Scorevell Privacy Policy
Effective date: October 1, 2026
NOURETE ("we") describes below how the sheet-music reader app "Scorevell" (the "App") handles your information. If this English version and the Japanese version differ, the Japanese version prevails. The App's screens are in Japanese; menu names are shown below with the Japanese text in brackets.
1. Our approach
- You can use the App without an account. If you do not sign in, your scores, annotations and settings are stored only on your device.
- The App contains no ads and no analytics or tracking tools for advertising or tracking. We do not sell your information or share it with third parties for advertising. (For usage information that the face-detection component sends to Google, see Section 5.)
- Camera images for "Face page turning" and microphone sound for the tuner are processed only on your device and are never stored or sent (Section 4).
2. Information we collect
2.1 When you sign in
| Information | Details | Purpose |
|---|---|---|
| Email address | The address you sign in with. The part before the @ is automatically registered in the profile name field (not shown in the App) | Verifying you (sending codes), managing your account, important notices |
| Password | Stored only in an irreversible (hashed) form; we cannot see your original password | Verifying you |
| Google account information (if you use "Sign in with Google" on Android) | The email address and the account identifier we receive from Google. Google also passes your name and profile picture URL; these are stored on the server but not used by the App. For an organization's Google account (Google Workspace), the organization's domain name is also stored. We never receive your Google password | Verifying you, managing your account |
| User identifier | A number (UUID) assigned when you sign in | Keeping your synced data separate from other users' |
| Library catalog | Titles, composers and score details (arranger, opus, publisher, key, tempo, duration, genre, difficulty, rating, notes, etc.), favorites, bookmarks, tags, sort order, page counts, spread offset | Keeping your devices in the same state (sync) |
| Setlists | Setlist names and the order of pieces | Sync |
| Annotations | Layers (name, visibility, order), handwritten strokes (tool, color, width, pressure, position), symbols (stamps: type, color, position) | Sync |
| Score fingerprints | A fingerprint (SHA-256) and size calculated from each PDF you import. The PDF contents are not sent | To link the same score's details and annotations when you import the same PDF on another device |
We use this information only for the purposes above. Your score PDFs stay on your devices and never reach us. We do not view, analyze or otherwise use the contents of your annotations.
2.2 Records kept even without signing in
When the App connects to our server (sign-in, sync, downloading the dictionary for score search, etc.), the server keeps connection records (IP address, date and time, device and app type). We use them only to investigate problems and prevent abuse.
2.3 Purchases
Purchases, trials and restores are processed by the Apple or Google store. To confirm access to features, we may check the receipts issued by the store with the store. We never receive your credit card or other payment details.
3. Information kept only on your device
Even when you are signed in, we never receive:
- Audio tracks (accompaniment or recording files)
- Links (jump targets within a piece)
- Annotation backups kept on the device
- Display settings (page turning, pen preferences, recent colors, instruments, pedal key mapping, etc.)
- Margin crop settings
4. Camera and microphone
- Face page turning (camera): Only when you turn it on, the App reads the direction of your face and whether your eyes are open from the front camera to turn pages. Images are processed only on your device and are never stored or sent.
- Scanning paper scores (camera): Photos you take are turned into a PDF score on your device. The resulting score is handled like any other score (the PDF contents are not sent).
- Tuner (microphone): Used only while the tuner is open, to measure pitch. Sound is processed only on your device and is never recorded or sent.
You can revoke these permissions at any time in your device settings. Other features keep working.
5. External services
5.1 Service providers handling data on our behalf
| Service | Company | Information | Purpose |
|---|---|---|---|
| Supabase | Supabase, Inc. (USA) | Information in Section 2 (data stored in the Tokyo, Japan region) | Storing and syncing your account and data |
| Resend | Plus Five Five, Inc. (USA) | Email address | Delivering code emails |
5.2 Companies handling data for their own purposes
| Service | Company | Information | Purpose |
|---|---|---|---|
| ML Kit (face-detection component) | Google LLC (USA) | Device model, OS version, app name and version, performance, configuration, feature events (initialization, detection, etc.), error types, a per-installation identifier and similar information (not designed to identify users or devices). No images or face data | Diagnostics and usage analytics by Google. See https://developers.google.com/ml-kit/android-data-disclosure (Android) and https://developers.google.com/ml-kit/ios-data-disclosure (iOS) |
| App stores | Apple Inc. / Google LLC (USA) | Information needed for purchases (handled by each store) | Purchases, trials and restores |
| Sign in with Google (Android) | Google LLC (USA) | Information needed for signing in (handled by Google) | Signing in |
5.3 Score search
"Find scores" [楽譜を探す] opens the selected site in your browser. For IMSLP, the App only opens the work page found on your device; the words you typed are not sent. For other sites such as Mutopia, your search words (converted to Latin letters where possible) are passed to that site, and that site's policy applies.
6. Sharing and providers outside Japan
We do not share your information with third parties except:
- with your consent;
- where required by law;
- when we entrust handling to the providers in Section 5.1 to the extent needed to provide the App.
The companies in Section 5.1 are located in the United States. Through contracts, we confirm that they continuously take measures equivalent to those required by Japan's Act on the Protection of Personal Information, and we check this periodically. The companies in Section 5.2 handle information under their own policies. For information on the United States' personal information protection system, see the materials published by Japan's Personal Information Protection Commission. We will provide details of these measures on request.
7. Retention and deletion
- Synced data is kept while your account exists.
- When you delete a score or annotation, the server keeps the row, including its contents such as titles, notes and strokes, marked as deleted so that your other devices learn about it. These rows are also erased when you delete your account.
- Deleting your account: In the App, go to Settings [設定] → Account and sync [アカウントと同期] → Delete account [アカウントを削除]. This erases the information in Section 2.1 (email address, password, catalog, score fingerprints, setlists and annotations) from our servers. Data on your device is not affected.
- You can also request deletion at https://scorevell.com/delete-account.
- Server connection records (including sign-in records) and email delivery records are kept separately from your account and deleted automatically after each service's retention period.
8. Security measures
- Organizational: We define what information is handled and by whom, and review how it is handled.
- Personnel: Those handling information are bound to confidentiality.
- Physical: Synced data is stored in the provider's managed facilities (Tokyo, Japan region).
- Technical: All communication is encrypted (HTTPS). The server restricts each row so that only you can read and write your data. Server administration keys are never included in the App.
- Understanding the external environment: Synced data is stored in Japan; our providers are in the United States (email delivery is processed in the U.S.). We take the measures above with an understanding of the U.S. system.
9. Children
Sign-in and sync are intended for users aged 13 and over.
10. Your requests
To request access to, correction, deletion or suspension of use of your information, contact us below. We will respond in accordance with applicable law after confirming your identity.
11. Changes
We will announce changes in the App or on this page, and announce important changes before they take effect.
12. Contact
NOURETE Operator's name, address and phone number: provided without delay upon request Email: support@scorevell.com