Privacy policy

Audio stays on your Mac

Transposify processes Spotify audio on your Mac to change its key, separate instruments, and estimate keys and chords. These features do not upload captured audio. macOS controls permission to capture audio and communicate with Spotify.

Settings, downloaded models, cached artwork, and local song analysis are stored on your Mac. Transposify does not require its own account and does not receive your Spotify password.

Your sharing choices

In Transposify 1.9.6 and later, usage analytics and shared chord sheets are separate, optional choices. Both are off until you explicitly enable them in Privacy & Data. Existing default-on preferences from older versions do not count as consent. Changing keys, separating instruments, and local chord analysis work when you decline both.

Older versions may enable these features by default. In those versions, turn off Share Anonymous Usage Data in the menu-bar menu to disable analytics, and contact us for help disabling shared sheets. Updating to 1.9.6 or later asks for fresh choices before these sharing features run.

Shared chord sheets

When you enable shared chord sheets in version 1.9.6 or later, the app looks up sheets using the Spotify track identifier, title, artist, duration, and analysis version. It can also send generated chord timings and your chord-sheet edits with that track information so other users can reuse them.

The service stores song-level sheets, their analysis version, coverage, and receipt time. It does not attach a Transposify account, device identifier, or IP address to a stored sheet. Shared sheets have no automatic expiration and may be replaced by a more complete or edited sheet. Other users can retrieve them by song.

Anonymous usage analytics

If you enable usage analytics in version 1.9.6 or later, they are sent to TelemetryDeck to help improve Transposify. The analytics SDK is not initialized and events are not collected or queued before consent. Events describe setup completion, feature use, successful transposition duration, and broad processing-failure categories. They include app and operating-system versions and the SDK’s device/platform metadata. A random local installation identifier is hashed before transmission to measure repeat usage; we do not send your name or email.

Analytics events do not include audio, song titles, artists, Spotify track identifiers, file paths, chord contents, or detailed error messages. TelemetryDeck receives network requests under its privacy policy. Our current free plan retains analytics for three months.

In version 1.9.6 and later, open Privacy & Data from the menu-bar menu to change either sharing choice. Turning shared sheets off cancels pending sheet requests and prevents future lookups and uploads. Turning analytics off stops new collection, cancels pending uploads, and discards pending local analytics. It does not delete events already received by TelemetryDeck.

Network information and service providers

Our chord-sheet service runs on Cloudflare. Cloudflare receives network information, including your IP address, to deliver requests and prevent abuse. The service uses IP-based rate limiting for uploads. We do not add IP addresses to chord-sheet records, and application request logging is disabled in the service configuration. Infrastructure providers may process and retain operational and security data under their own policies.

Instrument models may be downloaded from GitHub. Album artwork is downloaded from URLs provided by Spotify. These providers receive ordinary network requests. The direct-download edition checks GitHub for application updates; the Mac App Store edition uses Apple’s update mechanism.

See the privacy information from Cloudflare, GitHub, Spotify, and Apple.

Advertising and tracking

The Mac app has no advertising or cross-app tracking integration. We do not sell the information collected by the chord-sheet service or use it for advertising.

Support, retention, and your choices

If you contact us, we receive the information you choose to include and retain it as needed to handle your request. Please do not include passwords or unnecessary personal information. GitHub issues are public; use email for private questions.

You can revoke audio-capture and Spotify automation permissions in macOS System Settings. Use Privacy & Data in version 1.9.6 and later to disable shared sheets. Contact us to request access to or deletion of information you have supplied. Because chord sheets are stored by song rather than user, please identify the relevant song or support request so we can locate it. We may need to retain information where required by law.

Contact and changes

For privacy questions or requests, email hi@evan.hu. We will update this page and its effective date when the policy changes.