Privacy policy

Who we are

KeyLayers is made by North Pocket (“we”, “us”). This policy covers the KeyLayers app on iPhone, iPad, Mac, Android and Windows, and the website keylayersapp.com.

The short version

• KeyLayers needs an account, made once, the first time you open it, with the internet. After that, nothing in KeyLayers needs the internet while you play.
• With your account, we keep your email address and a copy of your songs and sets, so they come back on your other devices, and the keys that unlock our sounds for you.
• Unless you turn it off, the app sends counts of which features are used. Never your songs’ names or what you play.
• We do not sell your data, show ads, or track you across other apps or websites.
• You can delete your account, and everything it has saved, inside the app.

Your account

You need an account to use KeyLayers. You make it the first time you open the app, with Apple, with Google, or with a link we email to you, and it stays signed in on that device until you sign out.

What we keep: your email address, the way you signed in, and when. Apple and Google send us a sign-in token; we never see your Apple or Google password. Apple lets you hide your real address; if you do, we only ever see the address Apple gives us. With Google, the sign-in can also pass along the name and picture on your Google profile; we do not use them.

Why: to sign you in, to unlock our sounds for you, to back up your songs and sets, and to send you the sign-in link when you ask for one.

We send email only to sign you in. No newsletters from the app.

Your songs and sets

While you are signed in, KeyLayers keeps a copy of your songs and sets with your account: each song’s name, its layers and sounds, its mix and scenes, and the order of your sets. That is how they reach your other devices and survive a lost phone.

Settings that belong to one device stay on it: audio outputs, controls you have mapped, appearance, and the keyboards it has seen.

Only you can read your copy. It is deleted with your account. Signed out, nothing is sent.

Usage counts

Unless you turn it off, KeyLayers sends us counts of how it is used, so we can find what is broken or slow. It is on when you install the app. Turn it off any time in Settings → Privacy → Share usage; anything not yet sent is thrown away when you do.

What is sent:

• How many times each feature was used each day, how many different songs were played, and for how long. Never a song’s name, its notes, or anything you type.
• How long each session lasted and which screens were opened.
• Which keyboard model is plugged in. For a keyboard KeyLayers does not know yet, the name it reports over USB, with any personal name removed.
• Problems: the message the app showed, the last few steps before it, and how much memory was in use.
• How quickly the app opened, slow screen updates, and audio dropouts.
• About the device: its model, system version and chip, the app version, your language and region setting, time zone, screen size, and display settings such as dark mode or larger text.
• A random number for this installation, so one device’s counts can be told apart. It is not your name, your device’s name, or an advertising id.

We do not collect your location, contacts, microphone, or your device’s name or serial number.

Usage counts are linked to your account. When you sign in on a device, the counts that device has sent are linked to your account, and so is everything it sends while you are signed in. A device stays linked to the first account signed in on it. With Share usage off, nothing more is sent, but what was already sent stays linked until it is deleted. Counts are sent about once every six hours while the app is open; daily counts go only once the day is over.

Unlocking our sounds

KeyLayers’ own recorded sounds are stored locked inside the app, each with its own key. When you sign in, and from time to time when you open the app signed in, it asks us for the keys your account may use and keeps them in the device’s secure storage (the Keychain on Apple devices). When you sign out or delete your account, they are removed from the device.

Each time keys are asked for we record the time, your account, how many keys were sent and the internet (IP) address the request came from, to stop abuse. We never record the keys themselves. This happens whether or not usage counts are on, because the sounds cannot play without it.

Song requests

When you ask for a song in Settings → Songs, we receive what you wrote: the song’s title, the artist, the link to where it can be heard, the sounds you want, your notes, and the time. You send it signed in, and it is kept in our database with your account’s id (a random number, never your email address), so only players can send requests; it is not linked to your device. We use it to decide which songs to set up next. Delete account… deletes your song requests with your account.

Reports you send

If you tap Send a report… in Settings → Account, we receive exactly what the screen showed you before you sent it: the report code, the app’s version, a line about your device (its system, the system’s version and its chip, never its name), this launch’s session tag, the last part of the app’s own log, and a note if you write one. You send it signed in, and it is kept in our database with your account’s id (a random number, never your email address). Email addresses, sign-in tokens, keys, your home folder in file paths and the names of your devices and keyboards are taken out of the log on your device before it is written, and email addresses again when it arrives. Nothing is sent unless you tap Send report; if it cannot be sent, Email the report opens your own mail app with the same details. A report is kept for 90 days, then deleted automatically, and Delete account… deletes it sooner.

This website and the waitlist

keylayersapp.com sets no cookies and runs no advertising scripts.

To know how many people visit, the site uses Cloudflare Web Analytics, which sets no cookies and keeps nothing that identifies you: it counts page views, which pages, the referring site, the country, the kind of browser and device, and how quickly the page loaded.

If you join the waitlist, the form sends your email address straight to our database, which keeps it with when you joined, your place on the list and when you first signed in to KeyLayers with that address (that is what makes a founding place yours), to tell you when KeyLayers launches and to honour the founding price.

To stop a flood of sign-ups, the database counts how many arrive from one internet address in an hour. It keeps only a scrambled form of the address (a hash), never with your email, and deletes the count after a day.

Where it is kept

• Supabase, which runs on Amazon Web Services, holds your account, your songs and sets, the keys to our sounds, usage counts, song requests, reports and the waitlist.
• Cloudflare serves this website’s pages and counts its visitors.
• Apple and Google handle the sign-in when you choose them, under their own privacy policies.
• Cloudflare also sends the sign-in, confirm and password emails, from signin@mail.keylayersapp.com; it is given your email address and the message, nothing else.

These providers may store data outside your country. They act on our instructions and may not use it for their own purposes. Everything travels encrypted.

How long we keep it

• Your account, songs and sets: until you delete your account.
• Usage counts: 400 days, then deleted automatically. On your device, daily counts are kept for 90 days.
• Records of key requests, with their internet address: 180 days.
• Reports you send: 90 days, then deleted automatically.
• Song requests: until you delete your account, or until we no longer need them.
• The waitlist: until we no longer need it. The count of sign-ups from one internet address: one day.

Deleting your data

• There is one way to delete: Delete account… in Settings → Account, or email us at hello@keylayersapp.com. It removes your account, your saved songs and sets, your song requests and the reports you sent, and the usage counts of every device linked to your account and of this device, which then gets a new random number. It takes the keys to KeyLayers’ sounds off this device. Your songs and sets stay on your device.
• Records of key requests are kept for their 180 days, then deleted automatically.
• To stop sending usage counts without deleting anything, turn off Share usage in Settings → Privacy.
• Deleting the app removes everything it kept on your device.
• For anything else, such as the waitlist, email us and we will delete it.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, to correct it, or to delete it. Email us from the address on your account and we will answer within 30 days. If you are not happy with our answer, you can complain to the data protection authority where you live.

Children

KeyLayers is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has given us data, email us and we will delete it.

Changes to this policy

When this policy changes, we update the date at the top. If a change affects what we collect or how we use it, we will say so in the app before it takes effect.

Contact

Questions or requests: hello@keylayersapp.com.