Privacy Policy

Effective date: August 11, 2026

Arietta ("the app") is a mobile music practice app developed by Jakob Torsvik, operating as Torsvik Labs. This policy explains what data the app collects, how it is used, and your rights.

1. Data stored on your device

Your core practice data is stored on your device in an on-device SQLite database. It is never uploaded to Torsvik Labs servers, and we have no ability to access it. So that a lost or replaced device does not cost you your history, a copy may also reach your own cloud account — on iOS, Arietta writes a backup to your iCloud account; on Android, Arietta's data is eligible for the system's Auto Backup, which may include it in the device backup held in your Google account. That backup lives in your Apple or Google account under your control; we cannot read it. We do not operate user accounts, authentication, or cloud sync.

2. What we collect

Arietta integrates two Firebase services that collect limited data automatically:

Firebase Crashlytics

Crashlytics collects crash reports to help us fix bugs. When the app crashes, the following is sent to Firebase:

• Crash logs and stack traces
• Device model and manufacturer
• Operating system version
• App version

Firebase Analytics

Analytics collects anonymous usage data to help us understand how the app is used. This includes:

• Screens viewed and features used
• Session frequency and duration
• A randomly generated instance ID (not tied to your name or email)

Device identifiers and IP address

Both Firebase services may collect device identifiers (Advertising ID on iOS, Android ID on Android) and your IP address. IP addresses are used by Firebase to derive approximate country-level geolocation and are then discarded. We do not use these identifiers to track you across other apps or websites.

3. What we do NOT collect

Arietta does not collect any of the following:

• Name, email address, or any contact information
• Contacts, photos, or calendar data
• Audio, microphone input, or recordings
• Precise location (GPS, Wi-Fi, or Bluetooth-based)
• Financial or payment information
• User-generated content shared between users

There are no user accounts, no authentication, no third-party ads, and no social features.

4. Data export

Arietta includes an export feature that lets you save your data as a JSON file. Once exported, that file is under your control — we have no access to it. You are responsible for how you store or share exported files.

5. Third-party services

The only third-party services integrated into Arietta are Firebase Crashlytics and Firebase Analytics, both operated by Google. Their data practices are governed by the Firebase Privacy Policy and the Google Privacy Policy.

We do not sell, share, or transfer your data to any other third parties.

6. Children's privacy (COPPA)

Arietta is a general-audience app designed for musicians of all ages. It is not specifically directed at children under 13 and does not knowingly collect personally identifiable information (PII) from anyone, including children. Because no PII is collected, no parental consent mechanism is required. If you believe a child has somehow provided personal information through the app, please contact us and we will take steps to delete it.

7. GDPR (European users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland:

• Legal basis: We process the limited analytics and crash data described above on the basis of our legitimate interest in improving app stability and understanding usage patterns. No personal accounts or profiles are created.
• Right to object: You can opt out of analytics and crash reporting by disabling the relevant permissions on your device, or by contacting us directly.
• Your rights: You have the right to access, correct, delete, or port your data, and to lodge a complaint with your local data protection authority.
• Data transfers: Firebase services may process data outside the EEA. Google provides appropriate safeguards for these transfers as described in their privacy documentation.

8. CCPA (California users)

If you are a California resident:

• We do not sell your personal information to third parties, as defined by the California Consumer Privacy Act.
• The categories of information collected are limited to device and usage data as described in Section 2 above.
• You have the right to know what data is collected, to request deletion, and to not be discriminated against for exercising your rights.

9. Data retention

On-device data persists until you delete it or uninstall the app. On iOS, the backup Arietta writes to your iCloud account outlives uninstalling: you can remove it with "Clear all data" in the app, or from your iCloud storage settings. On Android, any copy the system has placed in your Google account is held by Google and is replaced or removed on their schedule, or through your Google account settings — Arietta cannot delete it. Crash reports and analytics data retained by Firebase are subject to Google's retention policies — typically 90 days for crash data and 14 months for analytics data.

10. Security

Your practice data is stored on your device and protected by your device's own security measures (passcode, encryption, biometrics). Any backup copy is protected by the security of your Apple or Google account and by those providers' own encryption and access controls. Data transmitted to Firebase is encrypted in transit. While no system is perfectly secure, we take reasonable steps to protect the limited data that is collected.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the effective date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact us

If you have questions about this policy or your data, contact us at hello@playarietta.com.