NomeNome Privacy Policy

1. On your device

Your songs, setlists, tempo and sound settings, haptic and output preferences, practice settings (count-in, tempo trainer and practice timer), Apple Watch haptic calibration and cached tempo estimates are stored on your iPhone or iPad, and calibration also on your Apple Watch. They are not sent to us unless you turn on cloud setlists (see below).

If you sign in, the app keeps a separate on-device library for that account, next to the library you use while signed out. Nothing is copied between them unless you choose to copy your signed-out setlists into the account.

The metronome, setlists, practice tools and the Apple Watch connection work offline. Accounts, Bands, cloud setlists, song lookup and purchases need an internet connection.

2. Optional account

You can create an account with an email address and password, or with Sign in with Apple. Accounts are run on Google Firebase Authentication, which stores your sign-in details: your email address (with Sign in with Apple this may be a private relay address Apple creates for you), your name if you shared it through Sign in with Apple, and the sign-in method you used. If you ask for a password reset, Firebase sends the email.

The app uses Firebase App Check (with Apple's App Attest or DeviceCheck) to confirm that requests to our servers come from the genuine app.

When you are signed in, the app also records whether your Apple ID has NomeNome Pro (a yes/no value and the time it was updated) under your account. This copy is informational; Pro itself is always checked with Apple on your device.

3. Bands

Bands need an account. When you create or join a band, Google Cloud Firestore stores the band's name, its owner, its join code, the list of member account identifiers and each member's display name. The display name comes from your account name; if you have none, or it looks like an email address, a generic label such as "Member 1a2b" is used instead. Your email address is not shown to other members.

During a band session, the leader's device shares the current song title, key, tempo, time signature, subdivision, accent pattern, a start time and whether the session is playing. Everyone in the band can see this.

To start members together, the app measures the difference between your device clock and the server clock by writing a small timestamp record under your account identifier.

To limit abuse, our server keeps short counters of recent band create and join attempts per account.

4. Cloud setlists

Cloud setlists are off until you turn them on in Settings, and they need an account and NomeNome Pro. When they are on, the setlists in your account's library, and the songs in them, are stored in Google Cloud Firestore under your account so your other signed-in devices can use them. A deleted setlist is kept as a deletion marker so your other devices learn it was deleted.

5. Apple Music song lookup

When you search for a song, your search text goes to Apple through Apple Music (MusicKit) to find titles, artists and artwork. Apple's privacy policy applies to that request.

To estimate a tempo, the app downloads the song's short preview clip from Apple, analyzes it on your device and then deletes the clip. Neither the audio nor the analysis is sent to us. The estimated tempo is cached on your device.

6. Apple Watch

Your iPhone and Apple Watch exchange tempo, beat timing, playback commands, your Pro status and calibration data directly with each other using Apple's WatchConnectivity. This data does not go to our servers.

While the metronome is playing, the Watch app runs a workout session so watchOS keeps the wrist haptics on time. For this, the Watch app asks for HealthKit permission to write workouts. It reads no health data, and no workout is saved to the Health app. The session ends when playback stops.

7. Purchases

NomeNome Pro is bought through the App Store. Apple handles payment and we never see your payment details. The app checks your Apple ID's purchase with StoreKit to unlock Pro. Pro belongs to your Apple ID, not to your NomeNome account.

8. Sharing setlist files

You can export a setlist as a .metronosetlist file and send it with the iOS share sheet, for example by AirDrop, Messages or email. The file contains the setlist's title and its songs' names and settings. It is sent by the app you choose, not by us, and we do not receive a copy. Anyone you send it to keeps their copy; deleting your account or the app cannot remove it.

9. Permissions

• Apple Music — asked for when you use song lookup.
• HealthKit (Apple Watch) — permission to write workouts, used only to run the workout session described above. No health data is read and no workout is saved.

The app does not use your location, contacts, photos, camera or microphone.

10. Service providers

• Google Firebase (Authentication, Cloud Firestore, Cloud Functions, App Check) stores and processes account, band and cloud setlist data on our behalf. Google's own terms and privacy policy apply to its processing, including its operational logs.
• Apple provides the App Store, StoreKit, Sign in with Apple, Apple Music search and previews, and WatchConnectivity.

We do not share your data with anyone else.

11. Advertising and tracking

NomeNome shows no ads, contains no analytics or advertising SDKs, and doesn't track you across other companies' apps or websites. We don't sell your data.

12. Deleting your data

Deleting your account

If you are signed in, you can delete your account in the app from the Account screen. You confirm with your password or with Sign in with Apple; for Sign in with Apple accounts the app also revokes NomeNome's access to your Apple ID. Deletion removes from our servers:

• your sign-in record;
• your cloud setlists and your Pro status record;
• bands you own, for every member, including their sessions and join codes;
• your membership and display name in bands other people own;
• your clock-measurement record and your band create and join counters.

To stop a deleted account's last sign-in from writing new data, the server keeps a minimal deletion marker. It is keyed by your account's internal identifier, contains only its state and timestamps, and holds no name, email or content. It is kept for about three hours after deletion completes and is then removed by Firebase's automatic expiry, which can run some time after that, typically within about a day. If a deletion is interrupted part-way, a marker can remain until the deletion is completed.

On this device

After a successful deletion the app signs you out and removes that account's on-device library from the device you deleted it from. If you used the account on other devices, its on-device library there stays until you delete it in the app or delete the app.

Your signed-out library on each device is never part of your account. Delete those songs and setlists in the app, or delete the app to remove them.

What deletion can't reach

• NomeNome Pro stays with your Apple ID and can be restored later.
• Setlist files you have exported and sent to others remain with their recipients.
• Records held by Apple, such as your purchase history, are governed by Apple.

If you can't use in-app deletion, for example because your sign-in method can't be confirmed in the app, contact us using the link below.

13. Children

NomeNome is not directed at children and we do not knowingly collect personal information from children through accounts. The metronome itself can be used without an account.

14. Changes to this policy

If what the app collects changes, we will update this page and its effective date before the changed version of the app is released.

15. Contact

Questions or requests about your data: contact Codésence.