Privacy Policy

This Privacy Policy explains what data the Sheet Music Pro app and this website access, collect, use and share, and the choices you have. In short: the app has no accounts, no ads, no analytics, and keeps your music library on your own device.

1. Who we are

Sheet Music Pro is published by Pasolab (“we”, “us”). This policy covers:

• the Android app pro.sheetmusic.app and its free trial edition pro.sheetmusic.app.free;
• the web/PWA version of the app that runs in your browser;
• this website, where you can buy the Pro edition.

Questions or requests: hotro@pasolab.app.

2. The app: what stays on your device

• No account, no sign-in. We do not ask for your name, email or phone number in the app.
• No ads and no analytics are built into the app at this time.
• We do not receive your data. The app does not send your library or usage data to our servers.

Everything you add — PDF files, images, MusicXML, MIDI, ChordPro, audio files, notes and drawings, setlists, settings and SoundFonts — is stored on your device only (in the app’s private storage, or in your browser’s IndexedDB for the web version). You can export a backup file (.scorepack) yourself; where you keep or send that file is up to you.

3. Permissions and why the app asks for them

• Microphone (RECORD_AUDIO) — for the tuner and the scored practice mode. Sound is analysed on the device in real time. It is not recorded, not stored and not sent anywhere.
• Voice search in the library (if your device or browser supports it) uses the speech recognition service built into your system, for example Google’s. That provider’s privacy policy applies to the voice input.
• Camera — only to scan the QR code that lets you join a band room. Frames are processed on the device, not stored and not sent.
• Local network (Wi-Fi, multicast/NSD) — for the band room feature described below.
• Internet — only for the actions listed in section 5.
• Keep screen on (WAKE_LOCK) — so the screen does not turn off while you read music.

You can refuse or withdraw any permission in your device settings. Only the feature that needs it will stop working.

4. Band room (devices on the same Wi-Fi)

One device acts as the leader and other devices on the same Wi-Fi network connect directly to each other — not over the Internet and not through any server of ours. The devices in a room exchange:

• the device name you choose;
• the piece that is open and the current page number;
• notes and drawings on the page;
• the metronome tempo and beat.

Anyone in the room can see this information. Members are asked before a received piece is saved to their library. Only join rooms with people you trust.

5. When the app connects to the Internet

• Online audio you add yourself. If you paste a link to YouTube, SoundCloud or an audio file, the app connects to that service to play it. That service’s privacy policy applies.
• SoundFont downloads. If you tap to download a SoundFont, the app downloads it from the linked source (MuseScore’s files on GitHub or SourceForge). Their privacy policies apply.
• Update check (web version). The web version reads a small version.json file on this website to see whether a new version is available. Like any web request, this is visible in the website’s server logs (section 6).

6. This website and buying the Pro edition

When you buy the Pro edition on this website we collect:

• your full name;
• your email address or phone number (to send your download link and help you later);
• a discount code, if you enter one.

We then create an order record: order code (SMPxxxxxx), amount, time and status.

Payment. You pay by bank transfer using VietQR through your own bank. We never see your card or bank login details — only what the bank transaction reports to us. A payment-matching service, SePay or Casso (third parties), forwards the transaction details (amount, transfer description, time, transaction ID) to this website so your order can be confirmed automatically. An unpaid order expires after 30 minutes.

Download link. We email you a signed download link. It expires after 7 days and can be used up to 5 times.

Server logs, cookies and fonts. The website runs on WordPress. WordPress and our hosting provider may log your IP address and browser type and set technical cookies needed for the site to work. This page loads fonts from Google Fonts, so your browser connects to Google’s servers to fetch them.

7. How we use your data

• to process your order, confirm payment and deliver the download link;
• to answer your support requests and handle refunds;
• to keep sales and accounting records required by Vietnamese law;
• to keep the website secure and working.

We do not use your data for advertising or profiling.

8. Who we share data with

We do not sell your personal data and do not share it with third parties for advertising. Data is handled only by:

• your bank and the payment-matching service (SePay or Casso), for payment confirmation;
• Google, which processes purchases in the Google Play version (section 13);
• our hosting and email providers, which store and deliver the website and its emails;
• authorities, when the law requires it.

The services you choose to use from inside the app (YouTube, SoundCloud, GitHub, SourceForge, your system’s speech recognition) receive data directly from your device under their own policies.

9. Security

• App data stays in the app’s private storage or your browser’s storage on your device. Protect your device with a screen lock.
• Download links are signed and expire. Order data is accessible only to the site administrator.
• Band room traffic stays on your local network.

No method of storage or transmission is 100% secure, but we take reasonable steps to protect your data.

10. How long we keep data and how to delete it

• App data is kept until you delete it: delete items in the app, clear the app’s data, uninstall the app, or (web version) clear the site data in your browser.
• Order data is kept as sales and accounting records for the period required by Vietnamese accounting and tax law. If you ask us to delete it, we delete your contact details and keep only the minimum the law requires.
• Google Play purchases: the copy on your device is removed when you clear the app’s data or uninstall it (reinstall and tap Restore purchases to get Pro back). Google keeps the purchase in your Google account under its own policy.

Step-by-step instructions: Delete your data.

11. Your rights

You can ask us to access, correct or delete your order information by emailing hotro@pasolab.app. Please include your order code or the email/phone number you used. We reply within 30 days. You can also withdraw app permissions at any time in your device settings.

12. Children

The app is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

13. Buying Pro in the Google Play version

The version installed from Google Play sells Pro through Google Play Billing: a one-time Lifetime purchase, or a monthly or yearly subscription that renews automatically until you cancel it.

• Google processes the payment under the Google Privacy Policy. We never see your card number, bank details or Google account password.
• On your device, the app receives the purchase details from Google Play (product, purchase status, purchase token, purchase time, whether it auto-renews), checks Google’s signature and keeps a copy so Pro works offline. The app does not send these details to our servers.
• In the Google Play Console, Google gives us order records (for example order ID, product, price, date and country). We use them only for accounting, refunds and support.
• You can cancel a subscription or ask for a refund in Google Play → Payments & subscriptions. Refunds are covered in our Terms of Use.

14. Planned features (not available yet)

The following is not in the app today. If we add it, we will update this policy and its effective date first.

• Google AdMob ads in the free edition. AdMob may use your device’s Advertising ID. Where the law requires it, we would ask for your consent before showing ads.

15. Changes to this policy

We may update this policy. The effective date at the bottom of the page shows when it last changed.