Your data

What pialog stores, where it lives, and how to get rid of it. In plain language — if anything here is unclear or you disagree with it, tell me and I'll change it.

What's collected

• Your playing, as MIDI. Which notes you played and when. This is what the whole app is built on — it's how pialog works out which piece you're playing, where you were in it, and which bars gave you trouble.
• Audio recordings, if the microphone box is ticked on the record page (it is by default, and you can untick it any time — the setting sticks). Two purposes, and I'd rather be blunt about both: it lets you play a session back, and it helps me build a version that works from sound alone, for people with acoustic pianos. If you'd rather not, untick the box; tracking is unaffected, because tracking only ever uses MIDI.
• The scores you upload and the titles you give them.
• Your email address, because you gave it to me to get an invite.

No analytics, no tracking pixels, no advertising, no third-party scripts in the app. Nothing is sold or shared with anyone. There is no "anonymous usage data".

Where it lives

You have your own private instance of pialog with its own storage — your data isn't mixed in with anyone else's. It's hosted on Fly.io in Frankfurt, with recordings and session files in Tigris object storage. Both are infrastructure providers acting on my instructions.

The one other third party is Formspree, which delivers the messages you send from the "something looks wrong?" links and the signup form. Those messages go to my inbox.

What I can see

I never listen to your recordings. When I debug tracking I only ever need the MIDI — which notes, and when — so there's no reason for me to open the audio, and I don't.

I don't go looking through your practice data either. Being straight about it: as the person running the service I could — I'd rather say that than let you assume otherwise — but I won't open your sessions unless you ask me to. What I do look at without asking is the server's own error log: what broke and where, not what you played.

I don't know your password. The one I emailed you was a starter; the moment you set your own in Settings it stops working, and yours is stored only as a scrambled fingerprint that can't be turned back into the password. So I can't sign in as you. Being straight about the limit of that: I run the server your copy sits on, so I can still reach the files — and if you ever forget your password, putting the starter one back is something only I can do, and you'd know it happened because yours would stop working.

Asking is built into the app rather than left to email. Every "something looks wrong?" link names the session or piece it's about and asks whether I may open that one, so it's your call each time. Say no and I still get your message — I just work from your description instead. Nothing is shared with anyone either way.

What you can do about it

All of this is in Settings, and none of it needs to go through me:

• Download everything — your sessions and statistics as a zip file.
• Delete one session, or just its recording, from the Practice sessions page.
• Delete all recordings at once, keeping your tracking history.
• Delete everything — every session, recording and statistic.

Deleting removes the data from the storage it lives in, not just from view. If you want your whole instance shut down and erased, email me and I'll do it.

How long it's kept

For as long as you use pialog, or until you delete it. This is a beta, so there's no retention schedule beyond that — if you stop using it and want it gone, tell me.