Skip to main content
Back to home

Privacy Policy

Last Updated: May 25, 2026

At SONGUIDE, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. By using our services, you agree to the practices described in this policy. The policy covers two surfaces: the marketing site at songuide.com and the SONGUIDE app at app.songuide.com.

1. Data Controller

Niklas Oberli

c/o CillART GmbH

Dorfstrasse 5

5057 Reitnau

Switzerland

Email: contact@songuide.com

2. What Data We Collect

Waitlist Signup Data

  • First name
  • Last name
  • Email address
  • Language preference (English or German)
  • Your consent to receive product updates (optional)
  • Privacy-friendly hashed IP address (for abuse prevention)

Survey Responses

If you complete our survey, we collect your responses to help us understand your needs and improve our product. This data is stored alongside your waitlist signup.

Marketing Site Analytics

We use MicroAnalytics, a privacy-friendly analytics service that does not use cookies. It collects anonymous usage statistics (page views, referrer sources) to help us improve our website.

Technical Data

We automatically collect basic technical information such as browser type, device type, and access times through our hosting provider for security and performance optimization.

App Product Analytics

If you opt in to product analytics inside the SONGUIDE app, PostHog captures anonymous usage events keyed by an internal identifier (distinct_id). This includes which screens you visit, which actions you take, and basic performance metrics. The content of your songs, setlists, and folders is never sent to PostHog.

App Error Reports

By default, the SONGUIDE app sends crash and error reports to PostHog Error Tracking so we can fix bugs. Each report contains the exception type, a stack trace, the app version, the route you were on, and anonymized device information. You can object at any time using the in-app toggle.

3. Legal Basis for Processing

Consent (GDPR Art. 6(1)(a))

We process your email address and survey data based on your explicit consent when you join our waitlist or complete the survey. You can withdraw this consent at any time.

Legitimate Interest (GDPR Art. 6(1)(f))

We process technical data and analytics for security, fraud prevention, and website improvement, which are legitimate interests that do not override your rights and freedoms.

App Error Tracking (GDPR Art. 6(1)(a))

We process app error reports only after your explicit opt-in. Crash reporting is off by default and can be withdrawn at any time using the in-app toggle. Your decision is recorded with the policy version that was in effect, so material changes to this policy may prompt for fresh consent.

App Product Analytics (GDPR Art. 6(1)(a))

We process app product analytics only after your explicit opt-in. Analytics is off by default and can be withdrawn at any time using the in-app toggle. Your decision is recorded with the policy version that was in effect, so material changes to this policy may prompt for fresh consent.

4. App Consent and Privacy Controls

When you first sign in to the SONGUIDE app (or after a material update to this policy), the app shows a consent dialog with two separate switches: one for crash reporting and one for product analytics. Both are off by default and require explicit opt-in.

You can change either switch at any time in the app under Settings, then About, then Privacy.

Each consent decision is recorded with a timestamp and the policy version it was made under, both in your browser and in your account, so we can prove the choice you made and re-prompt only when this policy changes materially.

The app does not use cookies. It uses local browser storage to remember your consent choices and, after you opt in to product analytics, the anonymous PostHog identifier (distinct_id) used for those events.

5. How We Use Your Data

  • To verify your email address and confirm your waitlist signup
  • To collect feedback and understand your needs for product development
  • To send you product updates and launch announcements (only if you consented)
  • To notify you when SONGUIDE launches
  • To analyze website traffic and improve user experience
  • To comply with legal obligations and prevent abuse

6. Data Sharing and Third-Party Processors

We only share your data with trusted third-party service providers who help us operate our website and services:

Supabase (Postgres Database)

Stores your waitlist and survey data. Servers located in Zürich, Switzerland (EU-equivalent data protection).

Vercel (Website Hosting)

Hosts our website. Servers located in Frankfurt, Germany (EU).

Resend (Email Service)

Sends transactional and marketing emails on our behalf. Servers located in Ireland (EU).

MicroAnalytics

Privacy-friendly analytics service that does not track individual users or use cookies. Based in the EU.

PostHog (App Analytics & Error Tracking)

Captures app error reports and, only after your explicit consent, app product analytics. Servers in Frankfurt, Germany on PostHog Cloud EU (AWS eu-central-1). Data Processing Agreement.

We never sell, rent, or trade your personal information to third parties for marketing purposes.

7. International Data Transfers

Your data is processed within the European Economic Area (EEA) and Switzerland. All our service providers are located in regions with adequate data protection standards (Switzerland, Germany, Ireland).

8. Data Retention

  • Unverified signups: Automatically deleted after 7 days if you don't confirm your email address (GDPR compliance).
  • Verified signups: Retained until you request deletion or unsubscribe from our communications.
  • You can request deletion of your data at any time by contacting us.

9. Your Rights (GDPR & Swiss Data Protection)

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Withdraw Consent: Withdraw your consent for marketing emails at any time via the unsubscribe link in our emails.
  • Right to Object: Object to processing based on legitimate interests.
  • Right to Lodge a Complaint: File a complaint with your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, please contact us: contact@songuide.com

10. Security Measures

We implement industry-standard security measures to protect your data, including HTTPS encryption, secure database storage, hashed tokens for sensitive operations, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Cookies, Local Storage, and Tracking

The marketing site does not use cookies for tracking or analytics; MicroAnalytics operates without cookies. The SONGUIDE app does not use cookies either. It uses local browser storage to remember your consent choices and, after you opt in to product analytics, an anonymous PostHog identifier. You can clear this storage from your browser at any time, or turn the relevant toggle off in app Settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The 'Last Updated' date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: contact@songuide.com