Privacy Policy

The controller is Andrea Libutti (VAT no. 18598921007), author of Onset. For any request about your data: [email protected].

Onset has no backend where we store your content: songs, setlists, lyrics, chords, notes and recordings stay locally on your device. The only exception, at your explicit request, is share links (point 3.c). We don't see your content, we don't sell it, we don't use it to profile you.

a. Content you create (songs, setlists, lyrics, chords, timing, notes, recordings). It stays on your device, to make the app work. Legal basis: performance of the service.

b. Backup to your cloud (optional). If you enable backup, your data is saved to your iCloud account (iOS) or Google Drive (Android), not on our servers. We don't access it. On Android, access to Google happens through Google Sign-In with permission only to the app's dedicated folder on your Drive (drive.appdata): we don't see the rest of your Drive. Onset's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Legal basis: consent — you enable the backup and you can disable it whenever you want from the settings.

c. Share links. If you generate a link to share a setlist, the shared content is uploaded to a service of ours (a Cloudflare Worker) and kept for 30 days, then automatically deleted. Anyone who has the link can view its content. Legal basis: performance of the service, at your request.

d. Diagnostics and crash reports. To fix bugs we use Sentry (servers in the EU): we collect error logs, technical information about the device and a technical identifier of the installation, which serves only to group crashes together. We never send your lyrics or data that directly identifies you (name, email). You can turn off this collection from the settings. Legal basis: legitimate interest in keeping the app stable.

e. In-app purchases. Subscriptions and one-time purchases are handled by Apple (App Store) or Google (Play), through RevenueCat to recognize your subscription status. RevenueCat receives an anonymous identifier of the installation and technical device identifiers, needed to recognize the subscription across your devices — not your name or your email. We don't see your card details: the payment stays between you and the store. Legal basis: performance of the contract.

f. Online timing search (optional). When it is on, your search (title/artist) is sent to the external service lrclib.net. From the response Onset extracts only the timing — the minutes and seconds each line starts at — which is attached to the lyrics you entered; no lyrics coming from the service are displayed or stored. The feature is off by default: you can turn it on among the initial choices or in Settings, and turn it off at any time. Before the first search you still see a summary of what gets sent. Legal basis: consent.

g. Audio features (optional). If you use the recording or reference-audio features, the recordings stay on your device. Some transcription features, where available (iOS), may use Apple's speech recognition, which may process the audio on Apple's servers according to Apple's privacy policy. Similarly, any connection to Apple Music is governed by Apple. Legal basis: consent — these features start only if you launch them. For non-EU transfers, what is stated in point 5 applies.

We don't sell your data and we don't hand it over for marketing. The only parties involved are providers that help us run the app, each according to its own privacy policy:

• Apple and Google — store, payments, backup to your cloud, system services.
• RevenueCat — subscription management.
• Sentry (EU) — diagnostics and crashes.
• Cloudflare — domain, website and share links.
• LRCLIB — only if you enable the online timing search. It receives title and artist; it returns the timing.
• Hugging Face — only to download the voice-recognition model used by automatic alignment. It receives none of your data: the model runs on your device.

Some providers (Apple, Google, RevenueCat, Cloudflare) are based in the USA and may process data outside the EU, on the basis of the EU-US Data Privacy Framework and, where needed, the standard contractual clauses provided for by the GDPR. This also applies to share links, distributed over Cloudflare's global network. Diagnostics (Sentry) are hosted in the EU.

Local data stays until you delete it (from the app or by uninstalling it). Share links delete themselves after 30 days; if you want to remove one sooner, write to us and we'll delete it. Diagnostics are kept by Sentry for 90 days and then automatically removed.

Backup: you can delete it from the app at any time; on Android you can also revoke Onset's access to your Google Drive at myaccount.google.com/permissions, on iOS you manage the storage from Settings → iCloud.

You have the right to access, rectify, erase, restrict, object to the processing of and to the portability of your data, as well as to withdraw consent at any time. In practice: you delete your content directly from the app or from your cloud; withdrawing a consent is as concrete as turning off the relevant switch in the settings (backup, online timing search), and for diagnostics there's a dedicated toggle. For the few pieces of data we process ourselves (crash reports, share links, subscription status) we handle it at your request: write to [email protected]. You can also lodge a complaint with the Italian Data Protection Authority (Garante) (garanteprivacy.it).

Onset is not intended for anyone under 13, and does not knowingly collect their data. Where local law sets a higher age for digital consent — 14 in Italy, up to 16 in other European Union countries — the features that require consent (backup, online timing search) must be enabled with the authorization of a parent or guardian.

We adopt reasonable measures to protect data (e.g. encryption in transit, minimization: no lyrics or personal data in the diagnostics logs). No system is 100% secure, but the local-first model cuts the risk surface at the root: your content doesn't pass through our servers.

onsetlyrics.app is a static site: no cookies, no analytics, no tracking. It's hosted on Cloudflare which, like any hosting, temporarily processes visitors' IP addresses to serve the pages and protect them from abuse (legal basis: legitimate interest). The fonts are hosted directly on the site: no request goes out to third parties.

Onset evolves. If we change this policy, we'll update the date at the top; for significant changes we'll flag it in the app and on this page.

For any question about privacy: [email protected]. I read and reply myself.

This is an English translation provided for convenience. In case of any discrepancy, the Italian version prevails.