Privacy policy

Last updated: 8 October 2026

This page says what The Music Ledger knows about you, why, who helps us run it, and how you can see it, change it or delete it. It is written to be read, not to hide anything.

Who we are

The Music Ledger is a music practice app run by Andrew Storey, an individual in the United Kingdom. He is the "data controller" - the person responsible for your information.

For anything about your information, email themusicledgerapp@gmail.com.

What we hold about you

Your account: Your first name, surname and email address. If you sign in with Google, Google gives us those three things and nothing else. You can also choose a display name and a picture (your initials or one of our drawings).
How you sign in: If you use an email and password, the password is stored scrambled - we can't read it. If you turn on two-step sign-in, we hold what is needed to check your codes.
What you do in the app: Your practice sessions, the pieces you make, the recordings and documents you add (to a piece, or to the Recordings tool before they are on any piece), where you have marked a recording's start, end and bars, your practice lists and plans, your quiz, drill, scales and range results, the instruments you play, your settings and the bands you join.
The right to upload: The date you confirmed that you have the right to upload music, the first time you uploaded any.
Running a band: The date you confirmed you are 18 or over, the first time you set up sharing or invited someone.
Reports: If you report something, what you reported and what you wrote. This is kept after your account is deleted, without your name, as our record of what we did.
A teacher's name, if you give us one: You can type in a teacher's name, to log your lessons against. It is kept with your own records and only you see it. The teacher is not told and does not get an account.
When you last used the app: The date (not the time) you last used the app while signed in, so we can see how many members are using it.
Feedback you send: Your message, with the screen you were on, the kind of device and the app version.
When you first sign up: The kind of browser and device you used is sent to us once, in an email saying someone has joined.
The microphone: The tuner and the play-along tools listen through your microphone. The sound is worked on inside your device. It is never sent to us and never stored.
We do not ask for your address, date of birth, phone number or payment details.

Why we hold it

To run the app for you: to sign you in, keep your practice history and pieces, and show them on your devices.
To let you share with a band or a teacher, when you choose to.
To email you when you ask for something - an invite, a password reset, a new email address - and to warn you before an unused account is deleted.
To see which parts of the app are used, so we can improve it. This is counted without knowing who you are (using PostHog).
To know how many members are using the app, and to delete accounts that are no longer used: the date you last used it.
To know when someone new has joined: the email sent to us when you first sign up.
To understand what you tell us and put it right: the screen, device and app version that come with your feedback.
To be able to show you were told the rules about uploading and about running a band: the dates you confirmed them.
To act on a report and show what we did about it: what you reported and what you wrote.

The law calls the first three "performing our agreement with you". The last six are "legitimate interests": things we need in order to run and look after the app, that you would expect of it, and that do you no harm. We do not sell your information, show adverts, or build a profile of you.

Who helps us run it

These companies store or carry information for us. They may only use it to provide their service to us:

Neon (part of Databricks, USA): holds the database: your account and everything you do in the app.
Vercel (USA): runs the app and stores the recordings and documents you add.
Google (USA): if you choose "sign in with Google", Google confirms who you are and tells us your name and email address. Our emails - invites, password resets and notices about your account - are also sent from a Gmail account, which keeps a copy of each one until we delete it.
PostHog (data kept in the EU): counts which buttons are tapped. It is anonymous: it sets no cookie, stores nothing on your device, and is never told who is signed in.
Have I Been Pwned (Australia): checks a new password against known data breaches. Only the first five characters of a scrambled form of the password are sent - never the password, and nothing about you.
jsDelivr (UK): delivers one small piece of the app's code to your browser. Like any website, it sees your device's internet address when it does.
YouTube (Google): only when you play a YouTube video that has been attached to a piece. It plays in YouTube's privacy-enhanced player. What YouTube does with that is covered by Google's privacy policy.

Some of these companies are in the United States. Where your information goes outside the UK, it is protected by the safeguards UK law allows, such as the UK-US data bridge and standard contract terms.

Everything else the app shows - its fonts and icons included - is served from our own site.

Cookies and your device

The Music Ledger sets no cookies. To keep you signed in and remember your choices, it stores a sign-in token and a few settings in your browser's own storage on your device. Signing out removes the sign-in token.

So that the app works where there is no internet, it also keeps a copy of your own practice information on your device, along with anything you log while offline until it has been sent to us. Signing out, or deleting your account, removes that copy from the device.

Young players

If you are a young player, this part is for you.

What we know about you: your name, your email address, what you play, what you practise in the app, and any recordings you add yourself. That is all.
Who can see it: you. If you join a band, the people in that band can see your name - not your practice. The person who runs the app can see your account when they need to look after it. Nobody else can.
Recordings: your band may record a rehearsal so that everyone can practise with it. Only the people in your band can hear it. If you are in a recording and don't want to be, tell a parent, a guardian, your teacher or your band leader - or email us - and we will remove it.
What we never do: show you adverts, sell what we know, or tell anyone how your practice is going.
How to delete it: go to Account, then My details, then Delete my account. It goes straight away.
Who to ask: a parent, a guardian or your teacher - or email us at themusicledgerapp@gmail.com.

The app can be used by young players, for example through a teacher. We hold no more about them than about anyone else, show no adverts, build no profiles, and count usage anonymously. If you are under 13, please use the app with a parent, guardian or teacher who can help you.

How long we keep it

We keep your information for as long as you have an account and use it.

We don't keep accounts that are no longer used. If you have not used the app for 22 months we will email you to say so, and again at 23 months. If the account is still unused at 24 months it is deleted, exactly as if you had deleted it yourself, and we email you to say it has gone. Signing in at any time before then keeps it.

You can delete your account yourself, at any time via: Account, My details, Delete my account. It happens straight away.

Deleted: your name, email address and picture, the date you last used the app, your sign-in details, your own pieces with their recordings and documents, the recordings you uploaded to the Recordings tool, your practice lists and plans, your settings, your feedback, and your place in any band.
Kept, with nothing to say they were yours: the practice sessions and quiz and drill results you logged, as numbers in the app's statistics. Pieces you added to a band stay with the band, and so does a recording you put on a band's piece. A report you made stays, without your name.
For 31 days: we keep a scrambled marker - not your email address - so that devices you were signed in on stay signed out.
If you invite someone, we send them an email and keep the address you typed until they accept. An invite that isn't taken up is deleted after 30 days. Feedback is removed 12 months after it has been dealt with.
Copies of emails we sent stay in our Gmail account until we delete them, and deleted information can remain in our database provider's short-term backups for up to a day.

Your rights

Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Most of it you can see and change in the app - your name and the email address you sign in with (Account, My details). You can download a copy of all of it yourself: Account, My details, Download my information. For anything else, email themusicledgerapp@gmail.com and we will answer within one month.

A recording may have other people in it. If you are in a recording in the app and want it removed, email themusicledgerapp@gmail.com.

If you are unhappy with how we have handled your information, please tell us first: email themusicledgerapp@gmail.com with "Complaint" in the subject. We will let you know we have it within 30 days, look into it, and tell you what we found and what we will do about it.

If you are still unhappy after that, you can complain to the Information Commissioner's Office (ico.org.uk/make-a-complaint).

Changes to this policy

When this policy changes we will change the date at the top. If the change matters to how your information is used, we will also tell you in the app.