Stage Score — Privacy Policy

iPad app “Stage Score” (on the App Store: “Stage Score: Band Songbook”).
Effective: 2026-10-13

1. Data controller

Tomasz Klicki, sole proprietor trading as Tomasz Klicki Engineering, ul. Lawendowa 6A, 15-523 Grabówka, Poland, Tax ID (NIP) 545-166-22-89.
Privacy contact: tomasz@klicki.pl.

We have not appointed a Data Protection Officer because we are not required to do so.

2. Data in the app — it stays on your device

Stage Score stores the following in its private folder on your iPad (the app sandbox):

• PDF files you add (the app keeps copies),
• a song list with information read from those files (title, composers, tags, key, tempo, song version) and the date added,
• setlists you create or import,
• settings (theme, screen sleep, import behaviour, band mode settings) and the last selected version of each song.

This data is not sent to us or to anyone else (except in band mode, described below). The app contains no advertising, analytics or other third-party SDKs.

File access and permissions. The app does not ask for access to your photos, contacts, location, microphone, camera or Bluetooth. You pick files in the system “Files” browser. Stage Score can only access the files you select there. The only permission the app may ask for is local network access in band mode (section 3).

Backups. If iCloud Backup or computer backups are enabled for your iPad, the system may include Stage Score data in them. These backups are under your control and are governed by Apple's policies. We have no access to them.

Deleting data. To delete all Stage Score data, delete the app from your iPad. This removes the PDF copies, the song list, setlists and settings. Copies in iCloud or computer backups can be removed in your iPad or computer settings.

3. Band mode — iPads on the local network

If you turn on band mode, Stage Score connects directly to other iPads on the same Wi-Fi network, or via Apple's peer-to-peer wireless without a router. The leader runs the session and the other iPads follow. The devices exchange only the information needed to play together:

• which song is open (title, file name) and which version,
• the number of the open page,
• the current setlist (name, position in the setlist, title of the next song),
• the session and leader name and the names of participants — by default your iPad's name, or the name you enter in the app,
• technical connection data: the app version and a random device identifier created by the app.

This information travels only between devices on the local network. It never reaches us (we have no servers) or the internet, and we do not process it. PDF files are not transferred — each iPad uses its own files.

Band mode connections are not encrypted, and other devices on the same network can see the leader's session. Use band mode on a network you trust.

The first time you use it, iPadOS asks for permission to access the Local Network. You can revoke it in iPad Settings → Privacy & Security → Local Network. Without this permission band mode does not work; the rest of the app works normally.

4. Information Apple may share with us

You download the app from the App Store, which is operated by Apple. Apple processes data as an independent controller under its own privacy policy.

• App Store statistics (e.g. number of downloads, country) are visible to us in App Store Connect only in aggregate form. They do not identify you.
• Crash reports and analytics reach us only if you turn on sharing with app developers on your iPad (Settings → Privacy & Security → Analytics & Improvements). We use them only to fix bugs. You can turn this off at any time.

5. Contacting us (email support)

When you email us, we process your email address, your name (if you provide it), the content of your message and any attachments.

• Purpose and legal basis: to reply to your message and continue the conversation. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
• Retention: for the duration of the conversation and up to 12 months after it ends. We keep it longer only if needed to establish, exercise or defend legal claims.
• Recipients: our email provider, Apple Distribution International Ltd. (iCloud+ with a custom domain), acting on our behalf.
• Transfers outside the EEA: The website server is located in Poland (Warsaw), so server log data stays in the EEA. Email is handled by Apple's iCloud+ service, and Apple may transfer data to the USA. Such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, in which Apple Inc. participates.
• Voluntary: providing data is voluntary, but we cannot reply without your email address.

6. TestFlight beta testing (beta testers only)

If you join a pre-release test via Apple's TestFlight app, Apple shares with us the data needed to run the test: your email address and name (if we invited you by email), invitation status, device model and OS version, number of installs, sessions and crashes, and any feedback, screenshots and crash reports you choose to send.

• Source: Apple (TestFlight).
• Purpose and legal basis: to run the beta test and fix bugs. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
• Retention: until testing of the given version ends. We keep feedback and crash reports for up to 12 months if they are needed to fix bugs. We remove testers from App Store Connect after testing ends.
• Recipients: Apple as the TestFlight provider (Apple's privacy policy).

7. This website

This website uses no cookies, no analytics and no tracking tools, and it stores nothing in your browser. Whether the page looks light or dark depends on your system settings.

The Bootstrap stylesheet and script, the fonts and all other files of this website are served from the same server. The website loads nothing from third-party services (CDNs, fonts, scripts), so when you view it your browser connects only to tomasz.klicki.pl.

This website runs on a server rented from OVH Sp. z o.o. (a VPS in Warsaw, Poland). The server keeps standard logs (IP address, time of visit, requested page, browser type) to keep the site secure and running (Art. 6(1)(f) GDPR). We keep these logs for no longer than 365 days, after which they are deleted automatically. The server provider acts on our behalf.

8. Your rights

You have the right to:

• access your data,
• rectify it,
• erase it,
• restrict its processing,
• data portability,
• object to processing based on legitimate interest.

The scope and conditions of these rights are set out in Art. 15–21 GDPR. Send requests to tomasz@klicki.pl. We will reply within one month.

You may also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl), or with the authority in your country of residence.

We do not make automated decisions about you and do not profile you.

9. Children

Stage Score does not collect data from anyone, including children.

10. Changes

If a new version of the app changes how data is processed, we will update this policy before that version is released and change the date at the top.