Privacy Policy

Who we are

ChoirZone is a practice studio for choir singers, operated by Trädtopp BV (“we”, “us”). For any privacy question or request, contact us at support@choirzone.com. We are the data controller for the personal data described here.

Data we collect

• Account details — your email address, display name, chosen password (stored only as a secure hash), and preferred voice part.
• Sign-in with Apple or Google — if you use them, we receive a basic identifier and the email/name you agree to share, to create or log in to your account.
• Choir data — the choirs you create or join, your role, and your membership.
• Content you create — score annotations and notes, freehand markings, practice and workout activity, and voice recordings you make. Recordings are stored on your device and are only uploaded when you choose to save or share them.
• Scores you upload — PDF or MusicXML files you add to a choir.
• Payment data — if a choir subscribes to a paid plan, payment is handled by Stripe. We never see or store your full card details.
• Push notification token — if you enable notifications, a device token from Apple or Google that lets us deliver alerts about new activity in your choir. It is tied to your account and removed when you sign out or turn notifications off.
• Applications to choirs — if you answer a “Singers wanted” ad on choirzone.com, you do not need an account. We collect what you send: your name and email address, and optionally your phone number and where you live; your answers about your singing experience; any link or message you add; and, if you include one, a recording of your voice. We also keep the IP address the application was sent from, to prevent abuse.
• Technical data — basic device and app information and server logs needed to operate and secure the service.

How we use it

• To provide the service: authenticate you, sync your scores and notes, and let you rehearse with your choir.
• To send essential transactional email (e.g. your verification code).
• To send push notifications about new activity in your choir — events, rehearsals, announcements, polls and scores — if you allow them. You can turn these off per category in the app or in your device settings.
• To process choir subscription payments.
• To keep the service secure and to fix problems.

Under the GDPR our legal bases are: performance of our contract with you (providing the app), your consent (e.g. for optional features), and our legitimate interest in operating and securing the service.

Who we share it with

We do not sell your data. An application to a choir is shared only with that choir’s administrators and conductors, and only once you have confirmed it from the email we send you. Otherwise we use a small number of trusted processors that act on our instructions:

• Render — application hosting.
• Cloudflare R2 — storage for uploaded scores and saved recordings.
• Resend — sending transactional email.
• Google Firebase Cloud Messaging — delivering push notifications to your device.
• Stripe — processing subscription payments.
• Apple & Google — only if you choose to sign in with them.

Some of these providers process data outside the EU (e.g. in the United States) under appropriate safeguards such as the applicable standard contractual clauses.

How long we keep it

We keep your data for as long as your account is active. When you delete your account, we delete your personal data and the content tied to it. Choirs you created that have no other members are removed with your account. We may retain limited records where the law requires (for example, payment records for accounting).

Applications to choirs are kept for a shorter, fixed time. An application that is never confirmed from its email is deleted after two days. Every other application — with its recording — is deleted six months after the choir closes the ad, or sooner if the choir deletes the ad.

Your rights

You can access, correct, export, or delete your personal data, and object to or restrict certain processing. The easiest ways to exercise these:

• Delete your account and data directly in the app: Profile → Delete account.
• Withdraw an application to a choir — email us from the address you applied with and we will delete it.
• For any other request, email support@choirzone.com.

You also have the right to lodge a complaint with your local data protection authority.

Security

Traffic is encrypted in transit (HTTPS), passwords are stored only as salted hashes, and access to production systems is restricted. No system is perfectly secure, but we work to protect your data.

Children

ChoirZone is intended for general audiences and is not directed at young children. If a choir includes minors, the account should be set up and managed by a parent, guardian, or the responsible choir administrator.

Changes

We may update this policy from time to time. We will change the “last updated” date above and, for material changes, notify you in the app or by email.

Contact

Questions or requests: support@choirzone.com.