Privacy Policy
Tango Lyric
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Tango Lyric stores your composition names, selected sound sets, three-part arrangements, instrument choices, volume, tempo, sound character, draft, language and interface preferences, challenge completion and pending backup operations in a local file on your iPhone. It generates a random installation secret and stores it in the iOS Keychain. Saving a composition queues an encrypted snapshot for backup. The server stores that encrypted snapshot, a composition identifier, a hash of the installation secret and the update time in PostgreSQL. Requests pass through Cloudflare, which terminates public HTTPS and proxies to the Railway-hosted service. These infrastructure providers process network information such as IP address, request path, time, device or client User-Agent and response status. The app does not request your name, email, microphone recordings, location, contacts or an account.
How we use information
Local information lets you compose, listen, reopen drafts, compare variations and keep your preferences while offline. Encrypted server snapshots provide a backup for the same installation. The installation secret authorizes access and derives the encryption key on your device. Request metadata and short-lived rate-limit counters help operate, secure and troubleshoot the service. There is no advertising, analytics SDK, marketing profile or email delivery system.
Service providers and sharing
The public API and policy site use Cloudflare as an HTTPS reverse proxy. Cloudflare processes incoming requests, transport metadata and the authorization header to forward requests to the service. The backend and PostgreSQL database are hosted on Railway. Railway and its infrastructure providers process traffic, hosted storage and operational logs to deliver the service. The application server logs startup, shutdown and non-sensitive error events and request identifiers; it does not intentionally log composition content or installation secrets. Your compositions are encrypted before upload, although infrastructure necessarily handles the authorization header in transit to the service. No advertising or analytics recipient is integrated. Information may also be disclosed where legally required.
Data retention
Local compositions and preferences remain until you delete them or remove the app; iOS device backups may contain app data according to your device settings. Keychain items can remain after app removal. Server snapshots remain until you delete the composition or use Delete all local data and backups. There is no automatic expiration period configured for snapshots. Operational and infrastructure log retention depends on hosting configuration and provider practices; no fixed duration is promised here. Any platform-managed backup copies follow the provider lifecycle and are not necessarily erased immediately when a live database row is deleted.
Deleting your information
Delete a composition from Compositions to remove its saved local copy and queue deletion of the corresponding server backup. An open draft remains editable. Settings offers Delete all local data and backups, which resets compositions, draft, challenge completion and preferences and queues deletion of all snapshots for the installation. Offline deletions are retained locally and sent when connectivity returns. Keep the app installed and reconnect until synchronization completes. The installation secret is retained to authorize deletion and future private backups. Deleted live records are no longer returned by the API; infrastructure logs and backup copies may persist under their provider lifecycle. Losing the secret prevents access or recovery and may prevent us from locating a particular encrypted backup.
Permissions and your choices
Tango Lyric requests no protected device permissions. Audio uses bundled instrumental phrases and the speaker or your chosen audio route; the microphone is not used. You can disable haptic feedback, interface sounds and instrument animation in Settings. You can stop playback or change device volume at any time. Network backup needs connectivity, while composing and local saving work offline. Device backup controls are managed in iOS settings.
Your privacy rights
You can inspect, edit, duplicate, restore and delete your compositions in the app. Depending on applicable law, you may have rights to access, correction, deletion, restriction or objection, and to complain to your local data protection authority. For privacy questions or requests, contact Taliesin6Davenant@icloud.com. This address is a public privacy contact only; the app does not collect an email address or send messages. Do not send your installation secret. Because there is no account and snapshots are encrypted, we may be unable to identify or decrypt a backup without information under your control.
Security
The app uses HTTPS to the public Cloudflare endpoint, which terminates TLS and forwards requests to the HTTPS Railway service origin. AES-GCM authenticated encryption protects composition snapshots before uploading them. A key derived from the installation secret stays on the device. The server stores a SHA-256 hash of that secret for authorization and scopes database queries to it. Each installation has its own random secret; there is no shared app password. The local data file uses iOS file protection, and the secret uses device-only Keychain accessibility after first unlock. Request validation, size limits and rate limits reduce abuse. No security method guarantees absolute protection. Do not share the installation secret, and protect access to your iPhone.
Children’s privacy
Tango Lyric is designed for music enthusiasts aged 16 and older and is not directed to children under 16. It has no account, messaging, advertising or social profile features. If you believe a child has supplied personal information through the service, contact the privacy address so the concern can be assessed with the information available.
Changes to this policy
This policy may be updated when app behavior, hosting or legal requirements change. The effective date and policy published at this address will be updated. Review this page for the current description of processing. Material changes will be reflected in the app or its release information when appropriate.