Local scores, practice and teaching data
PDFs, images, score information, annotations, bookmarks, setlists, recordings, practice records and preferences you import or create are primarily processed and saved in app storage on your device for reading, editing, playback and recovery. Teaching workspaces also save teacher and student names or identifiers, lessons and schedules, preparation and classroom notes, assignment requirements, submissions, and text or voice feedback locally. Enter only information needed for teaching and obtain any required permission for other people's content and personal information.
Core local features require no CantaVue account. Teacher and student are workspace modes in the same library, not separate sign-ins or access controls on a shared device. This website cannot read your library. The app does not automatically upload these records; user-started connections, transfers and exports are described below.
Camera, microphone and permissions
The camera is used when you photograph or scan scores, or explicitly enable face gesture page turning. Photos may remain temporarily in app cache; scan drafts and original images may be kept locally for continued editing, with a private PDF created when saved. Face gestures are analyzed on your device without saving or uploading frames, face identifiers, facial landmarks or biometric templates. They are not used to identify a person.
The microphone supports practice recordings, teaching voice feedback and live tuning that you start. Saved recordings stay locally; tuning analyzes transient audio without saving or uploading it. File and photo pickers process content you choose.
Notifications support local practice and lesson reminders you explicitly enable. Reminder text, such as a lesson title and time, is given to the device notification system and may appear on the lock screen. These are not remote notifications to students; turning reminders off requests cancellation of pending local reminders. Nearby page following and remote control use the local network. Manage permissions, notification previews and lock-screen display in system settings. Declining optional permissions does not prevent core local score reading.
Online scores, cloud files and manual sync
Online score search sends search terms and selected work or download requests to IMSLP and related content servers, which receive connection information such as your IP address. Their confirmation pages, cookies and sign-in flows follow their policies. This download flow does not upload your private library.
Opening the site sends a browser request to IMSLP under its own privacy rules. This entry does not upload your library, connect an IMSLP account, collect credentials, or download scores in the background. After downloading, return here and choose Import downloaded PDF. Select the file from Downloads or Files to import into the currently open library. Where supported, you can also use the system Open In action. Importing a PDF does not make its notes editable or playable.
When you connect your WebDAV service, or authorize Dropbox, Google Drive, OneDrive or Box in a configured and available build, the provider processes authorization, selected file or folder identifiers and transfer requests. Downloads fetch chosen content. An upload sends only the original or annotated PDF you confirm after preview; it is not a complete library backup or automatic sync. Your chosen providers' rules also apply to system file and sharing controls. Unconfigured cloud authorizations and an undeployed Box authorization service are not made available by this policy.
For a compatible HTTPS sync service, your address and authorization information are used to check access. When you choose Sync now, the service receives supported original PDFs, score information, source-page reading positions and annotation history. Recordings, teaching records, bookmarks, setlists and other complete-library data are not currently included. This is not automatic sync. Connect only to a trusted service you are authorized to use.
Nearby devices and sharing
When you enable CantaLink page following or remote control, devices exchange current-session authentication, score and page-layout hashes, page positions or page-turn commands. This protocol does not send PDF contents, titles, annotations, recordings or accounts. Use trusted networks and share session links only with trusted participants.
Files you export or share go to the app, location or recipient you choose. Teaching files may include teacher or student names and identifiers, public assignment requirements, score-section positions, schedules, selected recordings, and text or voice feedback. Check recipients and contents before exporting. Teaching packages exclude original PDFs, private preparation and other students' records; the recipient needs the same original PDF independently. Anyone holding an exported file can read its content.
Saved locally, file exported, server-confirmed upload and received by another device are different states. Exporting does not prove receipt. Local deletion or revoking authorization does not automatically recall delivered copies.
Website traffic, cookies and statistics
OpenAI Sites hosts this website. To deliver pages, maintain security and produce basic traffic statistics, the hosting service processes request and technical information such as IP addresses, browser information, request times and visited paths. Sites provides visitor and page-view counts. We have not added advertising, cross-site tracking or third-party behavioral analytics SDKs to this website or the current app.
This website has no account registration, subscription or file-upload forms. Fonts and images are served with the site. Hosting may use necessary cookies or similar technologies. Third-party sites manage their own cookies; you can manage cookies through your browser. See the provider policies below for their data practices.
Email feedback and TestFlight
When you email us, we receive your email address, message and any screenshots, files or device details you choose to attach, to respond, investigate issues and improve the product. Share only what is needed and remove private scores, student identities and other sensitive content first. We do not automatically attach your library.
When you install, use or submit feedback through TestFlight, Apple may provide developers with testing usage, crash and submitted feedback information. The details depend on the invitation method, your actions and Apple’s policy. This is separate from the app’s local data processing.
Retention, deletion and backups
Local records remain until deleted or cleaned up. Recently Deleted does not immediately erase scores. Annotation history, pinned teaching submissions, snapshots, scan drafts and backups may retain older information and need separate management. Uninstalling usually removes local app files, but does not automatically delete system backups, cloud files, exports or authorization data in system secure storage.
On native platforms that support remembering an account, cloud passwords or access and refresh tokens are kept in system secure storage when you explicitly choose to remember them. The local account index and transfer records may separately keep provider type, account display name, file identifiers and status. Web cloud credentials last only for the current page session and require reconnection after reload. Compatible HTTPS sync tokens and sessions stay in the current connection's memory and are no longer used after leaving, cancelling or losing authorization.
Forget account clears local credentials for that connection; it does not revoke all provider access or delete remote files. Use provider account settings to revoke access or change a password when needed. A configured Box authorization service processes authorization codes, stores encrypted refresh tokens and handles revocation; failed revocation remains pending and is not reported as completed.
Email and necessary issue records are retained only as long as needed to address and follow up on an issue or meet applicable obligations. Request deletion of information we hold at our feedback email. We cannot remotely delete copies held only on your device or selected services. Apple, hosting, email and storage providers manage their records under their policies.
Providers, purposes and security
Hosting and email providers process necessary information to deliver the website and support, and may process it outside your country or region. We do not sell personal information or use private scores or recordings for advertising or AI training. Where disclosure is legally required, we limit it to what is necessary.
We take reasonable measures to protect information we control and limit unrelated access, but cannot guarantee absolute storage or transmission security. Protect your device, email and backups, and do not publish nearby session links.
Your choices and requests
You can stop optional online features, revoke device permissions, and export or delete local content. Contact supingjing@me.com to ask whether we hold feedback information about you or to request access, correction, deletion or restriction under applicable law. We may reasonably verify the source of a request to avoid affecting someone else’s data. We handle requests under applicable law; this policy does not limit statutory complaint or other rights.
Minors, changes and contact
There are no online CantaVue child accounts or school account-management services. Local teaching workspaces can contain student information; they do not provide parental controls, isolated student sign-ins or a school data-management guarantee. Teachers and guardians should agree on necessary information and sharing for minors. Do not send identifiable student information to support. Minors should use optional online and feedback features with a guardian's guidance. Contact us about information provided inappropriately.
We update this policy and its date when features, providers or data practices change, and give notice or seek consent where required. Privacy and support contact: supingjing@me.com.