Pocket Lyrics Privacy Policy

Pocket Lyrics is a chord and lyric songbook app made by Goodmark Limited, a New Zealand company ("Goodmark", "we", "us"). This policy explains what information the app handles, where it is kept, and the choices you have. It applies to the Pocket Lyrics apps for iPhone, iPad, Android and the web, and to the Pocket Lyrics pages on this website.

1. Information we hold

Your account

When you create an account we store:

• your email address, and
• a user ID (a random code Firebase assigns to your account), and
• your password, which is stored only in hashed form by Firebase Authentication. We cannot see it.

We use these to sign you in, to keep your songs attached to your account, to send password reset emails when you ask for one, and to answer support requests.

Your songs and sets

Everything you add in the app is stored in your account so it can sync between your devices:

• song titles, artists, keys, chords and lyrics,
• any YouTube links you attach to a song,
• your sets (lists of songs, their order and the key you chose for each), and
• the dates each item was created and last changed, which keep your devices in step.

We never read, review, use or share this content except to store it and show it back to you, or when you ask us for help with it.

Settings on your device

Appearance, colour theme, chord colour and text size are stored only on your device and are not sent to us.

Information we do not collect

• No microphone recordings. The Tuner and Detect features listen through the microphone only while they are switched on and the screen is showing. The sound is analysed on your device as it arrives and is discarded immediately. Nothing is recorded, saved or uploaded.
• No audio files. When you open an MP3 or M4A in Detect, the file is read and analysed on your device. It is never uploaded.
• No analytics or tracking. The app contains no analytics, advertising or tracking code, and no third-party trackers.
• No contacts, photos, location or other device data.

2. Where your information is kept

Your songs and sets are stored in Google Cloud Firestore in the australia-southeast1 (Sydney, Australia) region, using Google's Firebase service. Each device also keeps an offline copy of your own songs so the app works without a connection; that copy is removed when you sign out or delete your account.

Account records (your email address, user ID and hashed password) are handled by Firebase Authentication. Google may store these in other regions, including the United States.

Google processes this information on our behalf under the Google Cloud / Firebase data processing terms and does not use it for its own purposes.

3. Other services the app uses

• App updates. The app checks Expo's update service (expo.dev) for new versions of its code. That check sends the app's platform, version and a random installation identifier used to roll updates out gradually. It does not include your email, account or songs.
• Password reset emails are sent through Firebase on our behalf.
• YouTube links you add open in the YouTube app or your browser. From that point YouTube's own privacy policy applies.
• App stores. When you buy the app or a subscription, Apple or Google handles the payment under their own terms and privacy policies. We receive no card details.

We do not use any other third-party services.

4. How we use your information

We use your information only to:

• provide the app: sign you in, store your songs and sets, and sync them between your devices,
• keep your account secure,
• answer your questions and support requests, and
• meet our legal obligations.

We do not sell your information, share it for marketing, build profiles, or use it to train anything.

5. When we share information

We share your information only:

• with Google (Firebase) and Expo as described above, as service providers acting on our instructions,
• if the law requires it, for example a court order, or
• if Goodmark is sold or merges with another business, in which case your information would pass to the new owner under this same policy and we would tell you first.

6. How long we keep it

We keep your account, songs and sets for as long as your account exists. When you delete your account (see section 7) everything is deleted from our live systems straight away. Our cloud provider may hold residual copies in its backup and recovery systems for a limited period before they are overwritten; Google states this is normally no longer than 180 days.

Support emails are kept for up to 2 years after the request is resolved, then deleted.

7. Deleting your account

You can delete your account yourself at any time: open Settings, tap Delete account, and enter your password. This removes your account, every song and every set, and signs you out of all devices. If you cannot use the app, email us from your account's email address and we will delete it within 30 days. Full instructions: goodmarklabs.com/pocket-lyrics/delete-account

If you want to keep your songs, use Settings > Import & export > Export all songs first. It gives you a ChordPro (.cho) text file you can open anywhere.

8. Your rights

Everyone

Wherever you live, you can:

• see the information we hold about you (your songs are visible in the app, and you can export them all at any time),
• correct it (edit your songs in the app, or email us to change your account email), and
• delete it (see section 7).

To exercise any of these, use the app or email support@goodmarklabs.com. We will reply within 20 working days, usually much sooner. We may ask you to confirm you own the account.

New Zealand

Goodmark is subject to the New Zealand Privacy Act 2020. You have the right to access and correct your personal information. If you think we have breached the Act and you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner: privacy.org.nz

European Union, United Kingdom and other regions

If you are in the EU, EEA, UK or another place with similar laws, you also have the right to:

• have your data erased, restricted or ported to you in a usable format (the export described above),
• object to processing based on legitimate interests (we rely on our contract with you to provide the app, and on your consent for the microphone, which you can withdraw at any time in your device settings), and
• complain to your local data protection authority.

Our legal basis for holding your account and songs is that it is necessary to provide the service you asked for. Because our servers are in Australia and our account provider may store data in the United States, your information leaves your region. Both locations are covered by Google's standard contractual commitments for international transfers.

9. Children

Pocket Lyrics is not directed at children under 13, and we do not knowingly collect information from them. If you are under 13 you may use the app only with a parent or guardian's account and supervision. If you believe a child has created an account, email us and we will delete it.

10. Security

Your information is encrypted in transit (HTTPS) and at rest on Google's servers. Passwords are hashed and never stored in plain text. Access to our Firebase project is limited to the people who run Pocket Lyrics. The offline copy on your device is protected by your device's own security, so please use a device passcode.

No system is perfectly secure. If we learn of a breach that affects you we will tell you and, where the law requires, the relevant authority.

11. Changes to this policy

If we change this policy in a way that matters, we will show a notice in the app or email you before the change takes effect. The effective date at the top tells you when it was last updated.

12. Contact

Goodmark Limited, New Zealand
Email: support@goodmarklabs.com