Encore Privacy

Last updated: October 22, 2026

This policy explains what Encore ("the app") does with information. Encore is a lyrics-and-chords performance app for live musicians, built by a gigging musician in New York. It is designed to be private by default: the app is fully usable with no account and no network connection.

1. Information stored on your device

By default, everything you create in Encore stays on your device. Your song library, setlists, and performance preferences (such as transpose, capo, tempo, and text size) are saved in your browser/app local storage under the key encore_v1. This is the primary place your data lives, and it never leaves your device unless you take an action that sends it somewhere (like signing in to sync, or sharing with your band).

Because this data is local, clearing the app's storage or deleting the app will remove it. If you want a backup or want it on more than one device, use the optional Google Drive sync described below or export your library manually.

2. Optional Google sign-in (Drive sync & import)

Encore offers an optional Google sign-in, used only if you choose to import songs or sync across devices. It uses Google OAuth. When you are signed in:

• Import: Encore reads the specific Google Docs you explicitly select, so it can turn them into songs in your library. It does not browse or read files you did not choose.
• Sync: Encore saves your library to a file named encore-library-v2.json in your own Google Drive, plus up to 7 dated daily safety copies (encore-library-backup-YYYY-MM-DD.json), so your library can follow you between devices. Older versions of the app used a file named encore-library.json, which Encore keeps up to date for them.

Encore requests Drive/Docs access only. It does not request your name, email, or profile, so the app never receives your Google identity and creates no account for you. This data lives in your Google account. The developer does not receive it, see it, or store it on any server. Your use of Google services is also governed by Google's own privacy policy (policies.google.com/privacy). You can revoke Encore's access at any time from your Google Account's security settings, and you can delete the Encore library files from your Drive whenever you like.

3. Optional band live-sync & setlist sharing

Encore includes optional features that let you host a live performance session or share a setlist with your bandmates using a short random code. When you start one of these, the relevant song or setlist content is written to a Google Firebase Realtime Database (a developer-owned Firebase project) under that code, so people who have the code can join and follow along.

When you host, Encore signs your device in anonymously with Firebase so only your device can change your session. This creates a random ID with no name, email or account, used for nothing else.

A live session is removed automatically after the host has been offline for 6 hours or the session has been idle for 24 hours, and shared setlists are kept for up to 90 days.

This is transient sharing that you initiate. It only happens when you choose to host or share, and it exists so your band can see the same content in real time. Do not put anything in a shared session that you would not want a person with the code to see.

4. Email signup

If you enter your email in a "notify me" form on this website or in the web app, it's used only to email you when Encore is on the App Store. It's stored in our website host's form inbox (Netlify), never sold or shared, and deleted on request: email contact@encore-app.live. With each signup, Netlify also saves the address of the page you signed up from (without any campaign tag), your IP address and your browser type; they're deleted along with your email. The iPhone and iPad app never asks for your email.

5. Analytics & crash reporting

Encore sends a small number of anonymous usage events so I can tell whether the app is working for people: for example app_open, song_added, perform_start, paywall_view, and purchase. Each event carries only the event name, a timestamp, a few simple counts or labels (like how many songs were imported), and a random install ID that the app creates on your device. That ID is not tied to your name, email, Google account, or Apple ID.

On this website and in the web app, Encore notes which website sent you (the site's name only, like instagram.com, not the page), any campaign tag in the link you tapped, whether you tapped through to the app or signed up for the launch email, and, in the web app, whether you're using the home-screen version, so I can tell which posts bring people in. It's tied only to a random ID stored in your browser, never to your email.

Events go to PostHog (posthog.com, US servers), an analytics service that processes them for me. Encore tells PostHog not to build a profile of you, and the project is set to discard IP addresses. Encore never sends song titles, lyrics, artist names, setlist names, or any personal information. If your device or browser sends a "Do Not Track" signal, no events are sent at all. Deleting the app deletes the install ID.

If an in-app purchase fails, that one event also includes the App Store country your Apple account is set to (for example "USA"), so I can tell a regional store problem from a bug. It's your App Store region, not your location, and it's sent only when a purchase fails.

If syncing with Google Drive runs into a problem, the app also sends a short diagnostic event: which step failed (signing in, or reading and saving your library in Drive), the kind of problem (for example "network"), and whether a retry fixed it. It never includes the error message, your file names, or anything from your songs.

If you email support from inside the app, the draft includes your app version, platform, operating system, device model, and whether you have Pro, so I can help faster. You can see that information, and delete it, before you send.

Crash reporting is not enabled, so the app sends no crash logs. The only diagnostic data is what's described above.

6. What Encore never does

• No ads.
• No tracking of you across other apps or websites.
• No selling or sharing of your data with data brokers.
• No collection of payment card details. Encore Pro bought in the app is handled entirely by Apple. Encore Pro bought on the web is processed by Paddle.com, our reseller and Merchant of Record, which shares your email address, country and order details with me so I can deliver your license key and help with support or refunds. I never see your card details. To make the 3-device limit work, Encore's server stores your license key and a random ID for each browser you activate it on (no name or email). To have your purchase record deleted, email me; Paddle and I may keep what tax and accounting law requires.
• No accounts. Apart from what Paddle shares when you buy Encore Pro on the web (above), the only contact detail Encore collects is the optional notify-me email described in §4.

7. Children's privacy

Encore is a general-audience music tool and is not directed at children under 13. The app does not knowingly collect personal information from children. Because the app does not require an account and stores data locally by default, it does not solicit personal details from anyone.

8. Your choices & control

• Use Encore entirely offline with no sign-in.
• Revoke Google access at any time in your Google Account settings.
• Delete the Encore library files (encore-library-v2.json, its daily backups, and the older encore-library.json) from your own Drive.
• Clear the app's local storage or delete the app to remove local data.
• Simply don't host or share a session if you don't want any content sent to Firebase.

9. Changes to this policy

If this policy changes, the "Last updated" date above will change with it. Material changes will be reflected here before they take effect.

10. Contact

Questions about privacy in Encore? Email contact@encore-app.live.

11. Copyright & DMCA

Encore is a tool for musicians to perform their own charts. It doesn't host a song catalog. Your library lives on your device and in your own Google Drive. The only content that passes through Encore's servers is what a user chooses to share in a live session or by setlist code, and shared setlists are deleted automatically after 90 days.

I respect the rights of songwriters and publishers. If you believe content shared through Encore infringes your copyright, send a notice to my designated agent:

Designated Copyright Agent
Copyright Agent, Encore Wave
329 South Oyster Bay Road, PMB 2270, Plainview, NY 11803
Phone: (516) 986-8020
Email: contact@encore-app.live

Your notice should include:

• Your physical or electronic signature.
• The copyrighted work you believe is infringed.
• The material you want removed, with enough detail to find it (for example, the session or setlist code).
• Your name, address, phone number and email.
• A statement that you believe in good faith the use isn't authorized by the copyright owner, its agent or the law.
• A statement, under penalty of perjury, that your notice is accurate and that you are the owner or are authorized to act for the owner.

When I receive a valid notice, I remove or disable the material promptly. If your content was removed and you believe it was a mistake, you can send a counter-notice to the same address. In appropriate circumstances, Encore blocks sharing for users who repeatedly share infringing material.