隱私政策

Effective: 1 June 2026 · Ignition Musictech Limited

Key Points

This Privacy Policy explains how Ignition Musictech Limited ("we", "us", "our") handles your personal data when you use the Masternotes app and related services (the "Service"). It covers what we collect, why we collect it, who we share it with, and your rights.

1. Who We Are

Ignition Musictech Limited ("we", "us", "our") is a technology company incorporated in the Hong Kong Special Administrative Region, dedicated to providing digital solutions for the global classical music community. We are the data controller for the Masternotes (大師說) app and related services (the "Service"). This Privacy Policy explains how we handle your personal data when you use the Service — what we collect, why we collect it, who we share it with, and your rights.

If you have any questions, please email legal-masternotes@igmusictech.com. The current version of this Policy is always available at https://igmusictech.com/legal/masternotes-privacy/.

2. What We Collect

2.1 Account & Identity Data

When you create an account, we collect the basics needed to identify you and personalise your experience.

2.2 Conversations & Messages

We store all conversations and messages linked to your account. This powers your conversation history and lets our AI give you personalised responses.

2.3 Your Music Profile (Automated Profiling)

Heads up: our AI automatically builds a profile of your music preferences. You have the right to object — see below.

While you chat, our AI quietly notices things about you — like which composers you love, which performers you follow, or how familiar you are with certain repertoire. These inferred facts are saved to make future conversations more relevant.

This is automated profiling under GDPR Article 22. You can ask us to stop at any time — email us and we'll delete all inferred profile data within 30 days.

To opt out or delete your music profile: email legal-masternotes@igmusictech.com. We respond within 30 days.

2.4 Usage & Technical Data

We collect minimal technical data to keep the Service running smoothly and prevent abuse.

2.5 What We Don't Collect

We don't collect: device identifiers (IDFA/IDFV), location data, push notification tokens, camera or microphone access, your contacts, or payment card details. The current version has no third-party analytics SDKs.

3. Why We Process Your Data

For users in the EU or UK, here is the legal basis for each processing activity under the GDPR.

4. Who We Share Your Data With

We don't sell your data. We share it only with the service providers necessary to run Masternotes, each bound by a Data Processing Agreement (DPA).

About Wikipedia: When your question needs information beyond our knowledge base, our AI sends search terms (not your personal data) to the Wikipedia API to fetch relevant encyclopaedic content. Wikipedia content is licensed under CC BY-SA 4.0; source links are always shown in the app.

5. AI & Your Data

5.1 We Don't Train on Your Conversations

We do NOT use your conversations to train or fine-tune any AI model.

Your messages are sent to OpenAI, Anthropic, and Google only to generate your responses in real time. We never use your conversation content to train, fine-tune, or improve any AI model — including our own systems.

Under standard API agreements with these providers, API calls are not used for model training by default. You can review each provider's policy: OpenAI, Anthropic, Google.

5.2 Can Our Team Read Your Conversations?

Our technical team may access conversation content when strictly necessary — for example, to investigate a technical error you've reported, respond to a complaint, or conduct a security review.

Access is controlled by strict internal permission policies. It is never used for commercial analysis, advertising, marketing, or any product purpose beyond fixing reported issues.

5.3 You're Always Talking to AI

Masternotes is an AI app. You are always chatting with artificial intelligence, not a human. All responses in the chat are generated by AI. No human sees or replies to your messages in real time. Our AI will always identify itself as AI if you ask directly.

This disclosure is made in compliance with Article 50(3) of the EU AI Act, which requires AI chatbots to be transparent about their AI nature. This obligation applies from 2 August 2026.

6. How Long We Keep Your Data

7. Your Rights

Depending on where you live, you have some or all of the rights listed below. To exercise any of them, email legal-masternotes@igmusictech.com. We respond within 30 days.

You can also lodge a complaint with your local data protection authority — e.g. the ICO (ico.org.uk) for UK residents, or your EU supervisory authority.

8. How We Protect Your Data

We take security seriously. Our current measures include: Row Level Security (RLS) on all user data tables in Supabase; session tokens stored in the iOS Keychain; encrypted password storage (not visible to us); path-based storage isolation for uploaded files; server-side caches cleared on restart.

No system is 100% secure. If a data breach occurs that affects your rights, we'll notify you and the relevant authorities as required by law.

9. International Data Transfers

When your messages are processed by OpenAI, Anthropic, or Google, your data may be transferred to and processed in the United States. These transfers are governed by each provider's DPA, which incorporates EU Standard Contractual Clauses (SCCs) and, where applicable, UK adequacy mechanisms.

10. Minimum Age & Children's Privacy

Masternotes is available to users aged 13 and above. Users aged 13–15 must have a parent or guardian review and agree to these Terms on their behalf before using the Service. By using the app, a user under 16 confirms that their parent or guardian has given consent.

We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact legal-masternotes@igmusictech.com and we will promptly delete it.

10.1 Special Protections for Users Aged 13–15

For users under 16, we apply additional privacy safeguards:

• We do not serve targeted advertising or build commercial profiles for users under 16.
• The AI music profile (Section 2.3) for users under 16 is used only to improve the user's own experience — never for commercial profiling or third-party sharing.
• A parent or guardian may request access to, correction of, or deletion of their child's data at any time by emailing legal-masternotes@igmusictech.com.
• If we discover a user under 13 has created an account, we will delete the account and all associated data immediately.

COPPA Notice (US users): If you are a user under 13 in the United States, you may not use this Service. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently done so, contact legal-masternotes@igmusictech.com for immediate deletion.

11. Future Features

We may add the following features in the future. When we do, we'll update this Policy and give you at least 14 days' notice before changes take effect.

11.1 Subscriptions & Payments

We may offer paid subscription plans processed exclusively through Apple's in-app purchase system. We will never receive or store your payment card details — Apple handles all transactions. Subscription status (plan type, renewal date) will be stored in your account.

11.2 Third-Party Login

We may add social login options. Per Apple's App Store guidelines, Sign in with Apple will always be available whenever any other social login is offered on iOS.

All data received from third-party logins is stored in Supabase Auth with the same protections as the rest of your account. You can revoke access at any time through your Apple ID settings or the relevant provider's account settings.

11.3 Usage Analytics

We may add analytics in the future to improve the product. If we do, we'll name the provider in this Policy and give you appropriate notice and opt-out options where required by law.

12. Updates to This Policy

We may update this Privacy Policy from time to time. For material changes, we'll give you at least 14 days' notice via in-app notification or email before they take effect. The latest version is always at: https://igmusictech.com/legal/masternotes-privacy/

13. Governing Law & Contact

This Policy is governed by the laws of the Hong Kong Special Administrative Region, including the Personal Data (Privacy) Ordinance (Cap. 486). For users in the EU/EEA or UK, the GDPR and UK GDPR also apply.