Croonia is a singing practice app for iPhone. This policy says what the app records, what it keeps, what it uploads, and who can see it. The short version: your voice is analysed on your phone, no audio leaves it unless you choose to send one take, and nothing you sing is used to train machine-learning models.
Summary
| What | Where it is kept | Who can see it |
|---|---|---|
| Your voice while you sing | Analysed on your iPhone as you sing. The sound is not uploaded. | Only you |
| Recordings of your recent runs, and the pitch of your voice over time | Your iPhone only | Only you |
| Songs you import, and their backing tracks | Your iPhone only. Never uploaded. | Only you |
| Your range, check-in answers and how your voice felt | Your iPhone only | Only you |
| Drill results and minutes sung each day | Your iPhone. With an account, also our servers, as numbers. | You |
| Challenge scores | Our servers, as numbers | The people in that challenge, group or league |
| A take you choose to send | Our file storage at Cloudflare, for 7 or 30 days | The friend you sent it to, or our reviewer |
| App usage counts | PostHog, in the EU. No audio, no names, no text you type. | Us. You can turn this off in Settings. |
Who we are
Croonia is made by Atomic Reps AB, Arvid Tydéns Allé 28, 171 69 Solna, Sweden ("we", "us"). We are the controller of the personal data described in this policy. Contact us at legal@atomicreps.com.
Your voice and the microphone
The app uses the microphone only while you sing a drill, an exercise or a song, and iOS shows the microphone indicator while it does. The app measures the pitch, timing and loudness of your voice on the iPhone, in real time, to draw your voice on the lane and to score each note.
The sound of your voice is not uploaded. The only exception is a take that you choose to send (see Sending a take).
The app keeps the audio of your 20 most recent scored runs on the iPhone, so that you can play a take back and hear it next to the target notes. When a new run is saved, the oldest one is deleted. The app also keeps the pitch of your voice over time for each run, to draw it again later. These recordings and pitch lines never leave the iPhone unless you send a take yourself, and they are deleted when you delete the app.
Songs you import
You can import an audio file of a song you own. The app separates the voice from the music, finds the melody, and finds the words, all on your iPhone. The words are found with Apple's speech recognition on the device. The original file, the separated voice, the backing track and the melody stay on your iPhone and are never uploaded. Deleting a song in the app deletes all of these files.
What stays on your iPhone
Some data never leaves your iPhone, with or without an account: your recordings and pitch lines, your imported songs, your range, your check-in answers ("How does your voice feel today?"), your answers to "Did that feel tight?", and how your voice felt after a session. We cannot see any of it.
Without an account, everything else the app stores also stays on your iPhone: your drill results, your practice history and your settings. Deleting the app deletes it. If you use iCloud backup, iOS may include this data in your backup, under Apple's terms.
Accounts (optional)
Training works signed out and offline. The app asks you to sign in only the first time you open Play or tap Challenge someone. Sign-in is handled by Clerk, with Apple, Google, or a code sent to your email address. Clerk receives your email address and, when you sign in with Apple or Google, the basic profile details that service shares. If you use Sign in with Apple's "Hide My Email", we receive a relay address instead of your real one.
With an account, our database provider Convex stores:
- Your profile: a display name (generated for you unless you choose one), your Musical terms setting, and your country only if you choose to show it.
- Drill results: for each drill, the counts of notes in tune, steady and on time, whether the set passed, and your target note. Not the audio, not the pitch line, and not the reason a target was held back (that reason stays on your iPhone).
- Minutes sung each day: one number per device per day, so that the daily singing limit can count all your devices.
- Challenges: the challenges you create or join, and for each attempt, your score and a short list of numbers per note (how far the note was from the target, how steady it was, how close to the beat it started). We use these numbers to calculate the score on our server and to check that it comes from real singing. They are not audio.
- Groups, leagues and badges: the groups you create or join, your league and place, and the badges you earn.
- Your devices: a random installation id, the platform, your notification settings and, if you allow notifications, the push token Apple gives the app. We use the token only to tell you about challenges, results and groups.
Playing without an account. If someone sends you a challenge, you can play it as a guest. We then store a guest profile with a generated name and your attempts in that challenge. If you later create an account, the guest profile is merged into it. You can delete guest data in Play's settings.
Sending a take
No audio leaves your iPhone unless you choose to send one take. There are two cases:
- To a friend. In a friend challenge, you can let the other singer hear your take. Only that signed-in friend can play it. We delete it 7 days after the challenge closes.
- For a review. If a challenge score is held for a check, you can send the take so that a person on our team can listen to it. We delete it 30 days after you send it.
The take is stored in Cloudflare R2, our file storage provider. You can delete it sooner by deleting your account or by emailing legal@atomicreps.com.
Challenge and group invite links look like croonia.com/c/ or croonia.com/g/ followed by a code. Anyone with the link sees the display name of the person who sent it and which drill the challenge uses.
Usage counts
The app sends counts of what you use to PostHog, on PostHog's EU servers: for example that a session started, how many minutes it lasted, whether a drill passed, or that a challenge was created. Each event is linked to a random installation id and, after you sign in, to your account id. Events never contain audio, pitch, note-by-note data, your email address, or anything you type, such as names of people or groups.
Share usage counts is on by default. You can turn it off in Settings, and then the app sends no usage events. We keep events for 12 months.
Machine-learning training
We do not use anything you sing or record in Croonia to train machine-learning models, and we do not allow anyone else to. This covers your voice, your takes, takes you send, your pitch, your challenge numbers, imported songs and your practice data.
The app uses machine-learning models that run on your iPhone, for example to separate a voice from the music in a song you import. These models were trained before they were put into the app, and your use of the app does not change them.
This website
This website uses no cookies, no analytics and no tracking scripts. The home page runs one script, served from this website, for its animations and its sing-along. The sing-along uses your microphone only after you press Sing along and your browser asks for permission. The sound is analysed in your browser while you sing; it is not recorded, stored or sent to us or anyone else, and the microphone turns off when the song ends or you press Stop.
This website is hosted by Cloudflare. To deliver the pages and protect the site from attacks, Cloudflare processes technical data about each request, such as your IP address, your browser type and the page you asked for. We do not use this data to identify you.
Service providers
These companies process personal data for us, only to provide the parts of Croonia listed here. Each one works under a data processing agreement with us.
| Provider | What it does | Where |
|---|---|---|
| Cloudflare | Hosts this website, invite links and content downloads; stores takes you send (R2) | Global network |
| Clerk | Sign-in for optional accounts | United States |
| Convex | Database for accounts, drill results and challenges | European Union |
| PostHog | Usage counts, with an off switch in Settings | European Union |
Apple distributes the app through the App Store, handles purchases, and delivers push notifications. Apple's own privacy policy covers those.
Legal bases
Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on these legal bases:
- Contract: to run your account, sync your drill results, run the challenges, groups and leagues you join, and send the notifications you turned on.
- Consent: to store a take you choose to send. You withdraw consent by deleting the take or your account.
- Legitimate interest: to keep the service secure, to check that challenge scores are genuine, and to measure how the app is used through usage counts that contain no audio and no text you type. You can object at any time, and you can turn usage counts off in Settings.
How long we keep data
- Data on your iPhone: until you delete it in the app or delete the app. Take recordings: the newest 20.
- Account data: while your account exists.
- A take sent to a friend: 7 days after the challenge closes.
- A take sent for review: 30 days after you send it.
- Usage events: 12 months.
Deleting your data
On your iPhone: delete a song or a take in the app, or delete the app to remove everything it stored.
Your account: in the app, go to Settings, then Account, then Delete my account. This deletes your sign-in, every server record linked to your account, every take you sent, and your usage events in PostHog, within 30 days. In finished friend challenges, your scores then show as "A singer who left". Deleting the account does not delete the training history on your iPhone; the app offers a separate button for that.
Guest data: in Play's settings, choose Delete guest data.
You can also email legal@atomicreps.com from the address on your account.
Your rights
Where the GDPR or a similar law applies, you have the right to:
- get a copy of the personal data we hold about you. In the app, Download my data gives you your account data as a file;
- have incorrect data corrected;
- have your data deleted;
- receive your data in a machine-readable file;
- object to processing based on legitimate interest, or ask us to restrict it;
- withdraw consent at any time, without affecting what was done before;
- complain to the data protection authority in the country where you live or work.
For anything the app's own buttons do not cover, email legal@atomicreps.com. We check that the request comes from the account owner, and we reply within one month.
Children
Croonia is not meant for children under 13, and you must be at least 13 to create an account. If you believe a child under that age has given us personal data, email us and we will delete it.
Security
Data between the app and our providers is encrypted in transit. Access to account data is limited to the people who need it to run the service. If a data breach puts your rights at risk, we will tell you and the relevant authority as the law requires.
International transfers
Some providers process data outside the European Economic Area, for example Clerk in the United States. For those transfers we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects what we collect or who can see it, we will tell you in the app before it takes effect.
Contact
Atomic Reps AB, Arvid Tydéns Allé 28, 171 69 Solna, Sweden. Email legal@atomicreps.com.