This Privacy Policy explains how ImpromptuAI handles personal information when you use the ImpromptuAI application, website and related services.
1. Who is responsible for your information?
ImpromptuAI is responsible for the processing described in this Privacy Policy.
Contact:
2. Information we process
Depending on how you use ImpromptuAI, we collect information you provide when signing in, submitting prompts or edits and contacting us; information produced when you use the app; purchase information provided through Apple; and technical information recorded as the service operates. The app’s current App Store privacy disclosure identifies email address, other user content, user ID, product interaction and performance data as data that may be linked to your identity.
Account information
Your Sign in with Apple identifier and, where Apple provides it, your email address or Apple private-relay email address.
Musical requests
Prompts and editing instructions you send to the service.
Generated content
Generated and edited LilyPond score data, musical notation, generated audio, score titles and related generation information. Saved scores and rendered files may also be stored on your device; generation records and output files are processed by the backend.
Generation records
Information such as generation time, job identifier, AI model used, generation status and technical records needed to operate or troubleshoot the service.
Product interaction and usage data
Information about how you use the app, such as features used, generation and editing activity, token usage and the number of generations. This may be linked to your account and used for app functionality and analytics.
Payments and token records
Token balances, token deductions, App Store product and transaction identifiers and records needed to prevent duplicate credits or purchases.
We do not receive your full payment-card details from Apple.
Notification information
The app uses Firebase Cloud Messaging and may create a device or push-notification token. A stored token can be included with generation or editing requests; notification delivery depends on your device settings and permission.
Technical and security information
Server logs, error reports, performance measurements and other limited technical data used to secure, monitor and operate the service. Performance data may be linked to your account and used for app functionality and analytics.
3. Why we use this information
We process information to:
- create and maintain your account;
- generate and edit musical scores;
- render notation and audio;
- save generation and editing results;
- manage token balances and purchases;
- send requested service notifications and respond to support enquiries;
- prevent fraud, abuse and duplicate promotional-credit claims;
- analyse app use, user content, account-linked generation activity and performance to evaluate features and service quality, improve reliability, and diagnose errors;
- maintain service security and meet legal, accounting and regulatory obligations.
The app’s App Store privacy disclosure identifies other user content, user ID, product interaction and performance data as used for both app functionality and analytics; email address is identified for app functionality. These categories may be linked to your identity. This website does not add analytics or tracking cookies.
4. Our legal bases
Depending on the activity, we rely on one or more lawful bases under applicable data-protection law.
Performance of a contract
Where processing is necessary to provide the ImpromptuAI service you request, including accounts, generation, editing and token functionality.
Legitimate interests
Where reasonably necessary to operate, secure and improve the service, prevent fraud, investigate technical problems and protect users and ImpromptuAI.
Legal obligations
Where information must be retained or processed to comply with applicable financial, tax, regulatory or legal requirements.
Consent or device permission
Where applicable, for optional functionality such as notifications or non-essential technologies.
5. AI processing
When you request a generation or edit, your prompt or editing instruction and relevant score content are sent from the app to ImpromptuAI’s service and may be shared with third-party artificial-intelligence providers to generate, edit or repair musical notation and audio. Do not include personal or confidential information in a prompt unless it is needed for your request.
AI processing is performed by one or more independent third-party AI services. Those services may receive the prompt, editing instruction and relevant score content needed to fulfil your request. ImpromptuAI selects the service used for a request, and a repair step may involve another service.
We aim to send only information necessary for the requested processing. These providers process the content to return the requested result; their handling of information may also be governed by their applicable service and privacy terms. If you do not want content sent for AI processing, do not submit a generation or editing request.
6. Other service providers
Service providers used for the described functions include Apple for account authentication and App Store purchases, Firebase Cloud Messaging for push notifications, Render for backend hosting and Cloudflare for website delivery. AI processing is described above. We may use other providers for technical infrastructure and service monitoring.
- cloud hosting;
- website delivery and security;
- AI processing;
- App Store payments and authentication;
- push notifications;
- technical infrastructure and service monitoring.
These providers may process information only as necessary to provide their respective services.
We do not sell personal information or use it for third-party advertising or cross-app tracking. We do not request access to your location or contacts for the described app functionality. Purchases are processed by Apple; we do not receive your full payment-card details.
7. International processing
Some service providers may process information outside the United Kingdom.
Where data-protection law requires safeguards for an international transfer, we use or rely on an appropriate lawful transfer mechanism.
8. How long we keep information
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining security, resolving disputes, preventing abuse and satisfying legal or accounting obligations.
Generation and account records may be retained while your account remains active.
When you delete your account, account-linked information is deleted or anonymised where appropriate, subject to limited records that may need to remain for legal, transaction, security or anti-fraud purposes.
A one-way hashed or otherwise pseudonymous record may be retained to prevent repeated receipt of a one-time introductory token allocation.
Scores and audio saved on your device are separate from backend account records. They may remain on that device after you sign out or request account deletion unless you delete them in My Scores or remove the app. Backend output files and operational logs may need separate deletion from account database records.
9. Account deletion
You can initiate account deletion through ImpromptuAI. For help with deletion or other privacy requests, contact [email protected].
When account deletion completes successfully, account-linked database records including account information, balances and generation history are intended to be removed or anonymised where applicable. If you receive an error or need confirmation that your request completed, contact us.
Certain payment records may be anonymised rather than deleted where they must be retained to maintain transaction integrity or satisfy legal obligations.
10. Your rights and privacy choices
Depending on your location, you may have rights concerning your personal information, including rights to:
- be informed about how your information is used;
- obtain access to your personal information;
- ask us to correct inaccurate information;
- ask us to delete information in certain circumstances;
- restrict or object to certain processing;
- receive certain information in a portable format;
- withdraw consent where processing relies on consent;
- complain to a data-protection regulator.
UK users may have the right to complain to the Information Commissioner's Office.
To ask for access, correction, deletion or restriction, or to object to processing or withdraw consent where we rely on it, contact [email protected]. You can turn off optional notifications in your device settings. You may also stop submitting new prompts or editing requests. Withdrawal of consent does not affect processing already carried out lawfully.
11. Children
ImpromptuAI is not intended to override any age restrictions that apply through the App Store or applicable law.
Where a user is not legally able to consent to relevant data processing or enter into an agreement independently, appropriate parental or guardian involvement may be required.
12. Website technologies
The ImpromptuAI website may use technologies that are necessary to provide, secure and operate the site.
If non-essential analytics, tracking technologies or cookies are introduced, appropriate information and consent controls will be provided where required by law.
13. Security
We take reasonable technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure or loss.
No internet service can guarantee absolute security.
14. Changes to this Privacy Policy
We may update this Policy when the service, our providers or applicable legal requirements change.
The latest revision date appears at the top of this page.
Material changes may also be communicated through the application or website.
15. Contact
Questions, privacy requests or account-related enquiries may be sent to: