Privacy
Partitoria Studio develops Partitoria. Your personal library stays on your device; the public app has no Partitoria registration or sign-in. The Google Play release is in preparation. Store-purchase processing below applies when subscriptions are enabled in the corresponding release.
PDFs, images, audio and recordings, metadata, tags, collections, practice history, annotations and programmes stay local and are not sent to Partitoria servers. There is no advertising, behavioural analytics, social SDK or cloud library. Support receives only what you choose to send to support@partitoria.app; do not send scores, backups or payment secrets for an ordinary request.
To verify and restore Google Play Pro, the app sends its installation identifier and public key, app version and package details, purchase token and selected product/period, proof of key possession and Google Play Integrity results over HTTPS. The service receives an IP address and ordinary network information for delivery, security and abuse prevention, not advertising. Google Play verifies purchases; its change notifications and periodic reconciliation update access. Partitoria receives no card number, Google-account password or library content. Google processes payment and Integrity under its own policies.
If complimentary Pro access is provided, activation and renewal use HTTPS without email, a Partitoria account or payment. The server holds the technical installation public key and hash, access purpose and terms, grant status and maximum issued licence expiry. Full codes are not stored in the database or logs: a keyed verification value and masked representation are retained. An unfinished challenge lasts 120 seconds; completed responses are retained for 24 hours, and technical administrative audit and operation receipts for 180 days. Scheduled cleanup runs hourly for these records with limited retention periods. Revoked or disabled installation records remain while the code record exists to prevent reactivation. These are technical access records, not anonymous data; no scores, library content or payment details are sent. Contact support@partitoria.app about these records.
An encrypted purchase record lasts during access and up to 60 days after it ends; an unfinished purchase acknowledgement is retained until its state is resolved. Store-notification deduplication records last 32 days and completed one-time challenges one day. Replaced-token hashes, installation-binding digests and anti-replay counters, as well as voided-purchase records including actual order identifiers and status, are retained without a fixed deletion period. These records are not claimed to be anonymous and contain no library files. Server-data backup copies are protected and follow a 30-day retention policy; scheduled cleanup removes copies older than that period. Separately held signing and recovery keys, material containing only service identity and verification receipts without backed-up content are kept for service recovery outside this data-copy policy. Any archive that also contains server data remains subject to the 30-day policy. Contact support@partitoria.app for access, correction or deletion requests; required and necessary anti-replay records may remain. Deleting the app or server data does not cancel a Google Play subscription.
The microphone starts only after you choose to record and grant Android permission. Recording is visible, stops on interruption, is not analysed and is never uploaded automatically. Saved audio stays free to play, export and recover. You can delete and export local items; portable backups exclude Pro licences and purchase tokens. Android automatic backup excludes the library database and managed files: use a complete manual backup for transfer.
Explicit online searches send the query, IP address and User-Agent to external archives over HTTPS. They may infer approximate location and retain logs for security or aggregate statistics. For import, export and backup, you choose a destination in Android’s system file picker. The selected local or cloud provider handles access and transfer under its own terms; this is not a library upload to Partitoria servers.
Partitoria is for musicians aged 13 and over and adults. Follow local consent rules for minors’ online services. The website detects browser language; a manual choice is saved only with your agreement in this browser for 180 days, is not used for tracking and is removed by clearing site data. The site has no analytics or advertising cookies. Hosting receives ordinary network information, including IP addresses, to serve and protect the website.
Request deletion of Partitoria data
- Email support@partitoria.app with the subject “Partitoria data deletion” and describe which server-side data you want deleted. You can request this without the app or a Partitoria account.
- Provide information you already have to help us locate your records: an installation or access identifier previously supplied to you, or a Google Play order reference where relevant. These are optional; you do not need to find a hidden technical identifier. Do not send access codes, purchase tokens, passwords, scores, backups or card details.
- We verify that the request relates to your data before acting and may ask for limited additional evidence through support. We explain what was deleted and which records must remain, with the reason and retention period.
A verified request can remove support correspondence and server-side purchase-verification, access and device records that are no longer needed for the service or the retention purposes below.
Necessary protection records may remain: installation-binding hashes and counters, replaced-token hashes and voided-order identifiers/status have no fixed automatic deletion period. Code/grant bindings and revoked or disabled installation records remain while the code exists. Other technical records follow the 120-second, 24-hour, 32-day, 60-day-after-access and 180-day periods described above; unresolved purchase acknowledgements remain until resolved.
Server-data backup copies follow the 30-day retention policy above and are removed by scheduled cleanup. Deleting a live record does not instantly erase an existing protected backup copy.
Partitoria does not hold your local library. Delete local scores or recordings in the app and manage any copies you exported or placed with another provider. Deleting data or uninstalling Partitoria does not cancel a Google Play subscription; cancel it separately in Google Play.
Previously issued closed access
This applies only to existing participants of the former separate closed channel, without offering public registration. Confirmed email, device and licence details are processed for that earlier access. Resend delivers mail (US storage; email and logs: 30 days); open and click tracking are off. Our audit and code-free delivery metadata last up to 90 days. Request deletion at support@partitoria.app, including without the app; requests are verified before action. Your local library remains. An earlier signed offline grant may last until its displayed expiry, at most 30 days; this is not the Google Play licence period. Server-backup deletion is described above.