Fugato Privacy Policy
Last updated: 20 October 2026
What has changed: we use the name Fugato in all texts; we removed the sentence "today it shows no advertising", so we don't commit to something that may change (if it does, we will tell you beforehand); we added that notices needed for the service, such as security ones, are sent by email; and we added the work history "My stand" (what we keep, why and for how long, in section 3). You can remove any work or turn the history off whenever you like. We also added the check that the app is genuine before downloading scores or converting (what we keep, why and for how long, in section 3, and who is involved, in section 4). We also explain how we use the microphone (tuner and Axel): the sound is analysed on your device and is not sent.
1. Who is responsible
The controller of your data is Andrés Alejandro Vázquez Clement. For any privacy matter, write to support@fugato.app.
2. The essentials, in a few lines
- You can use Fugato without an account. As a guest, what you choose (instrument, level, tempos, annotations) is kept only on your device and does not reach us.
- With an account, we keep what is needed so that your things follow you on any device: your email, your profile, your library and your annotations.
- We do not record or send what you play. The accompaniment sound is generated on your device. The microphone is used only for the tuner and, in test versions, for Play with the Intelligent accompaniment (Axel), which listens to follow where you are. The sound is analysed on your device, is not recorded and is not sent to any server: we neither keep it nor see it. Your device asks for your permission to use the microphone; you can withdraw it at any time in the system settings, and the rest of the app keeps working.
- We tell you before any change. We will tell you before any change in how we use your data, in the app and on this page. Notices needed for the service (security, changes to these texts or serious incidents) reach you by email.
- You can download your data or delete your account from the app itself, at any time.
3. What data we process, why and on what legal basis
| Data | Why | Legal basis (GDPR art. 6) | How long |
|---|---|---|---|
| Email and password (the password is stored, encrypted, by our account provider; we never see it) | Create your account, sign in and recover your password | Performance of a contract (the terms of use) | While you have an account |
| Profile: display name, instruments, level and the settings you choose to sync | Recommend works to you and make the app the same on all your devices | Performance of a contract | While you have an account |
| Library and annotations (texts, marks, handwritten strokes and their colours, on each bar) | Store them and sync them between your devices | Performance of a contract | While you have an account, or until you delete them |
| Scores you import (MusicXML or PDF) | So you can play and study them; they are private, only for you | Performance of a contract | While you have an account, or until you delete them |
| Photos and PDFs you convert with Shephard, the draft and your corrections: which bars are right or wrong (with your comment or "not sure") and the data of the work (title, composer, instrument, and whether it is a whole work, a movement or an excerpt) | Convert your score. Only if you tick the box "I authorise the use of my corrections to train the converter", also train and measure Shephard | Performance of a contract to convert; your consent (the box, which is unticked by default and you may refuse) to train | Without the box ticked, photos and intermediate data are deleted when you save or discard the draft. With the box ticked, until you delete your account or withdraw your consent |
| Your subscription plan and status (when payment exists; Apple or Google handle the payment, we do not see your card) | Give you access to what you have bought | Performance of a contract | While you have an account, and as long as tax law requires |
| Devices you sign in with: an identifier the app creates when installed, the device name (for example "Galaxy Tab A9+"), whether it is Android, iPhone/iPad or web, when you registered it and its approximate last use | Know on how many devices you use your account (each plan allows a number) and let you see and remove yours | Performance of a contract | While you have an account, or until you remove the device |
| Offline-use permits for the works you download (each one is valid on the device that requested it) | So you can play offline the works you are entitled to | Performance of a contract | Until they expire |
| App verification: the random installation number of your device, the platform (Android or iOS), until when the verification is valid and, on iPhone and iPad, a public key and a counter. We do not link it to your account. We also note, per device and day, if a device could not be verified | Check that whoever downloads scores or converts is the Fugato app and not a program pretending to be it, to protect the service and our work on the catalogue | Legitimate interest in protecting the security of the service (GDPR art. 6.1(f)). You can object by writing to us, but if your device cannot be verified (because you object, it is modified or it has no Google services) we will not be able to guarantee the download of catalogue scores, the offline use of new ones or converting with Shephard. The rest of the app keeps working: the catalogue, your account, Study, Play and what you already downloaded while its offline permit remains valid | Up to 90 days after your device last used it; the record of devices that could not be verified, 30 days |
| Work history ("My stand"): the works you have practised (work, score, the part you play, whether it was in Play or Study, the bar where you left off, date and time, title and composer) and the levels the catalogue recommends for your instrument. Up to 200 works | So that your stand follows you across all your devices and to sort the catalogue starting from your usual level, without asking you. If we ever used it for anything else, we would tell you beforehand | Performance of a contract | While you have an account, or until you remove the work from your stand or turn the history off. After 200 works, the oldest are deleted. It is included in "Download my data" |
| Request to try the beta: your email (required) and the system you use (Android or iOS) | Send you the installation steps and give you access: we add your email to Apple's (TestFlight) or Google's (Play) tester list, which handle it under their own policies. We do not use it for anything else or send you news unless you ask for it | Your request, to give you access to the test (steps before a contract, GDPR art. 6.1(b)) | Until we send you the steps and resolve your request and, at most, one year (like suggestions); if you become a tester, while the test lasts, and you can ask us to remove you earlier |
| Suggestions and bugs you send us (the text you write, whether it is a suggestion or a bug, the language and, if you leave it, your email; the email is optional and is not linked to your account, even if you have one) | Read your message and, if you left an email, reply to you | Your consent when you send it; to reply, our legitimate interest in answering whoever writes to us | Until we resolve the matter and, at most, one year |
| Technical server logs (IP address, date and time, what was requested) | Security and fixing faults | Legitimate interest in keeping the service secure | 30 days |
To sort the catalogue, we infer your usual level from what you practise. It is a simple inference that only changes the order in which you see the works: it makes no decisions about you and does not exclude you from anything.
What you convert with Shephard is private: only you see it. Until you press "Convert", your photos are only on your device; when you press it, they are sent, encrypted, to our server to be converted. Shephard is our own model and runs on our server: we do not send your photos to any third-party artificial intelligence service to convert them. If you tick the training box, we keep the photos, the draft and your corrections on our server (Hetzner, in the European Union), linked only to your account identifier, without your name or email. We use them only to train and measure the converter; they are not published or shared outside the Fugato team. You can withdraw your consent at any time by deleting your account or writing to us.
What stays only on your device and does not reach us: the accompaniment sound you download, your app preferences and, if you have no account, your annotations.
4. Who it is shared with
Today, only the providers that make the service work process your data, on our behalf and under a data processing contract that requires them to protect it:
- Supabase (account and password management), with data in Ireland (European Union).
- Hetzner (hosting of the app server, its database and your scores, conversion photos, annotations and sounds), in Falkenstein (Germany, European Union).
- Cloudflare (hosting of this website, protection against attacks and checks against bots): it processes the IP address and technical data of connections. Its bot check (Turnstile) is used when you sign in, create an account and recover your password, in the app and on the website: to decide whether you are a person, Cloudflare receives signals from your device and your browser, and stores a piece of data in your browser for that check.
- Resend (email delivery: your account messages and the notices that reach support@fugato.app when someone writes to us from the website or the app): it processes the email address and the content of the message.
- Apple and Google, only for payments inside the app, under their own policies. Apple and Google also receive the email of whoever asks to try the beta, to give them access to the test.
Cloudflare, Apple, Google and Resend are companies with a presence outside the European Union and may process data outside it. In that case, the transfer relies on standard contractual clauses or an adequacy decision.
For the app verification, your device asks Google (on Android, Play Integrity) or Apple (on iPhone and iPad, App Attest) for a check, and our server reads the result. Google and Apple handle that request as independent controllers, under their own privacy policies.
If in the future we share data with other companies, for example advertisers, we will explain it here (which data, why and on what legal basis) and we will tell you before it applies.
5. Children
Fugato is for musicians of all ages, and many students are minors. As a guest, no personal data is sent to our servers. To create an account you must be 14 or older; if you are younger, your parent or guardian must create it, as Spanish law requires (LOPDGDD, art. 7). When you create the account, you are asked to confirm one of the two.
6. Your rights
At any time you can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, without affecting what was done before:
- From the app: Account → Download my data (a file with everything of yours) and Account → Delete my account, which deletes everything of yours from our servers, and your access.
- By email: write to support@fugato.app.
- If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Security
Communications between the app and our servers are encrypted. Each account can only see its own data. We do not store passwords ourselves: our account provider stores them, encrypted.
8. Changes to this policy
If something important changes, for example a new data item or a new provider, we will tell you in the app before it applies.