Privacy policy

Noodle stores what a band needs to rehearse together: your account, the audio and sheet music you upload, and the notes you write about them. There is no advertising and no tracking, and nothing is sold or shared with anyone outside the services listed below.

• Your account. Your email address and display name. If you sign up with a password, a hash of it — never the password.
• Google sign-in. If you sign in with Google, your Google account id and the email on it. If you connect Google Drive to import audio, we keep access and refresh tokens so imports work. Those tokens use the drive.file scope, which grants access only to the specific files you pick — never the rest of your Drive.
• What you put in. Songs, audio files, sheet music, notes and comments, band chat, setlists, events, venues, and polls, along with who created them and when.
• Notifications. If you turn on push notifications, the subscription your browser issues, plus a record of when you last read your feed so it can show what is new.

Setlists you download for offline use — their audio and sheet music — are stored by your browser on your own device. They are not copied anywhere else, and removing the offline copy, or uninstalling the app, removes them.

• Google. Sign-in, and reading the Drive files you choose to import.
• Dropbox. Only if you import audio from Dropbox, and only the files you pick.
• Cloudflare R2. Stores uploaded audio and sheet music.
• Resend. Sends transactional email — password resets and band invitations. Nothing else, and no marketing.
• Sentry. Receives a report when something in the app fails, so it can be fixed. Reports carry the error and where it happened — not your account, your files, or anything you have written.

Each receives only what its job requires. None of them is given your data for their own purposes.

Songs, notes, chat, and setlists are visible to the members of the band they belong to, and to nobody else. Moving a song to another band changes who can see it. Bands are private; there is no public or discoverable content.

You can delete your account at any time from Settings → Account, or see how to delete your account for the full detail of what is removed and what remains.

If this policy changes in a way that affects what we collect or who receives it, the date at the top changes and the change is described here.

Questions about this policy, or a request about your data: help@noodle.band.