本隐私政策说明炎上音乐科技有限公司（英文名称：IGNITION MUSICTECH LIMITED，下称“我们”或“公司”）在运营 Staffnotes iPad 应用及网站 https://igmusictech.com 时，如何收集、使用、披露、保存和保护个人资料。
请在使用账户、云服务、订阅、训练贡献、学生优惠或网站表单前阅读本政策。无账户本地模式不会连接 Staffnotes 服务器；如您仅使用该模式，本政策中关于云端处理的多数条款不会适用。
1. 适用范围与角色
Staffnotes 是仅面向原生 iPad 的乐谱管理应用，最低支持 iPadOS 17.0。我们是 Staffnotes 账户、云服务、训练贡献、学生资格及官网表单相关个人资料的数据控制者／资料使用者。Apple、Google 及其他服务提供商可能就其自身服务另行担任独立控制者。
本政策适用于香港、欧盟成员国、英国及美国用户，并在各地强制适用的隐私与消费者保护法律范围内解释。某项权利或义务仅在相关法律适用于我们或相关处理活动时产生。
2. 您可以选择的使用方式
2.1 无账户本地模式
在无账户本地模式下，应用不会连接 Staffnotes 服务器。乐谱、批注、录音、练习资料和设置仅保存在您的 iPad 上。删除应用或设备资料可能导致这些内容无法恢复；我们无法访问、导出或恢复纯本地资料。
2.2 账户与云服务
创建账户后，您可以使用账户功能；云同步仅向相应付费方案开放。一个账户同一时间只允许在一台 iPad 登录。您在第二台 iPad 登录时，第一台会被自动退出，但可在新设备下载其有权访问的云端内容。
3. 我们处理的资料
| 类别 | 具体内容 |
|---|---|
| 账户与登录 | 电子邮箱、Cognito 用户标识；使用 Apple 或 Google 登录时取得的电子邮箱及稳定的提供商标识。原始密码由 Amazon Cognito 处理，我们不会读取或保存。 |
| 个人资料与偏好 | 系统以电子邮箱中 @ 符号之前的部分生成显示名称；另包括界面语言及账户设置。首发版本的头像仅保存在 iPad 本地，不会上传或同步。 |
| 设备安装标识符 | 限定于某台 iPad 上 Staffnotes 安装实例的标识符，附在练习和批注记录上，用于识别数据来源并合并设备编辑。 |
| 云端内容 | 您选择上传或同步的 PDF 乐谱、MusicXML、批注、播放列表／文件夹、练习历史、自动跟谱记录及支持云同步的设置。首发版本不上传或同步手动练习录音及头像。 |
| 任务记录 | 乐谱识别、转换或数据导出请求及其状态；该等记录与账户关联，并按相应任务或账户删除规则处理。 |
| 麦克风资料 | 调音器、手动练习录音和自动跟谱所需的声音。手动练习录音仅保存在 iPad 本地，不会上传或云同步；未启用训练贡献时，自动跟谱声音仅在设备本地分析且不上传。 |
| 训练贡献 | 符合第7节条件的完整演奏录音、随机训练编号、质量评估及由训练产生的特征、标签或模型资料。 |
| 订阅与交易 | Apple 提供的交易标识、产品、订阅状态、到期日及其他核验订阅所需资料。我们不取得完整支付卡号。 |
| 学生资格 | 学生证影像及其中可见的姓名、学校、有效期、照片和可能显示的出生日期；验证结果、到期日与验证时间。 |
| 服务与安全日志 | 基础设施为交付和保护服务而生成的请求、错误、访问和安全事件资料；账户标识在服务日志中以短哈希形式记录，服务日志通常保存30天。 |
| 诊断资料 | 您自愿向 Apple 分享并由我们在 App Store Connect 查看之崩溃报告和诊断资料。我们不在应用内使用第三方分析或崩溃 SDK。 |
| 联系与营销 | 您发送给客服、法律或版权邮箱的内容；官网联系表单中的姓名、邮箱、主题和正文；订阅营销邮件时的邮箱、同意时间与退订状态。 |
4. 处理目的与法律依据
| 依据 | 目的 |
|---|---|
| 履行合同／应您的要求采取步骤 | 建立和验证账户，提供登录、云同步、转换、导出、恢复购买、订阅及客户支持。 |
| 您的同意 | 在独立训练开关开启时收集训练贡献；发送营销邮件；在法律要求时处理特定资料。您可撤回同意，但不影响撤回前处理的合法性。 |
| 我们的合法利益 | 保障服务安全、排查故障、预防欺诈、维护服务质量、处理权利已清理的参考资料库，以及建立、行使或抗辩法律主张；我们会在适用法律要求时进行利益衡量。 |
| 法律义务 | 保存法律要求的交易、税务、合规及争议资料，回应有权机关的合法要求。 |
若您不提供建立账户、核验订阅或交付云服务所必需的资料，我们可能无法提供相应功能。训练贡献及营销通讯始终可选，不影响您使用无需该等处理的其他功能。
5. 云同步与用户内容
您决定上传和同步哪些内容。云端资料存储在 Amazon Web Services（AWS）法兰克福区域（eu-central-1），并以传输加密、静态加密、账户隔离和访问控制等措施保护。经授权的香港人员可在提供支持、维护安全或执行您授权的训练工作所必需范围内访问。
首发版本的手动练习录音和头像只保存在您的 iPad 上，不属于云同步内容。曲库搜索及 PDF 文字搜索的索引和查询也只在设备本地处理；我们不会收集您的搜索历史。
您的 PDF 与其他内容默认仅供您本人管理，不会公开、建立公开分享链接或提供给其他用户。我们不会以广告定向、数据经纪或出售个人资料为目的使用您的内容。
6. PDF 转 MusicXML 与权利已清理资料库
PDF 转 MusicXML 及自动跟谱所需的转换由我们的 AWS 环境处理，不发送给外部 OCR、人工标注或生成式 AI 服务。转换结果可能并不准确，您应自行检查。
首发阶段，我们仅会把经白名单确认、版权已届满或公司已经取得充分许可的乐谱版本纳入可跨用户复用的参考资料库。我们不会因另一用户上传相似乐谱而向其披露您的私人文件。与您账户关联的 MusicXML 会随账户删除；已经独立完成权利清理且不再包含您的账户标识或私人批注的资料库副本可继续保留。
7. 麦克风、自动跟谱与自愿训练贡献
7.1 本地处理
调音器、手动练习录音和自动跟谱需要麦克风权限。首发版本中，您主动保存的手动练习录音仅保存在 iPad 本地，不会上传或云同步。未开启训练贡献时，自动跟谱期间的实时声音也只在 iPad 本地分析，我们不会保存或上传该段声音。手动练习录音与下述在训练开关开启后由自动跟谱流程产生的训练录音属于不同的数据流。
7.2 训练开关与自动上传
训练贡献开关默认关闭，并与一般麦克风权限分开。开启后，如果您使用自动跟谱且本地模型给该次完整录音的质量评分达到80分或以上，完整录音会在该次使用结束后自动上传至 AWS 法兰克福区域，不再逐次弹出确认。低于80分的录音不会上传，并会在本地删除。您可以停止跟谱或录音，并可在上传完成前取消；中止的录音不用于训练。
训练开关关闭或同意撤回后，我们立即停止新的自动上传。由于每段训练录音一上传即删除账户ID、原始文件名、设备ID及其他用户元数据，以随机训练编号保存，且不保留映射表，上传完成后我们通常无法再确定哪一段属于您，也无法按个人请求找回或删除该段录音。撤回仅影响未来收集和处理，不会逆转已经完成或无法再与您对应的训练成果。
7.3 人工查看、安全与保存
只有获授权的香港人员可以为质量控制和模型训练完整播放录音。访问会记录日志；如工作需要下载，只能下载至受公司管理、具有加密和访问控制的工作设备，不得使用个人云盘，并应在训练任务完成后30天内删除工作副本。香港以外人员不得播放训练录音。
原始训练录音在 AWS S3 中最长保存12个月，届满后从当前对象及全部历史版本永久删除。质量分数日志保存90天，且不包含账户ID、录音ID或设备信息；汇总的非个人统计可继续保存。派生训练数据和模型参数不再与账户对应，并可为开发、测试和改进 Staffnotes 模型持续使用。
录音可能意外包含说话声或环境声音。请只在您有权录音的环境中使用，并避免录入他人的私人谈话。
8. 学生资格验证
学生价仅适用于符合条件的用户。学生证影像上传至 AWS 法兰克福区域，由公司系统自动识别，并可能由获授权的香港人员人工复核。原始证件影像在完成验证后30天内从 S3 及全部历史版本删除。验证结果、到期日及验证时间保留至账户删除或被新的验证结果替代。
学生资格持续至证件到期。到期前后我们可以要求重新验证；未完成重新验证时，后续续订将按届时适用的标准价格处理。若证件显示用户未满16岁，我们可拒绝学生资格、阻止或暂停账户及云服务，并按适用法律采取删除或限制处理措施。
9. 订阅、通讯与营销
订阅由 Apple 处理。我们接收核验订阅、恢复购买和管理权益所需资料，不接收完整支付卡资料。我们可发送账户验证、密码重置、安全、订阅、导出完成、云端转换完成、不活跃账户删除及重大政策更新等服务通讯。自动服务邮件可通过 Amazon SES 发送，人工支持通过 Google Workspace 处理。
营销邮件仅发送给已经同意的用户，包括在用户连续15天未使用后发送的使用提醒、产品推广或功能更新。每封营销邮件均提供退订链接；退订不会阻止交付安全、交易或服务必需邮件。首发版本不发送 iPad 推送通知，也不保存 Apple 推送设备令牌。
10. 网站与第三方服务
| 接收方／服务 | 作用 |
|---|---|
| AWS | 账户认证、云存储、数据库、转换、邮件、日志、安全及训练基础设施；主要应用资料位于法兰克福区域。 |
| Apple | App Store 分发、订阅付款与收据、Apple 登录、用户自愿分享的崩溃和诊断资料。 |
| Google 登录；Google Workspace 托管公司邮箱。 | |
| Formspree | 处理官网联系表单并将姓名、邮箱、主题和正文转发至公司邮箱。 |
| GitHub Pages | 托管公司网站；GitHub 可能为交付、安全和防滥用处理 IP 地址及技术访问日志。 |
官网目前不设置公司分析或广告 Cookie，也不使用验证码或反垃圾供应商。邮件订阅名单由 Amazon SES Contact List 管理，并在 DynamoDB 保存同意记录；不采用双重确认订阅。上述供应商仅在其服务范围内处理资料，并受其条款和隐私政策约束。
11. 国际传输
应用云资料主要存放在德国法兰克福，并可能由香港获授权人员远程访问。Apple、Google、Formspree、GitHub 及其分处理者可能在美国或其他国家处理资料。资料接收地的法律可能与您所在地不同。我们会在适用法律要求时采用合同、访问控制、数据最小化和其他适当保障，并可应请求提供相关保障说明。
12. 保存与删除
| 资料 | 一般保存规则 |
|---|---|
| 账户及用户云内容 | 账户有效期间；您删除具体内容、申请删除账户或触发不活跃账户规则时删除。 |
| 不活跃账户 | 连续两年没有任何功能活动且没有有效订阅时启动删除；提前30天及7天发送邮件，重新登录可取消。 |
| S3用户文件版本 | 账户删除时永久删除该用户文件的当前对象及全部历史版本。 |
| 数据库备份 | DynamoDB 时间点恢复窗口最长35天；生产记录删除后可能在该窗口内残留并随恢复窗口覆盖。 |
| 服务日志 | 通常30天；使用短哈希账户标识。 |
| 已删除批注的同步标记 | 90天，用于在设备间传播删除状态。 |
| 数据导出 | 导出包保存3天；下载链接有效24小时。 |
| 训练录音 | 上传后立即与账户解除关联；S3及全部历史版本最长12个月。 |
| 训练质量分数日志 | 90天；不含账户、录音或设备标识。 |
| 学生证原始影像 | 验证完成后30天内删除全部S3版本。 |
| 学生验证结果 | 至账户删除或由新的验证结果替代。 |
| 营销同意记录 | 在订阅期间及退订后为证明合规所需的合理期限。 |
| 删除证明 | 可长期保存不可逆哈希、删除日期及对象数量，用于证明删除；该记录不用于识别用户。 |
不活跃账户删除不影响已经解除关联的训练录音、无法再对应个人的训练成果，或独立完成权利清理的参考 MusicXML。法律要求、争议处理、安全调查或防止欺诈所必需时，我们可能在必要范围内延长保存。
13. 账户删除与订阅
您可以通过应用内流程或联系法律邮箱请求删除账户。对于通过 Apple 登录的账户，系统会先按 Apple 的要求撤销相关登录令牌，并在 Apple 确认撤销前暂不删除账户资料。随后，删除会移除账户资料及用户云文件的全部 S3 版本，并撤销账户访问；删除后的数据库备份残留按35日恢复窗口覆盖。删除账户不会自动取消 Apple 订阅。请先在 Apple ID 的订阅设置中取消，以免继续扣费。
14. 您的权利
视适用法律而定，您可以请求查阅、更正、删除、限制处理或取得个人资料副本，反对基于合法利益的处理，撤回同意，要求数据可携，及就自动化或营销处理行使相关权利。您也可以向香港个人资料私隐专员公署、您常住地的欧盟数据保护机关、英国 Information Commissioner’s Office 或有管辖权的美国监管机构投诉。
请发送请求至 legal-staffnotes@igmusictech.com。我们可要求合理资料核验身份及请求权限，并会在适用法律规定的期限内答复。若美国州法适用，您亦可按我们回复所述方式提出申诉。我们不会因您合法行使隐私权而歧视您。
我们不出售个人资料，不为跨情境行为广告共享个人资料，也不使用敏感个人资料推断与服务无关的特征。由于训练录音上传后立即解除关联，我们可能无法定位并执行针对某一录音的查阅或删除；我们会说明技术限制并处理仍能与您对应的其他资料。
15. 年龄限制
无账户本地模式不会向我们传输资料。创建账户、使用云服务、订阅或贡献训练资料仅限年满16岁的用户。我们不提供家长同意流程。若我们得知账户用户未满16岁，可暂停或终止账户，并在法律要求范围内删除或限制相关资料。
16. 安全
我们采用与风险相称的管理、技术和组织措施，包括 TLS 传输加密、AWS KMS 静态加密、密钥轮换、最小权限、账户隔离、访问日志、受管工作设备及保密义务。任何系统均无法保证绝对安全。若发生依法须通知的个人资料事故，我们将按照适用法律通知监管机构及受影响用户。
17. 本政策的变更
我们可因产品、技术或法律变化更新本政策，并更新版本或生效日期。重大变更会通过应用、服务邮件或其他合理方式提前或及时通知；若变更需要新的同意，我们会另行取得。
联系我们
| 项目 | 资料 |
|---|---|
| 运营方／数据控制者 | 炎上音乐科技有限公司（IGNITION MUSICTECH LIMITED） |
| 法律通知地址 | 香港中环己连拿利1号嘉利大厦17楼2A室 Unit 2A, 17/F, Glenealy Tower, No. 1 Glenealy, Central, Hong Kong |
| 隐私及法律事务 | legal-staffnotes@igmusictech.com |
| 产品、账户及订阅支持 | support-staffnotes@igmusictech.com |
| 版权投诉 | copyright@igmusictech.com |
| 网站 | https://igmusictech.com |
This Privacy Policy explains how IGNITION MUSICTECH LIMITED (the “Company”, “we”, “us” or “our”) collects, uses, discloses, retains and protects personal data when operating the Staffnotes iPad application and https://igmusictech.com.
Please read it before using an account, cloud services, a subscription, training contribution, student pricing or a website form. The no-account local mode does not connect to Staffnotes servers, so most cloud-processing provisions do not apply if you use only that mode.
1. Scope and our role
Staffnotes is a native iPad sheet-music management application requiring iPadOS 17.0 or later. We are the controller of personal data processed for Staffnotes accounts, cloud services, training contributions, student verification and website forms. Apple, Google and other providers may act as separate controllers for their own services.
This Policy is intended for users in Hong Kong, the European Union, the United Kingdom and the United States. It is interpreted subject to mandatory privacy and consumer laws. A jurisdiction-specific right applies only where the relevant law covers us or the processing concerned.
2. Ways to use Staffnotes
2.1 No-account local mode
In no-account local mode, Staffnotes does not connect to our servers. Scores, annotations, recordings, practice information and settings remain on the iPad. Deleting the app or device data may make them unrecoverable, and we cannot access, export or restore purely local data.
2.2 Account and cloud services
An account enables account features; cloud sync is available only with the relevant paid plan. An account may be logged in on only one iPad at a time. Logging in on a second iPad signs out the first, while allowing the user to download cloud content available to the account on the new device.
3. Personal data we process
| Category | Examples |
|---|---|
| Account and sign-in | Email address and Cognito user identifier. Apple or Google sign-in provides the email address and a stable provider identifier. Amazon Cognito handles the password; our code does not read or store the raw password. |
| Profile and preferences | A display name generated from the portion of the email address before the @ symbol, interface language and account settings. At launch, the avatar remains only on the iPad and is not uploaded or synced. |
| Installation identifier | An identifier limited to the Staffnotes installation on a particular iPad. It is attached to practice and annotation records to identify their source and merge device edits. |
| Cloud content | PDF scores, MusicXML, annotations, playlists or folders, practice history, auto-follow records and supported settings that you choose to upload or sync. At launch, manual practice recordings and avatars are not uploaded or synced. |
| Task records | Score-recognition, conversion or data-export requests and their status. These records are linked to the account and handled under the relevant task or account-deletion rules. |
| Microphone data | Audio needed for tuning, manual practice recording and automatic score following. A manual practice recording remains only on the iPad and is not uploaded or cloud-synced. Without training consent, auto-follow audio is analysed only on-device and is not uploaded. |
| Training contribution | A complete performance recording meeting section 7 criteria, a random training number, quality assessment and derived features, labels or model data. |
| Subscription | Transaction identifier, product, subscription status, expiry and related verification information supplied by Apple. We do not receive full payment-card details. |
| Student status | The student-card image and visible name, institution, expiry, photograph and possible date of birth; verification result, expiry and verification time. |
| Service and security logs | Request, error, access and security-event information generated to deliver and protect the service. Account identifiers in service logs are shortened hashes; service logs are generally retained for 30 days. |
| Diagnostics | Crash reports and diagnostics you voluntarily share with Apple and that we view in App Store Connect. We do not embed a third-party analytics or crash-reporting SDK. |
| Communications | Messages sent to support, legal or copyright addresses; name, email, subject and message in the website contact form; marketing email, consent time and unsubscribe status. |
4. Purposes and lawful bases
| Basis | Purpose |
|---|---|
| Contract / steps at your request | Create and verify an account; provide sign-in, cloud sync, conversion, export, purchase restoration, subscriptions and support. |
| Consent | Collect optional training contributions through the separate training switch; send marketing emails; and process data where law requires consent. Withdrawal does not affect processing already lawfully carried out. |
| Legitimate interests | Secure and troubleshoot the service, prevent fraud, maintain service quality, operate a rights-cleared reference library, and establish, exercise or defend claims, subject to balancing where required. |
| Legal obligations | Keep records required for transactions, tax, compliance and disputes, and respond to lawful requests from competent authorities. |
If you do not provide information required to create an account, verify a subscription or deliver cloud services, we may be unable to provide the relevant feature. Training contributions and marketing are optional and do not affect access to functions that do not depend on them.
5. Cloud sync and user content
You choose which supported content to upload and sync. Cloud data is stored in the Amazon Web Services (AWS) Frankfurt Region (eu-central-1) and protected by controls including encryption in transit and at rest, account isolation and access management. Authorised personnel in Hong Kong may access data only where needed for support, security or training work you have authorised.
At launch, manual practice recordings and avatars remain only on your iPad and are not cloud-sync content. The library-search and PDF-text-search indexes and queries are also processed only on-device; we do not collect your search history.
Your PDFs and other content are private by default. Staffnotes does not publish them, create public sharing links or make them available to other users. We do not use them for targeted advertising, data brokerage or sale of personal data.
6. PDF-to-MusicXML conversion and rights-cleared library
PDF-to-MusicXML conversion and processing needed for automatic score following occur within our AWS environment. Files are not sent to an external OCR, human-annotation or generative-AI provider. Conversion may be inaccurate and should be checked by you.
At launch, cross-user reuse is limited to a whitelisted reference library of editions confirmed to be out of copyright or adequately licensed. A similar upload by another user does not reveal your private file to them. Account-linked MusicXML is deleted with the account; a separately rights-cleared library copy that contains no account identifier or private annotation may remain.
7. Microphone, automatic score following and optional training
7.1 On-device processing
The tuner, manual practice recording and automatic score-following features require microphone permission. At launch, a manual practice recording that you deliberately save remains only on the iPad and is not uploaded or cloud-synced. If training contribution is off, live audio used by automatic score following is also analysed only on the iPad and is neither saved nor uploaded by us. Manual practice recordings are separate from training recordings produced by the automatic score-following process when the training switch is enabled, as described below.
7.2 Training switch and automatic upload
The separate training switch is off by default. If you enable it and use automatic score following, a complete recording that receives an on-device model-quality score of 80 or above is automatically uploaded to AWS Frankfurt after that session, without another per-session confirmation. A recording below 80 is not uploaded and is deleted locally. You can stop following or recording and cancel an unfinished upload; an interrupted recording is not used for training.
Turning the switch off or withdrawing consent stops new automatic uploads immediately. On upload, we remove account ID, original filename, device ID and other user metadata, assign a random training number and keep no mapping table. CloudWatch and access logs are configured so that timing, IP address or request records cannot be used to associate the file with a particular account. We therefore generally cannot locate or delete an individual recording after upload. Withdrawal applies prospectively and cannot reverse completed or no-longer-attributable training results.
7.3 Human access, security and retention
Only authorised personnel in Hong Kong may listen to a complete recording for quality control and model training. Access is logged. Any work copy must be placed only on an encrypted, access-controlled, company-managed device, never in personal cloud storage, and deleted within 30 days after the task ends. No person outside Hong Kong may play training recordings.
Raw training audio is retained in AWS S3 for no more than 12 months and then permanently deleted from the current object and all historical versions. Quality-score logs are kept for 90 days and contain no account, recording or device identifier; aggregated non-personal statistics may be kept. Derived training data and model parameters are not linked to an account and may continue to be used to develop, test and improve Staffnotes models.
Audio can incidentally capture speech or environmental sound. Use the feature only where you are entitled to record and avoid capturing another person’s private conversation.
8. Student verification
Student pricing requires proof of eligibility. The card image is uploaded to AWS Frankfurt, assessed by Company systems and may be reviewed manually by authorised personnel in Hong Kong. The original image and all S3 versions are deleted within 30 days after verification. The outcome, expiry and verification time remain until account deletion or replacement by a new result.
Eligibility continues until the card expires. We may request re-verification; if it is not completed, subsequent renewals use the then-current standard price. If the document indicates that the user is under 16, we may deny student status, prevent or suspend the account and cloud service, and delete or restrict data as applicable law requires.
9. Subscriptions, service messages and marketing
Apple processes subscriptions. We receive information needed to verify entitlement, restore purchases and administer access, but not full payment-card details. We may send verification, password-reset, security, subscription, export-completion, cloud-conversion, inactive-account deletion and material policy-update messages. Automated service messages may be sent through Amazon SES; human support uses Google Workspace.
Marketing email is sent only to users who opted in. It may include a usage reminder after 15 consecutive days of inactivity, promotions or feature updates. Every marketing email has an unsubscribe link. Unsubscribing does not prevent necessary security, transactional or service communications. The launch version sends no iPad push notifications and stores no Apple push token.
10. Website and service providers
| Provider | Role |
|---|---|
| AWS | Authentication, cloud storage, databases, conversion, email, logs, security and training infrastructure; primary app data is in Frankfurt. |
| Apple | App Store distribution, subscription payment and receipts, Sign in with Apple, and voluntarily shared crash and diagnostic data. |
| Google sign-in and Google Workspace email hosting. | |
| Formspree | Receives the website contact form and forwards name, email, subject and message to the Company mailbox. |
| GitHub Pages | Hosts the website. GitHub may process IP addresses and technical access logs for delivery, security and abuse prevention. |
We currently use no Company analytics or advertising cookies on the website and no CAPTCHA or anti-spam vendor. The mailing list is held in an Amazon SES Contact List with consent records in DynamoDB; subscription is not double opt-in. Providers process data within the scope of their services and under their own applicable terms and privacy notices.
11. International transfers
Application cloud data is primarily stored in Frankfurt and may be accessed remotely by authorised personnel in Hong Kong. Apple, Google, Formspree, GitHub and their subprocessors may process data in the United States or other countries. Their laws may differ from those where you live. Where applicable law requires it, we use contractual, access-control, minimisation and other appropriate safeguards and can provide relevant information on request.
12. Retention and deletion
| Data | General retention rule |
|---|---|
| Account and user cloud content | While the account is active, until you delete the item or account, or the inactive-account rule applies. |
| Inactive account | Deletion begins after two years with no activity in any function and no active subscription; notices are sent 30 and 7 days before deletion, and signing in cancels it. |
| S3 user-file versions | All current and historical versions for the user are permanently deleted when the account is deleted. |
| Database backups | DynamoDB point-in-time recovery window up to 35 days; deleted production records may persist within and roll out of that window. |
| Service logs | Generally 30 days, with a shortened-hash account identifier. |
| Deleted-annotation tombstones | 90 days to propagate deletion between devices. |
| Data export | Export package 3 days; download link 24 hours. |
| Training audio | De-linked on upload; current and all S3 versions retained no more than 12 months. |
| Training quality-score log | 90 days, with no account, recording or device identifier. |
| Original student-card image | All S3 versions deleted within 30 days after verification. |
| Student verification result | Until account deletion or replacement by a new result. |
| Marketing consent record | During subscription and for a reasonable compliance-evidence period after opt-out. |
| Deletion evidence | An irreversible hash, deletion date and object count may be retained long term to evidence deletion and are not used to identify a user. |
Inactive-account deletion does not affect training audio already de-linked from the account, training results that can no longer be attributed, or separately rights-cleared reference MusicXML. We may retain information longer where strictly necessary for a legal obligation, dispute, security investigation or fraud prevention.
13. Account deletion and Apple subscriptions
You may request deletion through the in-app process or the legal email address. For an account using Sign in with Apple, the system first requests revocation of the relevant Apple sign-in token and does not delete account data until Apple confirms revocation. Deletion then removes account information and every S3 version of the user’s cloud files and revokes account access; backup remnants roll out of the 35-day recovery window. Deleting the Staffnotes account does not cancel an Apple subscription. Cancel it separately in the Apple ID subscription settings to avoid future charges.
14. Your rights
Depending on applicable law, you may ask to access, correct, delete, restrict or receive a copy of personal data; object to legitimate-interest processing; withdraw consent; request portability; and exercise relevant rights concerning automated or marketing processing. You may complain to the Hong Kong Privacy Commissioner for Personal Data, an EU supervisory authority where you live, the UK Information Commissioner’s Office, or a competent US regulator.
Send requests to legal-staffnotes@igmusictech.com. We may request reasonable information to verify identity and authority and will respond within the period required by applicable law. Where an applicable US state law provides an appeal, you may appeal as described in our response. We do not discriminate against users for validly exercising privacy rights.
We do not sell personal data, share it for cross-context behavioural advertising, or use sensitive personal data to infer characteristics unrelated to the service. Because training audio is immediately de-linked on upload, we may be unable to locate and action access or deletion against an individual recording; we will explain the technical limitation and act on other data that remains attributable.
15. Age restriction
No-account local mode does not send data to us. Creating an account, using cloud services, subscribing or contributing training data is limited to users aged 16 or older. We do not offer a parental-consent process. If we learn that an account user is under 16, we may suspend or close the account and delete or restrict data as applicable law requires.
16. Security
We use administrative, technical and organisational safeguards proportionate to risk, including TLS in transit, AWS KMS encryption at rest, key rotation, least-privilege access, account isolation, access logging, managed work devices and confidentiality obligations. No system can be absolutely secure. If a personal-data incident is legally notifiable, we will notify regulators and affected users as applicable law requires.
17. Changes to this Policy
We may update this Policy for product, technology or legal changes and will update its version or effective date. We will provide advance or timely notice of material changes through the app, service email or another reasonable channel. Where new consent is required, we will obtain it separately.
Contact us
| Item | Details |
|---|---|
| Operator / controller | IGNITION MUSICTECH LIMITED |
| Address for legal notices | Unit 2A, 17/F, Glenealy Tower, No. 1 Glenealy, Central, Hong Kong |
| Privacy and legal enquiries | legal-staffnotes@igmusictech.com |
| Product, account and subscription support | support-staffnotes@igmusictech.com |
| Copyright notices | copyright@igmusictech.com |
| Website | https://igmusictech.com |