| Data | Purpose | Legal basis (UK GDPR) |
|---|---|---|
| Email address | Authentication (magic-link login) | Contract performance |
| Skill level, genres, goals | Personalise your practice content | Contract performance |
| Activity logs (tab played, duration, score) | Show your progress history | Contract performance |
| Tabs you upload | Store and optionally share your content | Contract performance |
| Ratings you give to community tabs | Community quality ranking | Contract performance |
| Feedback / bug reports you submit | Improve the Service | Legitimate interest |
| JavaScript errors (file, line, message) | Detect and fix bugs | Legitimate interest |
We do not use tracking pixels, advertising networks, or third-party analytics. We do not sell your data.
When you use chord detection or the tuner the browser asks for microphone access. Audio is processed entirely in your browser using WebAssembly; no audio data is transmitted to our servers.
Your data is stored on a self-hosted Supabase instance running on a Hetzner server in Nuremberg, Germany. The server is located in the EU; data transfers from the UK to the EU are permitted under the UK adequacy regulations. No data is transferred outside the UK/EEA except as part of email delivery (see §4).
Login magic-links and OTP codes are sent via Brevo (formerly Sendinblue), whose servers are located in the EU. Brevo processes your email address solely to deliver authentication emails on our behalf. See Brevo's privacy policy.
We store your session token in the browser's localStorage so you stay logged in. We also use IndexedDB to cache the ONNX machine-learning model locally, avoiding repeated downloads. No third-party cookies are set.
You have the right to access, rectify, erase, or export your personal data, and to object to or restrict processing. To exercise any of these rights, email hello@jamistry.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO).
The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this policy. Material changes will be notified by email. The date at the top of this page always reflects the most recent version.
hello@jamistry.com
See also our Terms of Service.