Privacy Policy

The short version

• Your songs, setlists and gig history are files on your Mac. Segue never uploads them, and we never see them.
• Segue has no accounts, no ads and no tracking. We don't sell or share your personal information.
• Segue sends usage statistics and crash reports only if you say yes to each one, and you can change your mind at any time in Settings > Privacy.
• A bug report is sent only when you press Send, after you've seen everything in it.
• This website sets no cookies. It counts visits with Cloudflare Web Analytics, which doesn't use cookies or track you across sites.

Who we are

Segue is made by Ryan Rony Dsilva, an independent developer in the United States ("we", "us"). We decide how the information described here is used, which makes us the "controller" under European data protection law. You can reach us about anything in this policy at segue@ryandsilva.dev.

This policy covers the Segue app for Mac from the Mac App Store, this website (segue.ryandsilva.dev), the Segue feature board, and email you send us.

What stays on your Mac

Your library is a folder you choose. Your songs (ChordPro files), the details Segue keeps beside them (tags, proficiency, notes), your setlists and your gig log all live in that folder. Segue's search index, settings and preferences stay on your Mac too. We have no copy of any of it, and no way to get one.

Segue also keeps a short technical log of its last four launches on your Mac, such as when a library opened, how long a show ran and which errors happened. It records only codes, counts and timings, never song titles, lyrics, file names or anything you type. It leaves your Mac only inside a bug report you choose to send.

Removing Segue does not delete your library folder. Back it up like any other folder, for example with Time Machine.

Usage statistics (optional)

Off until you say yes. The first time you open Segue, it asks whether to share usage statistics, with two equal choices and nothing picked for you. Nothing is sent before you answer, and nothing is sent if you say no. You can change your answer at any time in Settings > Privacy; turning it off takes effect immediately and deletes anything waiting to be sent.

What is sent:

• which features are used, from a fixed list built into the app (for example "song created", "setlist created", "show started", "transpose used", or "a search matched a romanized Hindi spelling");
• rough sizes and durations, always as ranges (for example "50 to 99 songs" or "a 60 to 90 minute show");
• the Segue version and the macOS version;
• your Mac's region setting (for example "United States"), which tells us your country. Nothing is worked out from your internet address;
• a random identifier that Segue creates on your Mac, so we can count how many people use Segue over time. Segue scrambles (hashes) it before sending and TelemetryDeck scrambles it again, so neither of us can turn it back into the original. It is not your name, email address, Apple Account or any hardware identifier, and we don't link it to them.

Segue sends these through its own small piece of code that can send only the items above. No analytics software from another company runs inside Segue.

Never sent: song titles, lyrics, chords, notes, file or folder names, setlist names, venue names, anything you type into search, your contacts, your precise location, your internet address (it isn't stored), or any advertising identifier.

Why: to learn which features matter, which ones confuse people, and which versions of macOS to support.

Who processes it: TelemetryDeck, in the European Union (Germany and the Netherlands), with Amazon Web Services, a U.S. company, among its hosting providers, on our behalf. Its privacy policy: TelemetryDeck.

How long: TelemetryDeck has no fixed deletion date for statistics; they may be kept in its archive for up to 10 years. Because the identifier is scrambled twice, those statistics can't be traced back to you or your Mac.

Crash reports (optional)

macOS can give Segue technical reports when it crashes, hangs, or uses too much memory or energy. Segue asks about these separately from usage statistics. If you allow it ("Send crash reports", at first launch or later in Settings > Privacy), Segue uploads these reports automatically. Turning it off stops sending immediately and deletes any reports waiting to be sent.

What is sent: the kind of problem, where in Segue's code it happened (a technical stack trace), the Segue and macOS versions, the type of Mac, its processor and memory, your language setting, technical measurements such as memory and processor use at the time, and a short trail of Segue's own recent steps (codes only, like the log above). Each report also carries a random Diagnostics ID that Segue creates on your Mac, so reports from the same Mac can be grouped and deleted on request. You can see your Diagnostics ID in Settings > Privacy. Crash reports don't contain your songs, file names, your Mac's name, or anything you typed, and Segue strips your user name out of any file path before sending.

Who processes it: Sentry, in United States (Sentry's U.S. region). Its privacy policy: Sentry.

How long: 30 days, then deleted.

Apple's crash reports. Separately, if you've turned on "Share with app developers" in System Settings > Privacy & Security > Analytics & Improvements, Apple shares crash reports and usage figures for Segue with us. Apple controls that sharing under Apple's own privacy policy, and the figures we see from Apple don't identify you.

Bug reports you send

You can send us a bug report from Segue's Help menu (Help > Report a Problem...).

What is sent, and only when you press Send:

• what you write;
• system information, always included and shown to you before sending: the Segue version and build, the macOS version, the Mac model and processor type, your language setting, the approximate size of your library (for example "50 to 99 songs", never titles), and your current privacy choices;
• only if ticked (you can untick them): Segue's technical log of its last four launches, and the latest crash or hang diagnostics macOS gave Segue;
• only if you tick it (it's off every time you open the form): the song that's open, meaning its ChordPro file and Segue's details file. This includes its lyrics, so leave it off if you'd rather not share them;
• only if you enter it: your email address, so we can reply.

Before anything is sent, Segue shows you the complete report, including the full text of every attached file. What you see is exactly what is sent.

Who processes it: Sentry, in United States (Sentry's U.S. region). Its privacy policy: Sentry. Because a report can include your email address, we treat each report as connected to you.

If Segue can't reach the service, it offers to put the same report into an email for you to send (covered by "Email" below) or to save it as a file on your Mac. Nothing is sent later without you.

Why: to find and fix problems, and to answer you.

How long: 30 days, then deleted, including any song you attached. A song you attached is used only to reproduce the problem. You can ask us to delete a report sooner.

The feature board

segue.ryandsilva.dev/feedback takes you to Segue's feature board, run by Featurebase. There you can suggest features, comment, and vote. The board is a separate website; the Segue app sends it nothing.

• What you post is public. Please don't include personal information about yourself or anyone else.
• Email is optional. If you give it, it's used only to tell you about ideas you posted or voted for, for example when one ships, and you can unsubscribe from any such email. We never use it for marketing and never share it.
• Featurebase also collects technical information (such as your internet address, browser details and the cookies the board needs to work) under its own privacy policy: Featurebase. It asks before setting any optional cookies.

How long: posts and votes stay until you delete them or ask us to; your email stays until you unsubscribe or ask us to remove it.

Email

When you write to segue@ryandsilva.dev, your message passes through Mailgun, which forwards it, and is stored in an inbox run by Google (Gmail). We use your email only to help you, keep it as long as needed to answer you, and at most 2 years, and delete it sooner if you ask.

This website

segue.ryandsilva.dev is a set of static pages hosted by Cloudflare (Cloudflare Pages). It sets no cookies, and its fonts and images all come from this site. Like any web host, Cloudflare processes your internet address and request details to deliver the pages and protect the site from abuse, under its privacy policy (Cloudflare (Cloudflare Pages)). We don't receive logs of individual visits.

Website analytics. We use Cloudflare Web Analytics to see how many people visit and which pages they read. When a page loads, a small script from Cloudflare reports the page's address, the page you came from, your browser and operating system type, your screen size, how quickly the page loaded, and your country, which Cloudflare works out from your internet address. It sets no cookies, stores nothing on your device, doesn't build a profile of you, and doesn't follow you across other websites. We see only totals, such as "120 visits to the privacy policy this week". Cloudflare keeps these reports for six months.

Links to the Mac App Store carry a campaign tag (for example "website-hero"). Apple uses it to tell us, in aggregate, how many people found Segue through this website. It doesn't identify you.

Apple

You download Segue from the Mac App Store, and Apple handles that, along with any ratings and reviews you leave, under Apple's own privacy policy (www.apple.com/legal/privacy). We get only aggregate figures from Apple, such as the number of downloads.

Open-source software

Segue is built with a few open-source components, listed with their licences on the Acknowledgements page. None of them sends anything on its own. The only one that talks to a server is Sentry's crash reporting library, and only as described in Crash reports and Bug reports you send.

What we never do

• We don't sell your personal information, and we don't share it for advertising.
• We don't show ads, and we don't track you across other companies' apps or websites.
• We don't build profiles of you or use data brokers.
• We don't ask for an account.
• We don't collect sensitive information such as health, financial or precise location data.
• We don't use your songs to train AI. We never receive them, except a song you choose to attach to a bug report, which is used only to fix that bug.

Legal bases (European Economic Area, UK and Switzerland)

• Usage statistics and crash reports: your consent, given separately for each. You can withdraw it at any time in Settings > Privacy; withdrawing doesn't affect what was sent before.
• Bug reports: your consent when you press Send, and our legitimate interest in fixing and improving Segue.
• Feature board posts and votes: our legitimate interest in learning what to build; board update emails: your consent.
• Email: our legitimate interest in answering you.
• Website hosting, security and website analytics: our legitimate interest in delivering a working, safe website and knowing, in aggregate, how it is used.

Who receives data

Apple handles App Store downloads, ratings, reviews and its own crash sharing as an independent controller under its own privacy policy.

Each provider processes data for us under a contract (its data processing terms) that requires it to protect the data at least as well as this policy does and to use it only to provide its service to us. We may also disclose information if the law requires it, or to protect the safety of anyone.

International transfers

We are in the United States, and our providers process data in the United States, the European Union and other countries. When data from the European Economic Area, the UK or Switzerland is transferred to a country without an adequacy decision, it is protected as follows: usage statistics (TelemetryDeck): Standard Contractual Clauses for any transfer to its U.S. hosting provider; crash reports and bug reports (Sentry, processed in the United States): Standard Contractual Clauses; the feature board (Featurebase): Standard Contractual Clauses for any transfer outside the EU; this website (Cloudflare (Cloudflare Pages)): the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

How long we keep data

Your choices and rights

Turn things off. Settings > Privacy in Segue has a separate switch for usage statistics and for crash reports. Turning either off takes effect immediately.

Ask us. Email segue@ryandsilva.dev to see, correct, export or delete what we hold about you, or to object to how we use it. To help us find it, tell us:

• for crash reports, your Diagnostics ID (shown in Settings > Privacy, with a Copy button);
• for bug reports, the email address you entered and roughly when you sent it;
• for the feature board, a link to your post.

We'll answer within one month, and we may ask you to confirm the request from the same email address.

Usage statistics can't be looked up by person. The identifier in them is scrambled twice and isn't linked to your name, email or Diagnostics ID, so neither we nor TelemetryDeck can find your statistics. Turning statistics off stops all collection.

If you're in the European Economic Area, the UK or Switzerland, you have the right to access, correct, delete, restrict and port your data, to object to processing based on legitimate interest, and to withdraw consent at any time. You can also complain to your data protection authority (www.edpb.europa.eu/about-edpb/about-edpb/members_en ; in the UK, the ICO at ico.org.uk). We'd appreciate the chance to fix things first.

If you're in California or another U.S. state with a privacy law, you can ask to know what we collect, and to correct or delete it, as described above, and we won't treat you differently for asking. We don't sell or share personal information, so there is nothing to opt out of; we treat Global Privacy Control signals as an opt-out anyway. We don't use sensitive personal information. An authorized agent can make a request for you with your written permission.

Security

Everything Segue sends travels encrypted (HTTPS). Only we can access bug reports, crash reports, statistics and email, and our providers secure the systems they run. No system is perfectly secure, so we collect as little as we can in the first place.

Children

Segue isn't directed at children under 13, and the feature board isn't for anyone under 16 in the European Economic Area or the UK. If you think a child has sent us personal information, email us and we'll delete it.

Changes to this policy

When this policy changes, we update the effective date above and note the change in the changelog. If a change affects what the app sends, Segue asks you again before sending anything new.

Contact

Ryan Rony Dsilva
segue@ryandsilva.dev