Last updated: 20 July 2026
This Policy explains what personal data Trouble Clef ("we", "us") collects, why, and what rights you have over it. We are the data controller for the personal data described below.
| Category | Examples | Why |
|---|---|---|
| Account data | Email address, a bcrypt hash of your password (never the password itself) | To create and secure your account, and let you log in |
| Google sign-in data | Email and Google account identifier — only if you choose "Log in with Google" | To let you sign in without a separate password |
| Your content | Uploaded PDF scores, generated blank manuscripts, chord charts, lead sheets, setlists | To provide the actual service — this is the library you build |
| Billing status | Whether you have an active Pro subscription, and your usage count against the free tier's monthly limits | To enforce free-tier limits and unlock Pro features |
| Payment data | Handled entirely by Stripe — we never receive or store your card details | To process Pro subscription payments |
| Session cookie | A single signed token identifying your account, expiring after 30 days | To keep you signed in between visits |
We process your data because it's necessary to perform our contract with you (running the account and service you've signed up for), or, for optional features like Google sign-in, based on your explicit choice to use them.
We use a small number of infrastructure and payment providers to run the Service — see our Subprocessors pagefor the full, current list. We don't sell your data, and we don't share it with anyone for advertising purposes.
Some of our providers process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards (such as Standard Contractual Clauses or an adequacy decision) — see the Subprocessors page for details on each provider.
We keep your account and content for as long as your account exists. You can delete your account and everything in it — permanently, immediately, no waiting period — yourself at any time from Settings. We don't keep a backup copy after deletion.
Depending on where you live, you may have the right to:
To exercise any of these beyond what's already self-service in the app, contact us at privacy@trouble-clef.com. If you're in the UK or EEA, you also have the right to complain to your local data protection authority (in the UK, the ICO).
We use exactly one cookie: a session token that keeps you signed in. We don't use tracking, advertising, or analytics cookies.
Trouble Clef isn't directed at children, and we don't knowingly collect data from anyone under 16.
We may update this Policy from time to time. Material changes will be flagged in the app or by email before they take effect.
Questions about this Policy or your data: privacy@trouble-clef.com.