ScoreTone Pro 隱私權政策

ScoreTone Pro（以下稱「本 App」）是一款樂譜閱讀器、調音器、節拍器、音叉產生器、AI 聲學教練與聽覺訓練工具。我們非常重視您的隱私，本政策說明本 App 如何處理您的資料。

1. 麥克風、相機與相簿存取

本 App 需要存取您裝置的麥克風，用於：

• 即時偵測樂器或歌聲音高（調音器功能）
• 「AI 聲學教練」錄音評測與回放
• 「AI 即時字幕」把老師或指揮說的話即時轉成字幕（您按下「開始上課紀錄」才會使用，見 1-1）

麥克風只在需要時才開啟（調音器頁面、樂譜閱讀器的小調音器、錄音、訓練與AI 即時字幕），離開這些功能後約幾秒內就會關閉，App 退到背景時也會立刻關閉（錄音、訓練或AI 即時字幕進行中除外）；本 App 不會在背景持續聆聽。第一次用到時系統才會詢問授權。

所有音準分析都在您的裝置上即時完成，錄下的音訊只保存在裝置本機記憶體中用於回放，本 App 本身不會將您的錄音上傳到任何伺服器，也沒有任何後端會儲存或存取您的錄音內容。關閉 App 或結束錄音回放後，錄音資料即從記憶體中釋出。（若您主動使用第 3 節的「分享」功能傳送錄音檔，則由您自行決定傳給誰。）

相機與相簿：只有在您於「樂譜」匯入圖片、並選擇「拍照」或從相簿挑選照片時才會使用。匯入的照片與 PDF 只儲存在您裝置的本機資料庫（IndexedDB），不會上傳，也不會被我們存取。

AI 搬筆記（選用）：在樂譜閱讀器的「快捷工具 › AI 搬筆記」，您可以選擇別的 App 的截圖或 PDF；App 在您的裝置上比對頁面、找出您寫的筆記，搬到這份樂譜上。截圖與 PDF 只在裝置上處理，不會上傳，也不會傳給 Gemini 或任何第三方。

眨眼翻譜（選用，預設關閉）：在樂譜閱讀器的「快捷工具 › 眨眼翻譜」開啟後（打開這個面板試試看時也會暫時開著），看譜期間前鏡頭會開著；App 只用 Apple 內建、在裝置上執行的臉部特徵點偵測計算「眼睛張開的比例」，判斷您是否刻意眨眼或閉眼來翻頁。影像只在裝置上即時處理，不會顯示、不會儲存、不會上傳，也不會用來辨識身分或建立任何個人檔案；離開樂譜、App 退到背景或關閉此選項時相機立刻關閉。您可以隨時在 iOS 設定中收回相機權限。

傳接筆記（選用，預設關閉）：在樂譜閱讀器的「快捷工具 › 傳接筆記」由首席（或指揮）開始分享後，首席在那份樂譜上寫的筆跡（弓法、指法、記號等標記資料），以及首席開放書寫的人所寫的筆跡，會直接傳到輸入同一組 4 位數代碼的鄰近 iPad。iPad 之間用 Wi-Fi（同一個區域網路，或 Apple 的點對點 Wi-Fi）直接連線（使用 iOS 的「區域網路」權限），不經過網際網路、不經過我們或任何第三方的伺服器；傳送的只有筆跡資料、首席目前所在的頁碼、樂譜頁數與名稱、檔案指紋（用來確認大家打開的是同一份檔案，不含檔案內容），以及您自己設定的顯示名字與身分（首席、第幾位或指揮，讓同一個房間的人知道是誰），不會傳送樂譜檔案、錄音或其他個人資料。收到的筆跡只存在接收者的裝置上；結束傳接或關閉 App 時連線立刻中斷。這段鄰近裝置之間的連線沒有另外加密，4 位數代碼只用來讓大家加入同一組、不是密碼，請在您信任的排練場合使用，也不要在筆跡裡寫個人隱私資料。您可以隨時在 iOS 設定 › 隱私權 › 區域網路收回權限。

1-1. AI 即時字幕：語音辨識與翻譯（選用功能）

「更多功能 › AI 即時字幕」（以及看譜時工具列 ⋯ 設定裡的「AI 即時字幕」小面板）可以把上課、大師班或排練時老師、指揮說的話即時變成字幕，並整理成逐字稿與重點。只有您按下「開始上課紀錄」之後才會使用麥克風與語音辨識；第一次使用時，系統會另外詢問「麥克風」與「語音辨識」的授權。

• 語音辨識預設只在您的裝置上進行：本 App 只使用 Apple 內建、可以在裝置上執行的語音辨識，不使用需要把聲音傳到 Apple 伺服器的辨識模式；裝置不支援在裝置上辨識的語言，就不會辨識那個語言。另外會用 Apple 內建的聲音分類器（同樣在裝置上）判斷聲音是「說話」還是「樂器演奏」，演奏時不辨識。
• 選用的「AI 精準模式」（預設關閉）：只有在您已開啟「線上 AI（Google Gemini）」並貼上自己的金鑰、又在 AI 即時字幕裡另外開啟這個模式並按下「同意並開啟」之後，每一句被判定為「說話」的聲音片段（演奏聲不送），連同手機辨識的草稿文字、前幾句字幕、您的詞彙與正在看的樂譜名稱，才會用您自己的金鑰從您的裝置直接傳給 Google LLC 的 Gemini 服務，用來產生更準確的字幕與翻譯；不經過開發者的伺服器，開發者也看不到。整堂課的錄音檔、樂譜檔、照片與練習紀錄不會傳送。Google 依自己的條款處理這些資料（使用免費金鑰時，內容可能被用來改進產品並由人工審閱）。隨時可以在 AI 即時字幕的首頁或設定裡關閉；關閉後就不再傳送。
• 英文翻成中文使用 Apple 內建的「翻譯」功能（iOS 18 以上），翻譯在您的裝置上進行；第一次使用時，系統會請您允許下載翻譯語言資料。
• 逐字稿、重點與錄音檔（錄音檔可在「AI 即時字幕」設定裡關閉）保存在您的裝置上，不會上傳到本 App 或任何第三方的伺服器；錄音檔不納入裝置備份。逐字稿與重點會跟著「設定 › 備份與換機」一起備份；錄音檔只有在您開啟 iCloud 自動備份並勾選「包含上課錄音檔」時，才會一起存進您自己的 iCloud 雲碟（見第 5 節）。刪除一份紀錄，會連同本機的錄音檔一起刪除（iCloud 裡的備份副本 30 天後清除）。您也可以在紀錄的「匯出 › 分享錄音檔」自行把錄音檔傳給您選的對象。
• 如果您邊看譜邊使用，每一句字幕會記下「說話當時樂譜翻到第幾頁」（可在設定關閉），資料同樣只在您的裝置上。
• 本 App 不會把這些資料用於廣告、行銷或建立個人檔案。
• 錄下他人說話前，請先徵求對方同意：您錄下的是老師、指揮或同學的聲音，請依所在地的法律與您所在場合的規定處理。

2. AI 聲學教練與 Gemini API（選用功能）

重點摘要：

預設情況	全部在您的裝置上處理。不會上傳任何錄音、聊天文字、樂譜或練習紀錄；沒有帳號，也沒有開發者的伺服器。「線上 AI（Google Gemini）」預設是關閉的。
選用的第三方 AI 服務	Google LLC 的 Gemini API。只有在您自己打開「設定 › AI 與連線」裡的「線上 AI（Google Gemini）」並同意、再貼上您自己的 Gemini 金鑰之後才會使用；本 App 沒有內建任何金鑰，開關預設關閉。
傳送什麼	您在教練追問與咕嚕嚕博士聊天中輸入的文字（含該段對話最近幾則），以及您在 AI 設定裡寫的稱呼與要求；練琴統計數字（練習分鐘數、連續天數、每週目標、評測分數與分析結果、最弱項目、音準偏差、節拍器速度等）與目前的日期與時間；您告訴博士的稱呼與樂器；您填寫的曲目名稱（在樂譜內錄音時為該樂譜的標題）；您選的對照樂譜名稱與對譜結果。永遠不會傳送錄音檔、樂譜檔或照片。唯一例外：您在 AI 即時字幕另外開啟並同意的「AI 精準模式」會傳送上課時每一句說話的聲音片段（見 1-1）。
什麼時候傳送	只有在您自己打開「線上 AI」開關、在跳出的說明視窗（寫明傳給誰、傳什麼、不傳什麼）按下「同意」、再貼上您自己的金鑰之後。沒有打開、沒有同意，或沒有金鑰，就不會傳送任何東西。第一次進入 AI 畫面時，App 也會先跳出一次這份說明。
用途	只用來產生教練與博士的回覆文字；本 App 不把這些資料用於廣告、行銷或建立個人檔案。
對方如何保護	資料由 Google 依 Gemini API 的條款與 Google 隱私權政策處理。免費金鑰與付費金鑰的條款不同：使用免費金鑰時，Google 可能把內容用於改進產品，也可能有人工審閱，所以請不要輸入個人隱私資料。本 App 的開發者看不到這些資料。
如何停止	設定 › AI 與連線 › 把「線上 AI」開關關掉（會同時撤回同意並清除這支手機上的金鑰），或按「撤回同意並清除金鑰」；也可以把金鑰欄位清空並儲存。之後要再開啟，會重新請您同意。
年齡	Google 規定使用者需年滿 18 歲；未成年請由家長協助，或只使用離線模式。

「AI 聲學教練」預設會在裝置本機，使用簡單規則式演算法產生分析報告，完全不需要網路連線。

若您自願打開「線上 AI」、同意資料傳送說明，並在設定中輸入自己的 Google Gemini API Key，本 App 會在每次錄音結束後，將「音準飄移、穩定度百分比、抖動幅度」等純數字統計資料直接從您的裝置傳送至 Google 的 Gemini API，換取更聰明的教練建議文字。此過程：

• 不會傳送您的錄音音檔本身，只傳送數字統計
• 若您在助手裡打字追問，您輸入的問題文字、您自行填寫的曲目名稱，以及「常出錯的音名與偏差音分」這類統計，也會一併送出；請不要在其中輸入個人隱私資料
• 咕嚕嚕博士（貓頭鷹聊天）：預設使用裝置上的離線對話，不會連網。只有在您自行填入 Gemini API Key 之後，您輸入的聊天內容，以及一份練琴摘要（例如今天與本週練習分鐘數、連續天數、最近的評測分數與最弱項目、您告訴博士的稱呼與樂器）才會從您的裝置直接送到 Google 的 Gemini API；聊天記錄只儲存在您的裝置本機，我們看不到。請不要在聊天中輸入個人隱私資料。博士只是娛樂與練習輔助，不提供醫療或專業諮詢。啟用 Gemini 前，App 會先顯示「資料傳送說明」，您按下「同意」後才會傳送；不同意則一切維持離線
• 直接由您的裝置連線至 Google 伺服器，本 App 開發者不會經手或儲存這些資料
• 使用您自行填寫、僅儲存在您裝置本機（localStorage）的 API Key，我們不會收集您的 API Key
• 受 Google 隱私權政策規範

您可以隨時在設定中清空 API Key 欄位並儲存，即可停用此功能，恢復為純本機分析。

3. 分享功能（由您主動操作）

App 內的「分享」按鈕會呼叫 iOS 系統內建的分享選單（或 LINE 的分享連結），把您選定的內容——成績卡圖片、文字摘要、完整報告、練琴日記、這次的錄音檔，或老師用的作業／聯絡本卡片——交給您自己挑選的 App 與對象（例如 LINE 群組）。

• 只有在您按下分享、並於系統選單中選好對象之後，內容才會離開您的裝置
• 內容是直接從您的裝置交給您選的 App；本 App 沒有伺服器，不會經手、儲存或轉傳
• 分享出去的內容，之後受您所選的 App（例如 LINE）的隱私權政策規範

3-1. iCloud 備份（選用，預設關閉）

您可以在「設定 › 備份與換機」開啟「iCloud 自動備份」。開啟後，App 會把您的樂譜（含標記）、練琴紀錄與曲目、AI 即時字幕的逐字稿與重點（錄音檔只有在您勾選「包含上課錄音檔」時才一起備份）、以及設定，寫進您自己的 iCloud 雲碟中本 App 專屬的資料夾（檔案 App › iCloud 雲碟 › ScoreTone Pro），並依您設定的頻率更新。

• 資料由 Apple 依您的 Apple 帳號與 iCloud 設定儲存與同步，使用您自己的 iCloud 空間；本 App 沒有伺服器，我們無法讀取、儲存或轉傳這些資料
• 可以隨時在設定關閉；已經存在 iCloud 的檔案可以在檔案 App 自行刪除
• Gemini 金鑰與購買狀態不會被備份

4. 廣告與「無廣告」購買

本 App 在畫面底部顯示由 Google AdMob 提供的橫幅廣告；購買「無廣告」後不再顯示。

• 兒童導向處理：廣告請求已啟用「兒童導向處理」，只會顯示非個人化、內容分級為一般觀眾（G）的廣告，不使用廣告識別碼（IDFA）追蹤您，也不會跳出追蹤授權詢問
• 為了投放廣告、計費與防止詐欺，AdMob 仍可能處理 IP 位址、裝置與 App 資訊等，詳見 Google 廣告政策
• 「無廣告」買斷與月訂閱的付款完全由 Apple 處理，我們看不到您的付款資料；App 只會向 Apple 查詢「是否已購買」。本 App 沒有帳號與伺服器，不會建立或儲存您的購買紀錄

5. 我們收集的其他資料

本 App 沒有使用者帳號、沒有分析追蹤工具（Analytics/Tracking SDK），App 本身不會收集裝置識別碼（廣告服務的處理方式見第 4 節）。以下項目僅儲存於您裝置本機的瀏覽器儲存空間（localStorage），不會離開您的裝置：

• 語言與主題外觀偏好設定
• A4 基準頻率設定
• 練琴日記、練習紀錄與歷史分數、寵物進度、與咕嚕嚕博士的聊天記錄與設定
• 樂譜庫：您匯入的 PDF／圖片、手寫標記、頁面筆記、書籤與分類資料（存在本機資料庫 IndexedDB）
• 練琴提醒（選用）：提醒時間與日期只存在本機，通知由 iOS 在你的裝置上排程與顯示，不經過任何伺服器；自動記錄練琴時長只把累計時間寫進你本機的練琴日記，不上傳
• 備份檔（選用）：您按下「備份」時，App 會把樂譜、練習紀錄與設定打包成一個檔案，交給 iOS 分享選單，由您自己選擇存放位置（例如 iCloud Drive）。檔案不會經過我們的伺服器，也不含 Gemini 金鑰與購買狀態
• 字體、工具列位置與 Apple Pencil 手勢等介面偏好
• 老師卡片上次填寫的班級名稱與署名
• （若您有設定）Gemini API Key
• 診斷資訊：App 會在本機記錄最近的狀態與錯誤（例如版本、裝置型號、麥克風與功能狀態；不含錄音、字幕文字、樂譜內容或照片），只有您在設定裡按下「複製診斷資訊」、並自行貼給我們時才會離開裝置
• 鎖定畫面與動態島的節拍器顯示（即時動態）：只包含拍子與速度，由 iOS 在您的裝置上顯示，不經過任何伺服器

5-1. 資料保存、刪除與您的權利

• 本 App 的開發者沒有伺服器，也不保存任何您的個人資料；您的資料都在您的裝置上（以及您自行開啟的 iCloud 雲碟），由您自己控制。
• 刪除：在 App 內可以刪除個別樂譜、紀錄與聊天；刪除 App 會一併刪除裝置上的全部資料；iCloud 雲碟裡的備份可以在「檔案」App 自行刪除。
• 我們不出售、不出租、也不分享您的個人資料，也不用於跨 App 或網站的追蹤。
• 依您所在地的法律（例如中華民國個人資料保護法、歐盟一般資料保護規則 GDPR、美國加州消費者隱私法 CCPA），您享有查詢、更正、刪除等權利；因為我們沒有保存您的個人資料，這些資料都可以直接在您的裝置上處理。您透過 Google Gemini、Google AdMob 或 Apple 處理的資料，請依該公司的隱私權政策向其行使權利。有任何問題，請用第 9 節的信箱聯絡我們。

5-2. 資料安全與跨境傳輸

• App 與 Google（Gemini、AdMob）之間的連線使用加密的 HTTPS；您的 Gemini 金鑰只存在您的裝置上。
• 您選擇使用的 Google 服務，可能在您所在國家或地區以外的伺服器處理資料，適用 Google 的隱私權政策與資料保護措施。
• 傳接筆記的連線只在鄰近裝置之間，不經過網際網路（見第 1 節）。

6. 兒童隱私

本 App 不會刻意收集兒童個人資料。為保護兒童，廣告請求已啟用「兒童導向處理」（見第 4 節）：只顯示非個人化、內容分級為一般觀眾的廣告，不使用廣告識別碼追蹤使用者。

7. 政策異動

若本政策內容有重大變更，我們會更新本頁面上方的「最後更新」日期，並在 App Store 的版本更新說明中提醒。

8. 商標與第三方聲明

Apple、iPhone、iPad、Apple Pencil、iCloud 與 AirDrop 是 Apple Inc. 的商標；Google、Gemini 與 AdMob 是 Google LLC 的商標；LINE 與其他產品名稱為各自權利人所有。本 App 與這些公司沒有隸屬、贊助或背書關係，名稱僅用來說明相容性與資料的流向。

本 App 使用開放原始碼元件：PDF.js（Mozilla，Apache-2.0）、Capacitor（Ionic，MIT）、capacitor-community/admob（MIT）、capacitor/local-notifications（MIT）、capgo/native-purchases（MPL-2.0）；授權全文可在 App 內「設定 → 開放原始碼與商標聲明」查看。

作曲家肖像使用已進入公有領域的歷史畫像與老照片（來源：Wikimedia Commons），每一張的作者、授權與來源網址都列在 App 內的「開放原始碼與商標聲明」。

資料來源：音樂術語辭典使用國家教育研究院「音樂學術名詞」（依政府資料開放授權條款第 1 版利用）；作曲家名稱的各國語言別名整理自 Wikidata（CC0）；中文讀音資料以 pinyin-pro（Copyright © 2022-present zh-lx，MIT 授權）產生。

作曲家 Q 版封面是本 App 原創的卡通繪圖，只描繪過世超過 70 年的歷史人物；近代與在世的音樂家一律使用通用的音符角色，不是本人肖像，也不代表本人或其遺族的授權、贊助或合作。

9. 聯絡我們

若您對本隱私權政策有任何疑問，請聯絡：antonyhsiang002@gmail.com

ScoreTone Pro Privacy Policy

ScoreTone Pro (the "App") is a sheet-music reader, acoustic tuner, metronome, tone generator, AI acoustic coach, and ear-training tool. We take your privacy seriously. This policy explains how the App handles your data.

1. Microphone, Camera & Photos Access

The App requests access to your device's microphone in order to:

• Detect the pitch of your instrument or voice in real time (Tuner)
• Record and play back short clips for the "AI Acoustic Coach" feature
• Turn what your teacher or conductor says into live captions ("AI Live Captions" — used only after you tap Start, see 1-1)

The microphone is turned on only while it is needed (the Tuner page, the score reader's mini tuner, recording, training and AI Live Captions) and is switched off within a few seconds after you leave those features, and immediately when the App goes to the background (except while a recording, training or AI Live Captions session is running). The App never listens in the background. The system asks for permission the first time it is needed.

All pitch analysis happens locally on your device in real time. Recorded audio is kept only in your device's local memory for playback and is never uploaded by the App to any server we operate. Recordings are released from memory once you close the app or start a new recording. (If you choose to send a recording with the Share feature described in Section 3, you decide who receives it.)

Camera & Photos: used only when you import images into Sheet Music and choose "Take Photo" or pick pictures from your library. Imported photos and PDFs are stored only in a local database on your device (IndexedDB); they are never uploaded and we never have access to them.

AI note import (optional): in the score reader under "Quick tools › AI note import", you can pick screenshots or a PDF from another app; the App matches the pages and copies your handwritten markings onto this score on your device. The screenshots and PDF are processed only on the device and are never uploaded or sent to Gemini or any third party.

Blink to turn pages (optional, off by default): after you turn it on in the score reader under "Quick tools › Blink to turn pages" (it is also briefly on while that panel is open so you can try it), the front camera stays on while you read a score. The App only uses Apple's built-in, on-device face-landmark detection to measure how open your eyes are and decide whether you deliberately winked or closed your eyes to turn the page. Images are processed on the device in real time and are never shown, stored or uploaded, and are never used to identify you or to build any profile. The camera turns off as soon as you leave the score, the App goes to the background or you turn the option off. You can revoke camera access in iOS Settings at any time.

Shared notes (optional, off by default): after a section leader (or conductor) starts sharing in the score reader under "Quick tools › Shared notes", the ink they write on that score (bowings, fingerings, markings) — and the ink of anyone the leader allows to write — is sent directly to nearby iPads that entered the same 4-digit code. The iPads connect to each other directly over Wi-Fi (the same local network, or Apple's peer-to-peer Wi-Fi), using the iOS "Local Network" permission, not over the internet and not through our or any third party's servers. Only the ink data, the leader's current page, the score's page count and title, a file fingerprint (to check that everyone opened the same file; it does not contain the file), and the display name and role you set yourself (leader, seat number or conductor) are sent; score files, recordings and other personal data are not. Received ink is stored only on the receiving device, and the connection ends as soon as sharing stops or the App closes. This nearby connection is not separately encrypted and the 4-digit code only groups devices together (it is not a password), so please use it in rehearsals you trust and do not write personal information in the ink. You can revoke the permission in iOS Settings › Privacy › Local Network at any time.

1-1. AI Live Captions: Speech Recognition & Translation (Optional)

"More › AI Live Captions" (and the AI Live Captions panel in the score reader's ⋯ settings) turns what your teacher or conductor says in a lesson, masterclass or rehearsal into live captions and organises it into a transcript and key points. The microphone and speech recognition are used only after you tap "Start lesson record"; the first time, the system asks separately for microphone and speech-recognition access.

• By default, speech recognition runs on your device: the App uses only Apple's built-in on-device speech recognition and never the mode that sends audio to Apple's servers; a language the device cannot recognise on-device is simply not recognised. Apple's built-in sound classifier (also on-device) tells speech from instrument playing, and playing is not transcribed.
• Optional "AI precision mode" (off by default): only after you have turned on "Online AI (Google Gemini)" with your own key and also turned on this mode in AI Live Captions and tapped "Agree and turn on", the audio of each sentence judged to be speech (instrument playing is not sent), together with the phone's draft text, the previous few caption lines, your word list and the title of the score you have open, is sent with your own key straight from your device to Google LLC's Gemini service to produce more accurate captions and translations. It does not pass through any developer server and the developer cannot see it. The full lesson recording, score files, photos and practice records are never sent. Google handles the data under its own terms (with a free key, content may be used to improve its products and reviewed by humans). You can turn it off at any time on the AI Live Captions home screen or in its settings; nothing is sent after that.
• English-to-Chinese translation uses Apple's built-in Translation feature (iOS 18 or later) and runs on your device; the first time, the system asks you to allow the translation language download.
• Transcripts, key points and audio files (the audio can be switched off in the AI Live Captions settings) are stored on your device and are never uploaded to the App's or any third party's servers; audio files are excluded from device backups. Transcripts and key points are included in "Settings › Backup & new phone"; audio files are copied to your own iCloud Drive only if you turn on iCloud auto backup and tick "Include lesson recordings" (see section 5). Deleting a record also deletes its audio file on the device (the iCloud backup copy is removed after 30 days). You can also share a recording yourself with "Export › Share the recording".
• If you use it while reading a score, each caption records which page was open when it was spoken (this can be turned off in the settings); this data also stays on your device.
• The App does not use this data for advertising, marketing or profiling.
• Please ask before recording other people: what you record is the voice of a teacher, conductor or classmates; follow the law where you live and the rules of the place you are in.

2. AI Acoustic Coach & the Gemini API (Optional)

Summary:

By default	Everything is processed on your device. No recordings, chat text, scores or practice records are uploaded; there are no accounts and no developer server. “Online AI (Google Gemini)” is off by default.
Optional third-party AI service	Google LLC's Gemini API. It is used only if you yourself turn on “Online AI (Google Gemini)” in Settings › AI & connection, agree, and then paste your own Gemini key; the App ships without any key and with the switch off.
What is sent	The text you type in coach follow-ups and in the chat with Dr. Hootsy (including the last few messages of that conversation) and the nickname and requests you wrote in the AI settings; practice statistics (minutes practiced, streak, weekly goal, evaluation scores and analysis results, weakest area, pitch deviation numbers, metronome tempo) and the current date and time; the name and instrument you told the owl; the piece name you entered (when you record inside a score, that score's title); the name and results of a reference score you picked. Recordings, score files and photos are never sent. The only exception: the “AI precision mode” in AI Live Captions, which you turn on and agree to separately, sends the audio of each spoken sentence of a lesson (see 1-1).
When it is sent	Only after you yourself turn on the “Online AI” switch, tap "Agree" in the notice that says who receives what and what is never sent, and then paste your own key. If you have not turned it on, have not agreed, or have no key, nothing is sent. The first time you enter an AI screen, the App also shows this notice once.
Why	Only to generate the coach's and the owl's reply text; the App does not use this data for advertising, marketing or profiling.
How the recipient protects it	Google processes the data under the Gemini API terms and Google's Privacy Policy. Terms differ between free and paid keys: with a free key, Google may use content to improve its products and humans may review it, so please do not enter personal information. The App's developer cannot see this data.
How to stop	Settings › AI & connection › turn the “Online AI” switch off (this withdraws consent and clears the key stored on this phone), or tap "Withdraw consent and clear key"; you can also clear the key field and save. If you turn it on again later, you are asked to agree again.
Age	Google requires users to be 18 or older; minors should ask a parent for help or stay offline.

By default, the AI Acoustic Coach generates its report entirely on-device using a simple rule-based algorithm, with no network connection required.

If you voluntarily turn on “Online AI”, agree to the data-sharing notice, and enter your own Google Gemini API key in Settings, the App will send numeric performance statistics only (pitch drift, stability percentage, fluctuation) — never your raw audio recording — directly from your device to Google's Gemini API after each session, in exchange for a more insightful, AI-generated coaching report. In this flow:

• Your raw audio recording is never transmitted — only aggregate numbers
• If you type a follow-up question in the Assistant, the question text, the piece name you entered, and statistics such as which notes are often off (and by how many cents) are sent too — please do not type personal information there
• Dr. Hootsy (the owl chat): by default the owl chats entirely on your device, with no network use. Only after you enter your own Gemini API key are the messages you type, plus a short practice summary (e.g. minutes practiced today and this week, streak, latest evaluation score and weakest area, and the name and instrument you told the owl) sent directly from your device to Google's Gemini API. The chat history is stored only on your device and we cannot see it. Please do not type personal information in the chat. The owl is for entertainment and practice support and does not give medical or professional advice. Before Gemini is enabled, the app shows a data-sharing notice and sends nothing until you tap Agree; if you decline, everything stays offline
• Your device connects directly to Google's servers; the App's developer does not see, receive, or store this data
• Your API key is entered by you and stored only in your device's local storage (localStorage); we never collect it
• This exchange is governed by Google's Privacy Policy

You can disable this feature at any time by clearing the API key field in Settings and saving, which reverts the coach to fully offline analysis.

3. Sharing (Started by You)

The in-app Share buttons open the iOS system share sheet (or a LINE share link) to hand content you choose — a score card image, a text summary, the full report, a practice-diary entry, the recording of a take, or a teacher's homework/notice card — to the app and people you pick, such as a LINE group.

• Content leaves your device only after you tap Share and choose a recipient in the system sheet
• It goes straight from your device to the app you chose; the App has no server and never sees, stores or forwards it
• Once shared, the content is governed by the privacy policy of the app you chose (for example LINE)

3-1. iCloud Backup (Optional, Off by Default)

You can turn on "iCloud auto backup" in Settings › Backup & new phone. When on, the App writes your scores (with markings), practice records and pieces, lesson-caption transcripts and key points (recordings only if you tick "Include lesson recordings"), and settings to a folder that belongs to this App in your own iCloud Drive (Files app › iCloud Drive › ScoreTone Pro), updating it at the frequency you choose.

• The data is stored and synced by Apple under your Apple account and iCloud settings, using your own iCloud storage; the App has no server, and we cannot read, store or forward it
• You can turn it off at any time in Settings; files already in iCloud can be deleted in the Files app
• The Gemini key and purchase status are never backed up

4. Advertising & the "Ad-Free" Purchase

The App shows a banner ad served by Google AdMob at the bottom of the screen; it is removed once you buy "Ad-Free".

• Child-directed treatment: ad requests are tagged for child-directed treatment, so only non-personalized ads rated for general audiences (G) are shown, the advertising identifier (IDFA) is not used to track you, and no tracking permission prompt is shown
• To deliver ads, bill advertisers and prevent fraud, AdMob may still process information such as your IP address and device/app details — see Google's advertising policies
• Payments for the lifetime and monthly "Ad-Free" options are handled entirely by Apple; we never see your payment details. The App only asks Apple whether you have purchased it. The App has no accounts and no server, so we do not create or store purchase records

5. Other Data We Collect

The App has no user accounts and no analytics/tracking SDKs, and the App itself does not collect device identifiers (see Section 4 for how the ad service works). The following items are stored only in your device's local browser storage (localStorage) and never leave your device:

• Language and theme preferences
• A4 tuning reference frequency
• Practice diary, session history and scores, pet progress, and your chat history and settings with Dr. Hootsy
• Your score library: imported PDFs / images, ink marks, page notes, bookmarks and categories (stored in the local IndexedDB database)
• Practice reminders (optional): the reminder time and days are stored only on your device; notifications are scheduled and shown by iOS locally, with no server involved. Automatic practice-time tracking only writes the accumulated time to your local practice diary and never uploads it
• Backup file (optional): when you tap Backup, the app packs your scores, practice records and settings into one file and hands it to the iOS share sheet; you choose where it is saved (for example iCloud Drive). It never passes through our servers and does not contain your Gemini key or purchase status
• Interface preferences such as font, toolbar position and Apple Pencil gestures
• The class name and signature last used on teacher cards
• Your Gemini API key, if you choose to set one
• Diagnostics: the App keeps a short local log of recent states and errors (such as app version, device model, microphone and feature status; no recordings, caption text, score content or photos). It leaves your device only if you tap "Copy diagnostics" in Settings and paste it to us yourself
• The metronome on the Lock Screen and in the Dynamic Island (Live Activity) shows only the beat and tempo; it is displayed by iOS on your device with no server involved

5-1. Data Retention, Deletion & Your Rights

• The developer has no servers and keeps none of your personal data; your data stays on your device (and in your own iCloud Drive if you turn that on), under your control.
• Deletion: you can delete individual scores, records and chats in the App; deleting the App deletes all of its data on the device; backups in iCloud Drive can be deleted in the Files app.
• We do not sell, rent or share your personal information, and we do not use it to track you across apps or websites.
• Depending on where you live (for example Taiwan's Personal Data Protection Act, the EU GDPR or the California CCPA), you have rights to access, correct and delete your data; because we hold none of it, you can do all of this directly on your device. For data processed by Google Gemini, Google AdMob or Apple, please exercise your rights with that company under its privacy policy. If you have any questions, contact us at the address in Section 9.

5-2. Security & International Transfers

• Connections between the App and Google (Gemini, AdMob) use encrypted HTTPS; your Gemini key is stored only on your device.
• Google services you choose to use may process data on servers outside your country or region, under Google's privacy policy and data-protection measures.
• Shared notes connect only nearby devices and never go over the internet (see Section 1).

6. Children's Privacy

The App does not knowingly collect personal information from children. To protect children, ad requests use child-directed treatment (see Section 4): only non-personalized, general-audience ads are shown and the advertising identifier is not used to track users.

7. Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date above and mention it in the App Store release notes.

8. Trademarks & Third-Party Notices

Apple, iPhone, iPad, Apple Pencil, iCloud and AirDrop are trademarks of Apple Inc.; Google, Gemini and AdMob are trademarks of Google LLC; LINE and other product names belong to their respective owners. The App is not affiliated with, sponsored by or endorsed by these companies; the names are used only to describe compatibility and data flow.

The App uses open-source components: PDF.js (Mozilla, Apache-2.0), Capacitor (Ionic, MIT), capacitor-community/admob (MIT), capacitor/local-notifications (MIT) and capgo/native-purchases (MPL-2.0). Full license texts are available in the App under Settings → Open-source & trademark notices.

Composer portraits are public-domain historical paintings, prints and old photographs from Wikimedia Commons; the author, license and source URL of each one are listed in the App under Settings → Open-source & trademark notices.

Data sources: the music-terms dictionary uses the "Music academic terms" of Taiwan's National Academy for Educational Research (used under the Open Government Data License, version 1.0); multilingual composer-name aliases are compiled from Wikidata (CC0); Chinese reading data was generated with pinyin-pro (Copyright © 2022-present zh-lx, MIT License).

The chibi composer covers are original cartoon artwork created for the App and depict only historical figures who died more than 70 years ago; modern and living musicians are shown as a generic note character, which is not a likeness of any person and does not imply their (or their estates') permission, sponsorship or involvement.

9. Contact Us

If you have questions about this Privacy Policy, please contact: antonyhsiang002@gmail.com