Pitchou has no account and no server: what you do in the app stays on your phone. Only three things leave it, described below: unnamed measurements, crash reports and the check of your subscription.
What stays on your phone
In the app's database, on your iPhone, and in its backup if you back up your iPhone (to iCloud or your computer):
- your answers, note by note, with the time you took to answer;
- your daily test scores, your streak and your cards;
- your training: where you are, your rounds, your points, your lessons, your games and your plan for the day;
- your answers to the first time's questions: your instrument, your goal, your minutes a day, how you found Pitchou;
- your settings: the note names and the note range.
The test reminder, if you accept it, is scheduled on your phone itself: it goes through no server. The app also keeps eight marks in the iPhone's keychain. Three for the reminder: whether it has already offered it to you, whether you turned it off, and its time. Two for your free trial, so that you are told of its end only once: the trial end a notification is scheduled for, and the one the app told you about itself. Three for the subscription screen: the last day it showed it to you (once a day at most), the day it showed it to you by itself after a daily test (only once), and whether you have already closed it without subscribing. And a few small files in its own folder, so that each step of the first time is counted only once.
“Settings”, then “Erase my data”, erases your database and the reminder's three marks at once, clears the reminders still on your screen and replaces the measurements' identifier (below); the other five marks stay. Deleting the app erases its database; the iPhone keeps the eight keychain marks.
What leaves, and to whom
Unnamed measurements, at PostHog, on servers in the European Union. The app counts a few moments: its opening, the steps of the first time and your answers to its questions (your instrument, your goal, your minutes a day, how you found Pitchou), a finished test with its score and its replays, a finished round, lesson or game with its results, a level gained, a shared card, the subscription screen opened or closed, a trial or a purchase started, the reminder time chosen. With each measurement go the phone's model and system, the app's version and its language. They are tied to an identifier drawn at random for this installation, which carries no name and is replaced after thirteen months, or when you erase your data. Nothing is captured on its own: not your taps, not your screens, no screen recording. And nothing you write, since the app has no field to fill in.
Crash reports, at Sentry, on servers in the European Union. When the app crashes, or when something fails and the app goes on without it: what failed, the screens just before, the phone's model, its system and the app's version; for one screen change in ten, how long it took; and at each launch, a signal with no content, to count the share of launches without a crash. No identifier of a person, no screenshot, not your taps.
Your subscription, at Apple and RevenueCat. Apple takes the payment, with your Apple account's payment method: Pitchou never sees your card. When it opens, the app asks RevenueCat, an American company, whether training is unlocked on this phone. For that, RevenueCat receives an anonymous identifier created for this installation and, after a purchase, Apple's receipt: never your name, your email or an advertising identifier. What goes to the United States goes with the safeguards the European Union requires for such transfers.
What the app does not do
- No account, no email, no name: it does not know who you are.
- No microphone: the app never records anything. An audio library makes it declare a sentence about the microphone, but the app never asks you for access.
- No advertising and no tracking from one app to another: no advertising identifier is read.
- No photos, no contacts, no location.
This site
This site has no cookies and no audience measurement. Like any site, it sees your IP address go by: at Cloudflare, which hosts it, to send you the page, and at Google Fonts, which sends its typeface.
How long
On your phone: until you erase your data or the app. At PostHog and Sentry, measurements and reports stay for their own retention period; they carry no name, and once the app is deleted, their identifier no longer points to anyone. Apple keeps your purchases under its own policy.
Your rights
You can ask what we have about you, have it corrected or erased, or refuse a measurement, by writing to contact@pitchou.app. We answer within a month. Since the app does not know who you are, the surest way remains “Erase my data”, then deleting the app.
If the answer does not suit you, you can turn to the CNIL, the French data protection authority, at cnil.fr.
This data is the responsibility of Jérémy Fraoua, who publishes Pitchou (see the legal notice).