Skip to main content
Back to home

Privacy Policy

Last Updated: August 19, 2026

SONGUIDE takes your privacy seriously. This Privacy Policy explains how your personal information is collected, used, stored, and protected when you use the website and services. By using the services, you agree to the practices described in this policy. The policy covers two surfaces: the marketing site at songuide.com and the SONGUIDE app at app.songuide.com.

1. Data Controller

Niklas Oberli

c/o CillART GmbH

Dorfstrasse 5

5057 Reitnau

Switzerland

Email: contact@songuide.com

2. What Data Is Collected

Waitlist Signup Data

  • First name
  • Last name
  • Email address
  • Language preference (English or German)
  • Subscription to product updates (part of the waitlist, can be unsubscribed at any time)
  • Privacy-friendly hashed IP address (for abuse prevention)

Survey Responses

If you complete the survey, your responses are collected to better understand your needs and improve the product. This data is stored alongside your waitlist signup.

Marketing Site Analytics

The website uses MicroAnalytics, a privacy-friendly analytics service that does not use cookies. It collects anonymous usage statistics (page views, referrer sources) to help improve the website.

Technical Data

Basic technical information such as browser type, device type, and access times is collected automatically through the hosting provider for security and performance optimization.

App Product Analytics

If you opt in to product analytics inside the SONGUIDE app, PostHog captures anonymous usage events keyed by an internal identifier (distinct_id). This includes which screens you visit, which actions you take, basic performance metrics, and an approximate (city-level) location derived from your IP address. The content of your songs, setlists, and folders is never sent to PostHog.

App Error Reports

If you opt in to crash reporting, the SONGUIDE app sends crash and error reports to PostHog Error Tracking so that bugs can be identified and fixed. Each report contains the exception type, a stack trace, the app version, the route you were on, and anonymized device information. Crash reporting is off by default, and consent can be withdrawn at any time using the in-app toggle.

Product Updates Subscription

If you opt in to product updates, whether when creating your account, later in the app settings, or earlier via the waitlist, your email address, first name, language, subscription state, the time of your decision, and the policy version in effect at that time are stored so that occasional product update emails can be sent to you.

3. Legal Basis for Processing

Consent (GDPR Art. 6(1)(a))

Your email address and survey data are processed based on your explicit consent when you join the waitlist, complete the survey, or opt in to product updates in the app. You can withdraw this consent at any time.

Legitimate Interest (GDPR Art. 6(1)(f))

Technical data and analytics are processed for security, fraud prevention, and website improvement, which are legitimate interests that do not override your rights and freedoms.

App Error Tracking (GDPR Art. 6(1)(a))

App error reports are processed only after your explicit opt-in. Crash reporting is off by default and can be withdrawn at any time using the "Send crash reports" toggle in the app. Your decision is recorded with the policy version that was in effect, so material changes to this policy may prompt for fresh consent.

App Product Analytics (GDPR Art. 6(1)(a))

App product analytics is processed only after your explicit opt-in. Analytics is off by default and can be withdrawn at any time using the "Send usage analytics" toggle in the app. Your decision is recorded with the policy version that was in effect, so material changes to this policy may prompt for fresh consent.

4. App Consent and Privacy Controls

When you first sign in to the SONGUIDE app (or after a material update to this policy), the app shows a consent dialog with two separate switches: one for crash reporting and one for product analytics. Both are off by default and require explicit opt-in.

You can change either switch at any time in the app under Settings, then About, then Privacy.

Product update emails are a separate opt-in. The checkbox at account creation is unchecked by default, and you can switch the subscription on or off at any time in the app under Settings, then About, then Privacy, or end it via the unsubscribe link in every email. Each decision is recorded with a timestamp and the policy version in effect.

Each consent decision is recorded with a timestamp and the policy version it was made under, both in your browser and in your account, so that the choice you made can be proven and a new prompt appears only when this policy changes materially.

Subscription lifecycle events reported by the billing provider (for example a renewal or cancellation) are captured as product analytics only while product analytics consent is on record for the account. Without that consent no such events are captured.

The app does not use cookies. It uses local browser storage to remember your consent choices and, after you opt in to product analytics, the anonymous PostHog identifier (distinct_id) used for those events.

To permanently delete your app account and all associated data, follow the steps on the account deletion page.

5. How Your Data Is Used

  • To verify your email address and confirm your waitlist signup
  • To collect feedback and understand your needs for product development
  • To send you product updates and launch announcements (only if you opted in, via the waitlist or in the app)
  • To notify you when SONGUIDE launches
  • To analyze website traffic and improve user experience
  • To comply with legal obligations and prevent abuse

6. Data Sharing and Third-Party Processors

Your data is only shared with trusted third-party service providers that help operate the website and services:

Supabase (Postgres Database)

Stores your waitlist and survey data. Servers located in Zürich, Switzerland (EU-equivalent data protection).

PowerSync (Offline Sync)

Relays your library content (songs, setlists, and folders) from the database to your devices so it stays available offline. Runs on PowerSync Cloud in the EU region, operated by Journey Mobile, Inc. Data Processing Agreement.

Vercel (Website Hosting)

Hosts the website. Servers located in Frankfurt, Germany (EU).

Resend (Email Service)

Sends transactional and marketing emails on behalf of SONGUIDE. Servers located in Ireland (EU).

MicroAnalytics

Privacy-friendly analytics service that does not track individual users or use cookies. Based in the EU.

PostHog (App Analytics & Error Tracking)

Captures app error reports and, only after your explicit consent, app product analytics. Servers in Frankfurt, Germany on PostHog Cloud EU (AWS eu-central-1). Data Processing Agreement.

RevenueCat (Subscription Management)

Manages subscriptions for all purchase channels (App Store, Google Play, and web). Processes the account identifier (a random user ID), store transaction identifiers, the purchased product, price and currency, and the subscription status. Card or bank details never reach SONGUIDE systems. Operated by RevenueCat, Inc. (USA) under EU standard contractual clauses. Data Processing Agreement.

Stripe (Web Payment Processing)

Processes web subscription payments as merchant of record. Payment details are entered directly on Stripe's checkout and billing pages and never touch SONGUIDE systems. Only the subscription status, product, and price are reported back. Data Processing Agreement.

Your personal information is never sold, rented, or traded to third parties for marketing purposes.

7. International Data Transfers

Your account and library data are stored and processed in Switzerland and the European Economic Area (EEA). Subscription management and payment processing involve providers in the United States (RevenueCat and Stripe), on the basis of EU standard contractual clauses. No song content and no payment details are transferred to them.

8. Data Retention

  • Unverified signups: Automatically deleted after 7 days if you don't confirm your email address (GDPR compliance).
  • Verified signups: Retained until you request deletion or unsubscribe from communications.
  • You can request deletion of your data at any time via the contact address below.

9. Your Rights (GDPR & Swiss Data Protection)

  • Right to Access: Request a copy of the personal data held about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Withdraw Consent: Withdraw your consent for marketing emails at any time via the unsubscribe link in every email or the product updates switch in the app settings.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Lodge a Complaint: File a complaint with your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, please send an email to: contact@songuide.com

10. Security Measures

Industry-standard security measures protect your data, including HTTPS encryption, secure database storage, hashed tokens for sensitive operations, and regular security audits. However, no method of transmission over the internet is 100% secure, and absolute security cannot be guaranteed.

11. Cookies, Local Storage, and Tracking

The marketing site does not use cookies for tracking or analytics; MicroAnalytics operates without cookies. The SONGUIDE app does not use cookies either. It uses local browser storage to remember your consent choices and, after you opt in to product analytics, an anonymous PostHog identifier. You can clear this storage from your browser at any time, or turn the relevant toggle off in app Settings.

12. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in practices or legal requirements. The 'Last Updated' date at the top of this page indicates when the policy was last revised. Reviewing this page periodically is recommended.

13. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please send an email to: contact@songuide.com