Privacy policy
StageBeat works without an account, and then everything you make stays on your device. If you create an account, we store your e-mail address and only the backups and band setlists you choose to upload. StageBeat has no ads, no analytics or tracking, and no push notifications. We do not sell or share your data.
Who we are
StageBeat is made by Pixel Potion Creative LLC, the controller of the personal data described here. Contact us about privacy, your data or this policy at team@pxpotion.com.
Data that stays on your device
Your songs, setlists, breaks, imported click sounds and app settings are stored only on your device. We never receive them unless you back them up to the cloud or publish a setlist to a band (see below). When you export a backup file or share a setlist, the app hands the file to your device's share sheet, and where it goes from there is your choice. If you sign in, the app also keeps your sign-in session on the device until you sign out.
The app does not ask for access to your contacts, location, camera or microphone. Click sounds are imported only from files you pick yourself.
Data we store when you use an account
An account is optional and only needed for cloud backups and bands. Its data is stored with our hosting provider Supabase, in its United States East (us-east-1) region.
- Account: your e-mail address, which is how you sign in, and the account's technical records kept by Supabase Auth, such as a user ID and when the account was created and last signed in. We also keep a profile record with your user ID and its creation date. Why: to let you sign in and to keep your backups and bands tied to you.
- Sign-in codes: to sign in, we e-mail you a 6-digit one-time code that expires after 10 minutes. These e-mails are sent through our e-mail provider Resend from stagebeat@pxpotion.com. Resend processes your e-mail address and the message to deliver it. Why: to verify that you own the address.
- Cloud backups: only when you tap to back up, the app uploads a backup of your whole library (songs, setlists and imported click sounds) together with its date, size, checksum, how many songs and setlists it holds, the device platform (for example "Android" or "iOS") and which earlier backup it follows. Why: so you can restore your library on this or another device.
- Bands: when you create or join a band we store the band's name, its join code, who leads it, and each member's role and join date. When a band leader publishes a setlist, we store the setlist with its songs and click sounds, its name, song count, revision number, publication time and who published it. Band members can see the band, its member list (as user IDs, not e-mail addresses) and its published setlists. Why: to share setlists inside your band.
All of this is kept in private storage protected by access rules: only you can read your backups, and only a band's members can read that band's setlists.
Like any online service, our providers keep technical logs of requests (such as the time and IP address of a request) to run and secure the service.
What we do not do
- No advertising and no advertising identifiers.
- No analytics, tracking, session recording or crash-reporting services.
- No push notifications or push tokens.
- We do not sell, rent or share your personal data, and we do not use it for anything other than running the features described above.
How long we keep it
- Your account, profile and cloud backups are kept until you delete your account. Backups are never removed or overwritten one by one, so an older device cannot erase newer work.
- Band records and published setlists are kept while the band exists. A member's membership record is deleted when they leave the band or its leader removes them. A band ends when its leader dissolves it, leaves it as the last member or deletes their account, and its records and published setlists, files included, are then deleted.
- Setlists that band members downloaded to their own devices stay on those devices; we cannot delete them.
- Data on your device stays there until you delete it or uninstall the app.
Deleting your data
You can delete your account in the app under More > Account > Delete account, or by e-mailing us. This deletes your account, profile, cloud backups, band memberships and the bands you lead, with their published setlists. Your songs on the device are not affected. The full details, including what can remain, are on the account deletion page.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to its processing. Write to team@pxpotion.com from your account's e-mail address and we will answer within 30 days. You may also complain to your local data protection authority.
Children
StageBeat is not directed at children under 13, and we do not knowingly collect personal data from them. The app can be used without an account. If you believe a child under 13 created an account, contact us and we will delete it.
Changes to this policy
If we change this policy, we will publish the new version on this page with a new effective date. If a change materially affects how we use data you already gave us, we will tell you in the app or by e-mail before it applies.