Privacy Policy – Practice Cat Android App

Preamble

Practice Cat is designed to help musicians organise and optimise their practice sessions.

We aim to minimise personal data collection, use personal data only where needed to provide the App or where you choose to help us improve it, and be transparent about the data practices we use.

This Privacy Policy explains how Practice Cat Ltd (“we”, “us”, or “our”) collects, uses, and protects information when you use the Practice Cat mobile application (“the App”).

It explains our data practices under applicable data protection laws, including:

• the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
• where applicable, the EU General Data Protection Regulation (EU GDPR)

If you have any questions about this Privacy Policy or our data practices, please contact us using the information provided in the Contact section at the end of this document.

1. Who We Are

Practice Cat is developed and published by:

For the purposes of the EU GDPR and UK GDPR, Practice Cat Ltd is the data controller responsible for the personal data described in this Privacy Policy.

We do not have a Data Protection Officer (DPO). As a small company processing limited personal data, we are not required to appoint one under Article 37 of the GDPR. For any data protection enquiries, please contact us at privacy@practicecat.com.

Last updated: June 13, 2026

2. What Information the App Processes

The App processes four categories of information:

1. Data related to your practice sessions, repertoire, and imported scores ("practice data").
2. Technical information that helps us identify bugs and improve the App ("diagnostic data").
3. Information which helps us understand usage patterns ("usage metrics").
4. Data related to your subscription ("subscription data").

The sections below describe each category in detail, including what is collected, how it is used, and what device permissions are involved.

2.1 Practice Data

Practice data is the core of what the App does — it is the information the App needs to help you organise and optimise your practice sessions. This currently includes:

• image data representing the musical pieces or scores you import or scan
• measure (bar) detection data and section information
• practice history and progress
• session settings and preferences

In the current version of the App, practice data is stored only on your device and is not transmitted to our servers or any third party during normal operation.

If a future version of the App introduces optional cloud synchronisation, this will be strictly opt-in and handled in accordance with the principles set out in Section 4.

We will never use your practice data for advertising or tracking, and we will never sell it to third parties.

2.2 Optional Crash Reports

Practice Cat uses Firebase Crashlytics, provided by Google LLC, to collect crash reports. This helps us identify bugs, improve stability, and fix problems quickly.

Crash reporting is disabled by default. You can choose whether to enable it during onboarding, and you can turn it on or off at any time in the App (“About / Privacy Settings”).

If you enable crash reporting, crash reports may include:

• device type and model
• operating system version
• app version
• relevant technical information about the state of the App at the time of the crash
• technical identifiers, such as a Crashlytics UUID or Firebase identifier

The legal basis for this processing is your consent (Article 6(1)(a) UK/EU GDPR). You can withdraw consent at any time through the App settings. If you withdraw consent, crash reporting will stop going forward.

2.3 Optional Usage Metrics

Practice Cat uses Firebase Analytics, provided by Google LLC, to collect aggregated usage metrics. This helps us understand how people use the App and informs future development decisions.

Analytics is disabled by default. You can choose whether to enable it during onboarding, and you can turn it on or off at any time in the App (“About / Privacy Settings”).

If you enable analytics, the data collected may include:

• app interactions, such as which features are used
• app lifecycle information, such as sessions and screen views
• app version, device type, operating system version, and similar technical information
• pseudonymous identifiers, such as an app-instance ID
• subscription-related analytics events, such as product ID or subscription status
• coarse location information derived by Firebase from masked IP address, such as country, region, or city

We do not use analytics to collect imported scores, piece names, practice history, or other practice content.

We do not request access to your device’s location permission and we do not collect GPS or precise location data.

The legal basis for this processing is your consent (Article 6(1)(a) UK/EU GDPR). You can withdraw consent at any time through the App settings. If you withdraw consent, analytics collection will stop going forward.

2.4 Subscription Data

When you purchase a subscription, subscription-related information is processed by Google Play and RevenueCat so that we can verify your subscription status and unlock Pro features.

This may include:

• a pseudonymous app user ID or app installation identifier
• Google Play purchase tokens or transaction identifiers
• subscription tier, purchase date, renewal date, expiry date, and current status
• entitlement status, such as whether Pro features are active
• limited technical information needed to provide and troubleshoot subscription access

Google Play handles the payment process. Practice Cat does not collect or store your payment card details.

The legal basis for this processing is contractual necessity (Article 6(1)(b) UK/EU GDPR), because we need this information to provide the Pro features you have purchased.

RevenueCat processes subscription information to provide purchase validation and entitlement management services for us. Google Play processes purchase and payment information under Google’s own terms and privacy policy.

2.5 Device Permissions

Camera: required to scan sheet music. The App will ask for camera permission when you first use this feature. You can grant, deny, or revoke this permission at any time through your device settings. All other features work without camera access.

Microphone: not currently used. A future version of the App may offer audio-based features (such as tuning or recording practice sessions). If implemented, microphone access will be strictly opt-in, and this Privacy Policy will be updated before that feature is released. See Section 4 for our commitments around new permissions.

3. Information We Do Not Collect

Practice Cat does not:

• collect your name or email address
• collect contacts or address book information
• request access to your device’s location permission
• collect GPS or precise location data
• track your behaviour across other apps or websites
• use advertising identifiers for advertising or cross-app tracking
• display advertisements
• sell personal data to third parties

If you consent to usage metrics, then Google LLC, through Firebase, may derive coarse location information, such as country, region, or city, from your masked IP address for analytics reporting. This is described in Section 2.3.

4. Future Features and Our Commitments

Practice Cat is under active development. Future versions may introduce features — such as cloud backup of your repertoire, or audio recording during practice — that involve processing additional data, using cloud infrastructure, or requesting new device permissions.

Whatever we build, we are committed to the following principles:

For new data processing or cloud features, we will:

• update this Privacy Policy before the feature is released
• obtain your explicit, informed consent within the App before enabling the feature
• only transmit data where this is necessary to provide the feature, using appropriate security measures
• limit processing to what is necessary and proportionate to provide the feature

For new device permissions, we will:

• update this Privacy Policy to explain the permission and its purpose
• obtain your explicit consent within the App before requesting the permission
• only request permissions that are genuinely necessary
• ensure the App remains fully usable without granting the permission, where at all possible

We will never silently expand our data practices. You will always know what we’re doing and why.

5. Data Storage and Security

Crash reports are transmitted to and processed by Google LLC (Firebase) on servers that may be located outside the UK or EEA — see Section 8 for details.

Subscription data is processed by RevenueCat and Google Play on their respective servers.

All other data generated by the App is currently stored locally on your device.

We and our service providers take reasonable technical and organisational measures to protect the information the App processes. That said, no method of electronic storage is completely immune to risk, and we cannot guarantee absolute security.

6. Service Providers

We use a small number of third-party service providers to operate the App:

These providers process data under their own privacy terms and, where applicable, data processing terms.

You can read more about their privacy practices here:

• Firebase Privacy and Security: https://firebase.google.com/support/privacy
• Firebase Android data disclosure information: https://firebase.google.com/docs/android/play-data-disclosure
• Google Privacy Policy: https://policies.google.com/privacy
• RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

7. Legal Basis for Processing (GDPR)

Here is a clear summary of the legal bases we rely on:

Legitimate Interests: We rely on legitimate interests to provide the App’s core practice features. This is limited to processing practice data locally on your device during normal use.

Consent: Where we rely on consent — for crash reporting and usage metrics — you can withdraw that consent at any time. See Section 10.

Our service providers process data under their applicable service terms, data processing terms, and privacy terms. Where they act as our processors, they process personal data on our instructions and subject to appropriate contractual safeguards. Some Google services may also process data as described in Google’s own terms and privacy policy.

8. International Data Transfers

Google (Firebase Crashlytics and Firebase Analytics) and RevenueCat may process data on servers located outside the United Kingdom or the European Economic Area (EEA).

We ensure that any such transfers are protected by appropriate safeguards:

• UK GDPR transfers: we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to EU Standard Contractual Clauses, as approved by the ICO.
• EU GDPR transfers: we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission (Decision 2021/914).

Both Google and RevenueCat have committed to these transfer mechanisms. You can review the details in their respective privacy policies linked in Section 6.

9. Data Retention

• Practice data is stored locally on your device, you are in full control of it, and it is retained on your device until you delete it within the App or uninstall the App.
• Crash reports and usage metrics are retained by Google LLC (Firebase) in accordance with their retention policies.
• Subscription records are retained by RevenueCat and Google Play as required for billing, accounting, and legal obligations.

In the current version of the App, we do not retain practice data on any server. If you uninstall the App, your practice data is permanently deleted from your device, as there is currently no backup or export mechanism.

10. Your Data Protection Rights

Under the GDPR and UK GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your personal data
• Restriction — request that we limit how we process your data
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a portable format, where applicable
• Withdraw consent — withdraw consent at any time where processing is based on consent

Because practice data is currently stored entirely on your device, you can exercise most of these rights directly — by editing or deleting data within the App, or by uninstalling the App entirely.

10.1 How to Delete Your Data

In the current version of the App, most data created through normal use of Practice Cat is stored only on your device.

This means:

• if you want to delete your practice data, you should do so within the App or by uninstalling the App
• we do not receive or store your imported scores, scanned sheet music, practice history, or session settings on our own servers
• visiting this page is not required to delete local practice data from your device

10.2 How to Request Deletion of Other Data

You may contact us at privacy@practicecat.com to request deletion of limited personal data that we or our service providers process on our behalf, such as certain subscription-related records.

To help us locate the relevant records, please include any information that may assist us in identifying your data, such as:

• your RevenueCat App User ID, if available (shown in the App “About” page if you have a subscription)
• details of your subscription purchase, such as the product or approximate purchase date

We will take reasonable steps to delete personal data that we control or that we can ask our processors to delete on our behalf, subject to legal, accounting, fraud prevention, security, or contractual retention requirements.

Please note:

• practice data is stored only on your device, so you must delete it within the App or by uninstalling the App; we cannot delete this data remotely
• analytics and crash report data may in some cases not be identifiable by us or deletable on a per-user basis
• subscription and transaction records may need to be retained where required by Google Play, RevenueCat, or applicable law

We will respond to deletion requests in accordance with applicable data protection law.

10.3 Withdrawing Consent for Crash Reporting and Usage Metrics Collection

You can withdraw consent for crash reporting or usage metrics collection at any time in the app (“About” page, then “Privacy Settings”).

If you withdraw consent, the App will stop sending that data going forward. Data collected before withdrawal may continue to be retained by our service providers in accordance with their retention policies. In some cases, we may not be able to identify or delete specific diagnostic records if they cannot be linked to you.

10.4 Exercising Your Other Rights

To exercise any of your other rights, or if you have questions about your data, please contact us at privacy@practicecat.com.

10.5 Right to Complain

You also have the right to lodge a complaint with a data protection supervisory authority. In the UK, this is the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113
https://ico.org.uk

If you are based in the EU, you may also contact your national data protection authority. A list of EU supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

11. Children’s Privacy

Practice Cat is not directed at children. In the UK, the minimum age for digital consent is 13 (under the UK Data Protection Act 2018). In EU member states, this age varies between 13 and 16 depending on national law.

We do not knowingly collect personal data from children below the applicable age of digital consent in their country. If you believe a child has provided personal data through the App, please contact us at privacy@practicecat.com so we can investigate and take appropriate action.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons.

When we make material changes, we will let you know — for example, via an in-app notification or a message on app start-up — before the changes take effect. We will also update the Last updated date at the top of this policy.

For changes that require your consent (for example, processing new categories of personal data), we will obtain that consent explicitly within the App before the new processing begins.

Our commitments around new features and data practices are described in Section 4.

13. Contact

Full contact details for the company responsible for the App are provided in Section 1. On any privacy matter related to the App, please contact us by emailing privacy@practicecat.com — we will do our best to respond as quickly as possible.