Privacy,by construction.

1. Who we are

PianoLock is an iPhone application operated by Khaled Barakat, a sole proprietor based in Dubai, United Arab Emirates (“PianoLock,” “we,” “us,” or “our”).

This Privacy Policy explains how information is processed when you use the PianoLock mobile app, visit pianolock.com, or contact support. Questions can be sent to support@pianolock.com.

2. Privacy summary

• No PianoLock account is required.
• Microphone analysis happens on-device; raw audio is not saved or uploaded.
• MIDI note activity is processed on-device; complete performances are not uploaded.
• Apple provides protected-app selections as privacy-preserving tokens.
• Progress, schedules, rules, and safety-use history are stored locally.
• Apple processes purchases and subscriptions through the App Store.
• Limited technical crash and performance data may be sent to Sentry when crash reporting is enabled.

3. Information processed on your device

Setup, rules, and progress

PianoLock stores your selected goal, piano type, detection method, practice-to-access ratio, schedule, streak and progress information, earned-access state, and neutral records of emergency access or scheduled pauses. These records support the features you configure and remain in the app’s local storage or shared iOS App Group.

Microphone input

If you choose microphone detection, PianoLock uses the microphone during a compatibility test or active practice session to estimate pitch, confidence, input level, and whether piano activity is present. Processing occurs on the iPhone. PianoLock does not create an audio recording, save raw audio, upload raw audio, or send raw audio into JavaScript, analytics, or crash reports.

MIDI input

If you choose MIDI, PianoLock processes compatible note-on, note-off, velocity, timing, source-status, and connection events needed to verify active playing. The app may display recent note information locally for setup and diagnostics. We do not upload complete MIDI performances or use them to reconstruct what you played.

Screen Time selections

Apple’s Family Activity Picker represents selected apps, categories, and websites with opaque, privacy-preserving tokens. PianoLock stores those tokens and aggregate selection counts so its Screen Time extensions can shield or unshield your selection. PianoLock does not attempt to identify, profile, or transmit the underlying app names.

Local diagnostics

PianoLock keeps a limited rolling log of technical events such as authorization requests, shield changes, practice interruptions, schedule synchronization, and purchase outcomes. These diagnostics use restricted metadata such as environment, runtime mode, result, and process target. They do not contain raw audio, full MIDI history, private app identities, payment credentials, or passwords. You may choose to export a redacted diagnostic report when requesting support.

Demonstration marker

A versioned marker indicating whether the one-time free demonstration was consumed is stored in the iOS Keychain on that device. It is not connected to a PianoLock account or direct identity. iOS Keychain items may survive deletion and reinstallation of an app.

4. Information handled by service providers

Sentry — crash and performance diagnostics

When Sentry crash reporting is enabled in a production build, PianoLock may send technical error and performance information such as stack traces, app version, operating-system version, device model, process target, timestamps, and related device or network metadata. We configure Sentry not to send default personally identifiable information and do not intentionally attach raw audio, MIDI performances, Screen Time tokens, protected app identities, or purchase credentials.

Sentry processes this information for us only to diagnose crashes, reliability problems, and performance issues. Learn more in Sentry’s Privacy Policy.

Vercel — website delivery

This website may be delivered through Vercel. Like most hosting and security providers, Vercel may process standard request information such as IP address, browser or device type, requested URL, and time of access to operate, secure, and deliver the website. PianoLock does not install its own website analytics, advertising pixels, or marketing cookies at launch. See Vercel’s Privacy Policy.

Cloudflare and Google — support email

Messages sent to support@pianolock.com may be routed through Cloudflare Email Routing and delivered to a Google-hosted mailbox. Those providers process message headers and contents to route, secure, and deliver your email. Their respective privacy policies apply to that processing.

Legal and safety disclosures

We may disclose information if reasonably necessary to comply with law, legal process, enforce our terms, protect rights or safety, or investigate misuse. We do not sell or rent personal information. Service providers are required to protect information consistently with their agreements and applicable law.

5. iOS permissions and controls

PianoLock may request:

• Microphone: to detect audible piano notes and active playing while you are testing or practicing.
• Family Controls / Screen Time: to let you privately select and shield distracting apps during your schedule.
• Bluetooth or local-network-related access: when required by iOS for compatible MIDI accessories or development connectivity. Production behavior is limited to supported piano input.
• Notifications: if introduced and enabled, to show reminders or time-sensitive status updates you request.

You can revoke permissions in iPhone Settings. Removing a required permission may prevent the related feature from working. PianoLock is designed to remove enforcement safely when authorization or a valid subscription is lost.

6. Purchases and subscriptions

Purchases are processed by Apple through StoreKit and the App Store. We do not receive or store your full payment-card number, bank details, or Apple Account password. PianoLock receives product and entitlement information needed to determine whether a subscription is active, in trial, in billing grace period, expired, refunded, or revoked, together with renewal and expiration status where Apple provides it.

Apple retains transaction information according to its own policies. See Apple’s Privacy Policy.

7. Retention and deletion

• Device-local app state: retained while PianoLock is installed, until you reset applicable settings, or until iOS removes the app container. Deleting the app generally removes its container and App Group data.
• Keychain demonstration marker: may remain after uninstall because of iOS Keychain behavior. It contains only a versioned consumed/not-consumed marker and is retained to prevent repeated free demonstrations.
• Crash and performance events: retained only as long as reasonably needed for reliability work and for no longer than 90 days in our configured diagnostic system, unless law requires a longer period.
• Support correspondence: retained while handling your request and, unless continued retention is necessary for a dispute or legal obligation, for no longer than 24 months after the last support interaction.
• App Store transactions: retained by Apple under Apple’s policies. PianoLock’s local entitlement cache remains only as needed for the installed app to operate.
• Website logs: PianoLock does not maintain a separate analytics database. Hosting-provider security and delivery logs follow the provider’s retention controls.

Because PianoLock has no user account or custom backend, we cannot remotely inspect or delete device-local app state. You control that data on your iPhone. For help with deletion or with identifying a support or diagnostic record, contact us.

8. Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or a copy of personal information we control.

• Revoke microphone, Screen Time, Bluetooth, or notification permissions in iPhone Settings.
• Stop enforcement at any time through PianoLock’s safety controls or by removing Screen Time authorization.
• Manage or cancel subscriptions through your Apple Account.
• Delete support emails by asking us at support@pianolock.com.
• Delete the app to remove its normal app-container data, subject to the Keychain caveat above.

We may need enough information to understand and verify a request. We will not discriminate against you for exercising applicable privacy rights. You may also complain to the relevant data-protection authority in your jurisdiction.

9. Children

PianoLock is not directed to children under 13, and we do not knowingly collect personal information from children under 13. A parent or guardian should supervise use by a minor and approve any Screen Time permissions or subscription purchase required by local law. If you believe a child sent personal information to support, contact us.

10. Security and international transfers

We use reasonable technical and organizational measures appropriate to the limited information we process. No system is completely secure, and we cannot guarantee absolute security.

Service providers may process information in countries other than yours, including the United States. Where required, processing is subject to provider agreements and lawful transfer safeguards.

11. Changes to this policy

We may update this Privacy Policy as PianoLock changes or legal requirements evolve. We will change the “Last updated” date and, when appropriate, provide a more prominent notice in the app or on this website. Material changes apply prospectively unless law requires otherwise.