Privacy Policy

Effective date: October 14, 2026

Pedal Steel Atlas ("the app") is a notation and chord-finder tool for pedal steel guitar, available at pedalsteelatlas.com and as a native app. This policy describes what data the app handles and how.

Using the app without an account

No account is required. Without one, your tabs, copedents, and settings stay on your device (or in your browser) and are never sent to our servers. We do not use advertising or tracking cookies, and we do not sell data to anyone under any circumstances.

If you create an account

Creating an account enables cloud sync. You can sign up with an email address and password, with Sign in with Apple, or with Google. We then store:

• Your sign-in details — authentication is provided by Supabase, and the account is shared with the Guitar Atlas app (one sign-in works in both). With email sign-up we store your email address and a hashed password. With Sign in with Apple, Apple shares an identifier for your Apple Account, the email address you choose to share (which can be a private relay address from Hide My Email), and, the first time only, your name if you allow it. With Google, Google shares your name, email address, and a link to your profile picture. We keep what the provider shares with your account; we never see your Apple or Google password.
• Your musical content — tabs, copedents, progressions, and any backing audio/video you attach, stored under your account. Your own work is private: only you can read it, and storage rules enforce per-user isolation. What you share in Community is public and can be viewed by anyone, signed in or not: a tab you publish (with the author name you give it and any media you publish with it), until you unpublish it, and any tab request you post.
• Tab imports — if you import a tab from a PDF or images, the uploaded pages are processed by an automated recognition service (including an AI model that reads the notation). The files you upload are deleted from the processing pipeline within 30 days. So that importing the same file twice does not re-run recognition, we also keep a cache of recognition results keyed by a fingerprint of the file's contents; that cache is not linked to your account or to any user identifier, and it may be kept for longer than 30 days.
• Plan status — each account has a plan record (the plan, its status, and its start and end dates) that tells the app which features are available. Every feature is free today, so this record doesn't limit what you can use. If paid features are offered in the future and you buy one, this record would also show that purchase; payment details (card numbers, billing address) would be handled entirely by the payment processors below and would never reach our servers.

Crash reports

Production builds may send anonymous crash reports (the error and a stack trace) so we can fix bugs. Crash reports do not include your tabs, media, email, or any personally identifying information.

Deleting your data

You can delete your account and all associated data at any time from inside the app: open the account menu and choose Delete account. This permanently removes your account, cloud tabs, uploaded media, and imports — including any data in the shared Guitar Atlas account. Local files on your device are untouched. The de-identified recognition cache described above is not tied to your account and is not removed by account deletion; it contains nothing that identifies you. You can also email us (below) to request deletion.

Third-party services

• Supabase — authentication, database, and file storage.
• Apple and Google sign-in — if you sign in with Apple or Google, that provider confirms who you are and shares the details described above, subject to Apple's or Google's privacy policy.
• Vercel — web hosting and import processing.
• Anthropic (Claude) — AI recognition of imported tab pages: only the pages you upload for import, plus any notes you add about the document. The app asks for your permission before your first import, and Anthropic does not use this data to train its models.
• YouTube — if you attach a YouTube video to a tab, the embedded player is subject to Google's privacy policy.
• Sentry — crash reporting (when enabled).
• RevenueCat — purchase management. Nothing is sold today, but the iOS and macOS apps connect to RevenueCat and, when you sign in, share your account id with it (a random identifier, not your email address), so that a purchase could be recognized across devices and apps if paid features are offered later. If they are, RevenueCat would also receive purchase events (product, price, renewal state). The web app does not use RevenueCat.
• Apple App Store — if purchases are offered in the future, Apple would process purchases made in the iOS/macOS apps, subject to Apple's privacy policy.
• Stripe — if purchases are offered on the web in the future, Stripe would process them. Card details would go directly to Stripe (see Stripe's privacy policy) and would never be visible to us.

Changes

If this policy changes materially, the effective date above will be updated and significant changes will be noted in the app or on the website.

Contact

Questions or data requests: privacy@pedalsteelatlas.com