Concert Companion Privacy Policy

Last updated: August 2026

This policy explains how Concert Companion handles your data. It covers the Concert Companion app (the Android app, package app.tuneshift.practice, and the web app at concertcompanion.app) and this website. Concert Companion is a practice and repertoire tool for musicians, built and run by an independent musician. The most detailed and current version of the app policy is always available at concertcompanion.app/privacy.

1. Who is responsible

Daan Boertien, trading as TuneShift, is the data controller.
Email: hello@tuneshift.app

2. What we collect

In the app, we collect only what is needed to run it for you:

  • Account details. Your email address, used for sign-in via a magic link. A display name if you choose to add one.
  • Your practice data. The pieces and movements you track, their progress, your programs, concerts, practice sessions, and statistics. This is the content of the app.
  • Private notes you write. Diary entries and notes on pieces, programs, and concerts. These are encrypted (see section 4).
  • Audio recordings. If you record practice excerpts, they are stored in your account and tied to the piece. You can delete them at any time.
  • Subscription status. If you upgrade to Pro, we store whether your subscription is active and when it renews. Payment itself is handled by our payment providers (see section 5); we never receive or store your card details.
  • Usage data. How you use the app: which features you open, which library pieces you read or listen to and on which days, and when the app was last open. We use this to see what is worth improving. It is deleted with your account and never shared.

On this website, if you accept analytics cookies, we collect pages visited, the referring website, your screen resolution, your country (derived from your IP address, which is not itself stored), and your browser type. Nothing is collected before you consent.

3. How we use your data

We use your data to provide the app: to run your account, store and sync your practice data across your devices, and manage your subscription; and to understand how the app is used so we can improve it. We do not sell your data, and we do not show third-party advertising in the app.

To measure and improve our own advertising, we use Meta and TikTok pixels on our pages, including in the app: they set cookies and share your IP address, browser information and the pages you visit with those companies, so we can measure our ads and reach people who have visited before. If you sign up after arriving through one of our ads, our server also confirms the signup with a one-way hashed version of your email address, never the address itself. Your practice content, notes and recordings are never shared with anyone.

4. Encryption and security

All data is encrypted in transit using HTTPS. Your most sensitive content, your diary entries and your notes on pieces, programs, and concerts, is additionally encrypted at rest with a key derived for your account alone. We cannot read the contents of those entries. The rest of your practice data is stored in a secured database with strict per-user access controls, so one user can never reach another user's data.

5. Processors we rely on

  • Supabase, database, authentication, and file storage, hosted in the EU.
  • Netlify, hosting and serverless functions for the app and this website.
  • Stripe, payment processing for web subscriptions. Stripe receives the data needed to take payment.
  • Google Play Billing, payment processing for subscriptions bought through the Android app.
  • Cloudflare, content delivery, file storage for recordings and library content, and sign-in anti-abuse checks (Turnstile).
  • Sentry, crash and error diagnostics (EU region), configured to exclude personal identifiers.
  • Anthropic, AI tooling used when handling feedback and support requests.
  • Meta and TikTok, advertising measurement and retargeting for our own ads, as described in section 3.
  • Google Fonts, web fonts on this website (a connection is made to Google servers).

Each processor handles your data only on our instructions and under a data processing agreement.

6. Where your data is stored

Your app data is stored in the EU region. Where a processor operates outside the EU, transfers are covered by Standard Contractual Clauses.

7. How long we keep it

We keep your app data for as long as your account exists. When you delete your account, your data is deleted (see section 8). Website analytics data is kept for at most 26 months.

8. Deleting your account

You can delete your account at any time from Settings in the app. Deletion is immediate and permanent. It destroys the key that protects your encrypted content, after which that content cannot be recovered by anyone, including us. Your practice data is then removed.

9. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You can exercise most of these directly in the app, or contact us at hello@tuneshift.app and we will respond.

10. Children

Concert Companion is intended for users aged 18 and over and is not directed at children.

11. Changes to this policy

If we change how we handle your data, we will update this page and the date above. Significant changes will be communicated in the app.

12. Contact

Questions about your privacy or this policy: hello@tuneshift.app.