Privacy Policy
Last updated: October 26, 2026
This policy explains what personal data Ivory collects when you use the website ivory-app.com and the Ivory app for iPhone and iPad, why, who receives it, how long we keep it, and your rights. It applies under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
In short
- We use your data to run Ivory. We never sell it, and we never use your music to train our models.
- Your audio files are deleted as soon as they are transcribed (the original of a free preview is kept up to 7 days, so you can unlock it).
- Your songs are visible only to you.
- Analytics and advertising cookies are used only if you accept them.
- Deleting your account deletes your songs and your data.
1. Who is responsible
The data controller is Ivory Labs, SASU, 48 Avenue Sergent Maginot, 35000 Rennes, France, registered with the RCS of Rennes under number 107 708 208. For any question about your data: contact@ivory-app.com.
2. What we collect, why, and for how long
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Account: email address, username, password, how you sign in (email, Google or Apple), your preferences (display, email notifications). | Create and run your account. | Contract. | Until you delete your account. |
| Your music: the files you upload and the links you paste, your transcriptions and your corrections, song names and video thumbnails. | Transcribe your recordings and show you the results. | Contract. | Audio files: deleted as soon as they are transcribed; the original of a free preview: up to 7 days, or until you unlock or delete it. Everything else: until you delete the song or your account. |
| Purchases: your subscription (plan, status, dates), your credit history, and the payment references from Stripe or the App Store. We never receive your card number. | Provide what you paid for; keep our accounts. | Contract; legal obligation (accounting). | Until you delete your account. The credit history is kept 10 years for accounting, detached from your account once you delete it. |
| How you found and use Ivory: the website or campaign that brought you to Ivory, the first page you visited, how you signed up, whether you use the website or the app, your approximate country (from your device's language and time zone), the days you use Ivory, the transcriptions you start, and the pages you open before a first purchase. | Understand how people discover and use Ivory, to improve it. Never used for advertising and never shared. | Legitimate interest. | Until you delete your account. |
| Messages: your name, email address and message when you write to us; your posts on the feedback board (shown to other users with your username). | Answer you; improve Ivory. | Legitimate interest. | Messages: up to 3 years after our last exchange. Feedback posts: until you delete your account. |
| Connection logs: IP address, pages requested, date. | Security of the Service. | Legitimate interest. | 12 months. |
We send you emails about your account (password reset), when a transcription you started is ready (you can turn these off in your account preferences), and when feedback you posted is implemented. We do not send advertising emails without your consent.
3. Your music
- Your recordings are used only to create your transcriptions, and the audio files are deleted as soon as they are transcribed.
- Your songs are visible only to you. Ivory's authorized staff can open them only when needed for support or to keep the Service running.
- We never use your recordings, uploads or transcriptions to train our models, and we never sell or share them.
4. Cookies and similar technologies
Essential cookies keep the Service working and need no consent. The others are used only if you click "Accept All" in our banner. You can change your choice at any time with the "Cookie settings" link at the bottom of our pages or the button below; we ask again after 6 months.
| Name | Purpose | Duration | Consent |
|---|---|---|---|
| IvoryAuth | Keeps you signed in. | 2 days | Essential |
| i18n_redirected | Remembers your language. | 1 year | Essential |
| ivory_cookie_consent | Remembers your cookie choice. | 6 months | Essential |
| Preferences | Remember your display, player, editor and library preferences. | Until you clear them | Essential |
| Google Ads, Google Analytics | Measure our traffic and the results of our ads. | Up to 13 months | Your consent |
| Sign in with Google | Shows the Google button, on the sign-in and sign-up pages only. Google may set its own cookies there. | Set by Google | Needed for Google sign-in |
| Stripe | Fraud prevention on Stripe's payment pages. | Set by Stripe | Needed for payment |
Some pages also load fonts, piano sounds and video thumbnails from Google, GitHub and YouTube, which then receive your IP address.
5. Who receives your data
We do not sell your data. It is shared only with the providers below, for the purposes given, and with authorities when the law requires it.
| Provider | What for | Where |
|---|---|---|
| BlazingFast | Hosting of the Service. | Netherlands (Amsterdam) |
| Modal | Computing transcriptions (your audio, without your name or email address). | United States |
| Stripe | Payments on the website. | Ireland, United States |
| Apple | Sign in with Apple and purchases in the iOS app. | United States |
| Sending our emails; Sign in with Google; with your consent, ads and analytics. | United States | |
| Discord | Notifications to our team: messages sent through our contact form, and purchase notices without your email address. When feedback you posted is implemented, its title and text, without your username, are posted on our public Discord server. | United States |
6. Transfers outside the European Union
Some of these providers are in the United States. These transfers are covered by the EU-US Data Privacy Framework for the companies certified under it, or by the European Commission's standard contractual clauses.
7. Security
Your data is encrypted in transit and your password is protected. Your songs can be opened only from your account, and access to our servers is limited to the people who need it.
8. Your rights
You can access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, withdraw your consent at any time, and give instructions for what happens to it after your death. Write to contact@ivory-app.com; we answer within one month and may ask you to prove your identity.
- Deleting your account (account settings) deletes your account, your songs and your data at once. Only the credit history is kept, detached from you, for accounting; Stripe keeps its own payment records. A subscription bought through Apple must also be cancelled in your Apple account settings.
- Your music can be downloaded song by song (PDF, MusicXML, MIDI); for a copy of your account data, write to us.
You can also lodge a complaint with the French data protection authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
9. Children
Ivory is meant for people aged 15 and over. Under 15, a parent or legal guardian must agree to the creation of the account.
10. Changes
We update this policy when our practices change; the date at the top shows the latest version. We tell you by email before a change that matters for you.