounds, the app learns your piano's tuning from the first notes. That tuning is stored on the device. You can withdraw microphone permission at any time in the device settings.

4.Data stored on the device

So that the child can carry on where they left off, PianoBoo stores on the device itself:

• lesson progress, discoveries and the collection;
• the learned tuning of the piano;
• scanned pieces you choose to save (only the recognised notes, never the photo);
• a few preferences, such as having accepted the Scan music notice.

This data is not sent to us or to third parties, and we keep no remote copy. Saved pieces cannot be shared or exported from the app. Deleting the app, or its data in the device settings, removes this data.

5.Scan music (camera and photos)

Scan music lets you photograph a music page, or pick an existing photo, so the app can read the notes and the child can practise them. The feature is meant to be used by an adult. Before first use, the app shows a notice explaining what follows and asks for confirmation. Camera or photo permission is only requested when the feature is used.

1. The app scales the photo down and removes its metadata, including location.
2. The photo is sent over a secure connection (HTTPS) to the PianoBoo reading service, hosted on Google Cloud in Belgium.
3. The service reads the notes, returns the result to the app and deletes the photo right away. The photo is not kept on the server or in the logs.
4. If the first reading fails, or if the page has chords, the service asks Claude, by Anthropic (USA), for a careful reading, sending the same photo and, when there is one, the first reading. Anthropic does not use the photo to train models and deletes it within 30 days.
5. Temporary copies the app creates on the device to send the photo are deleted after recognition.

Scan music needs an Internet connection. You can withdraw camera and photo permissions at any time in the device settings. The rest of the app keeps working without them.

6.Installation code

To apply a monthly limit on pages read, the app creates a random code the first time you use Scan music. The code:

• is generated at random and contains no name, email, phone number, advertising identifier or hardware identifier;
• is kept in the device's secure storage and sent only with the pages you scan;
• lets the service keep, per month, the list of pages read by this installation (random codes only, no images or notes);
• is deleted automatically from the server after 400 days.

On iOS, the code may remain in the device's secure storage after the app is deleted. It is only sent again if the app is reinstalled and Scan music is used.

7.Server technical logs

When the app contacts the reading service, Google Cloud automatically generates technical logs needed to run and secure the service, such as the IP address, date and time, the request made and its result. Our own logs record only technical details of each request, such as the request code, the result, the duration, the image size and which app made it. They never include the photo or the notes read. These logs are kept for up to 30 days and are not used to identify people or to build profiles.

8.Who we share data with

We use only two service providers, which process data on our behalf and only for the purposes described:

• Google Cloud: hosting of the reading service (Belgium);
• Anthropic: careful reading of difficult pages or pages with chords (USA).

We do not sell data, share it for advertising or hand it to anyone else, unless required by law.

9.Transfers outside the European Economic Area

When the service asks Anthropic for a reading, the photo is sent to the United States. This transfer relies on the safeguards provided by the General Data Protection Regulation (GDPR), such as the standard contractual clauses approved by the European Commission.

10.Legal basis

We process the photo, the installation code and the technical logs on the basis of our legitimate interest in providing the feature you asked for, applying usage limits and keeping the service secure (Article 6(1)(f) GDPR). Microphone sound and the data stored on the device never reach us.

11.Advertising, analytics and tracking

PianoBoo:

• shows no advertising;
• uses no third-party analytics or crash-reporting tools;
• uses no advertising identifiers;
• builds no usage profiles;
• does not track users across apps or websites;
• does not sell or share data for advertising purposes.

12.Children's privacy

PianoBoo is made for children and is designed to comply with children's data protection rules, including the GDPR and, where applicable, the US Children's Online Privacy Protection Act (COPPA).

• we do not ask for the child's name, email, age or any contact details;
• there is no account, advertising, purchases or external links in the child's experience;
• we do not knowingly collect personal data from children.

If you are a parent or guardian and believe a child's personal data has reached us, for example in a photo, please contact us and we will delete it.

13.Security

Photos travel over an encrypted connection (HTTPS) and the reading service only accepts requests from the app, with an access key. Photos exist on the server only while they are being read. Data stored on the device is protected by the system's own security measures, such as the passcode or biometrics.

14.How long we keep data

• Photo: deleted right after reading; at Anthropic, within 30 days.
• Installation code and list of pages read: up to 400 days.
• Technical logs: up to 30 days.
• Data on the device: until you delete the app or its data.

15.Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data. To exercise any of these rights, write to info@pianoboo.com. We reply within one month.

Because we do not link data to names or contact details, it may not be possible to identify a specific person's data. If so, we will explain why. You can also erase all data on the device by deleting the app, and withdraw microphone, camera and photo permissions in the device settings.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt), or with the supervisory authority in your country.

16.The PianoBoo website

This website uses no cookies, analytics or tracking tools, and its fonts are served by the site itself. The hosting provider may generate technical logs needed to run and secure the service, such as the IP address, date and time of access and browser type. We do not use these logs to build profiles or to link them to use of the app.

If you join the waiting list, we use your email only to let you know when PianoBoo is available. You can ask to be removed at any time, and we delete the list after launch.

17.App Store and Google Play

If you install PianoBoo through the App Store or Google Play, Apple or Google may process some data under their own privacy policies. That processing is carried out by those companies and is not under our control.

In the App Store privacy details, PianoBoo declares two types of data, both used only to make the app work, not linked to anyone's identity and never used for tracking: the photos from Scan music (section 5) and the installation code (section 6). Apple classifies this code as a device identifier because it belongs to this installation, although it contains no hardware identifier.

18.Changes to this policy

We may update this policy to reflect changes to the app, the law or new features. The updated version is published on this page with its date. If a change involves new ways of processing personal data, the policy is updated before that feature becomes available.

19.Contact

For any question about this policy or about how data is handled:

Email: info@pianoboo.com

PianoBoo
An app for children learning on a real piano.
No account, no advertising, no tracking.