Privacy Policy

This Privacy Policy describes how OAK TEK - FZCO ("we," "us," or "our") handles information in connection with the Open Chord mobile application for Android and iOS ("the App"). We are the data controller for the information we collect through the App. Google, as the provider of the advertising service described below, decides for itself how it uses advertising data, and is responsible for that use.

Your use of the App is also governed by our Terms and Conditions.

Where Open Chord Is Offered

Open Chord is offered only in selected countries. It is not offered in the European Economic Area, the United Kingdom, or Switzerland, and it is not designed to comply with the data protection laws that apply specifically in those places. If you are in one of those places and use the App anyway, we will still honour any data protection right that the law of your country gives you, and you can contact us at the address below.

Age Requirement

Open Chord is intended for users aged 13 and older. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the email address below and we will remove it.

At a Glance

What	Who receives it	Can you stop it?
Your progress, streaks and settings	Nobody. They stay on your device.	Yes, "Clear all data" or uninstall
Microphone audio for the tuner	Nobody. It is analysed on your device and never recorded.	Yes, revoke microphone permission
Anonymous usage events and error details	PostHog, for us	Yes, analytics toggle in the App
Crash reports (Android only)	Google Firebase Crashlytics, for us	No in-app switch. Uninstalling stops it.
Advertising data (advertising ID, IP address, device details, ad interactions)	Google AdMob	Partly, through the consent choices and your device ad settings
Instrument sound files download	jsDelivr (your IP address)	Only by not using the sounds

Information We Collect

Open Chord does not require you to create an account. We do not collect your name, email address, or any other personal contact information. The App has no free text entry fields, so there is no written content for us to collect.

Data Stored on Your Device

All of your learning progress, including which Test questions you have answered and which ones you find difficult, your preferences, and your settings, including your chosen reminder time, are stored locally on your device. This data is not transmitted to us. You can delete all of it at any time using the "Clear all data" option in the Guitarist tab, under My Profile, in the My Data section. Clearing your data also gives your installation a new anonymous identifier, as explained under Usage Analytics below.

The App also caches its instrument sound files on your device so they need not be downloaded again. These files contain no information about you and are removed when the App's data is cleared or the App is uninstalled.

Microphone Access

The App includes an instrument tuner that requires access to your device's microphone to detect pitch in real time. All audio captured by the microphone is analysed entirely on your device using on-device signal processing. No audio is recorded, stored, cached, or transmitted to any server, third party, or external service at any time. Microphone access is used solely for the tuner and for no other purpose. You can revoke microphone permission at any time through your device settings without affecting any other feature of the App.

Daily Reminder

If you turn on the daily practice reminder, the App asks your device for permission to show notifications and schedules a notification on your device at the time you choose. The reminder is created and shown entirely on your device. No information about it is sent to us or to anyone else. You can turn it off in the App or in your device settings.

Sharing the App

When you tap a share button, the App opens your device's own share sheet, and you choose where the message goes. If no share sheet is available, the App copies the message to your clipboard instead. We do not see who you share with or what app you choose. We record only that a share took place, and from which screen, as an anonymous usage event.

Usage Analytics

We use PostHog to understand how the App is used, so that we can see where learners get stuck or stop practising and improve those parts of the App. PostHog processes this data for us, under a data processing agreement, on servers located in the United States.

We collect a fixed set of events that we have defined ourselves. We do not use automatic click tracking, so we do not record every tap or interface element you touch. The events describe:

• Opening the App and completing onboarding, including which guitarist type you selected
• Starting, completing, or leaving a lesson section, practice activity, or challenge, how long you spent, and the self-rating you give a completed challenge
• Completing a practice session, and its length
• Finishing a Test round, with its topic, its difficulty level, the share of questions you answered correctly on the first try, and how long the round took. We do not record which questions you were asked, which answers you gave, or which chords, scales, or tunings were involved
• Using the tuner or metronome, the tuning or tempo, and for how long
• Reaching or losing a practice streak
• Moving between screens and tabs, opening the chord library or a profile section, tapping the continue card, and playing the chord of the day
• Sharing the App, including which screen the share came from and whether the share sheet or clipboard was used
• Technical errors, including the error message and technical trace of a fault in the App, and diagnostic details when the microphone or audio system fails to start

Alongside these events, PostHog records standard technical information such as your device type, operating system version, and App version, and the screen of the App on which an event happened. It assigns a randomly generated identifier to your installation, which is stored on your device, so that repeat visits can be counted. This identifier is not linked to your name or to any account, but we treat it as personal information because it singles out one installation.

PostHog necessarily receives your IP address in transit, as any internet service does. We have configured our PostHog project not to store IP addresses and not to perform geographic lookup, so we do not collect or derive your country, city, or coordinates.

We do not record your screen. Session replay is switched off in the App.

Turning Analytics Off

Analytics are optional. You can switch them off at any time using the toggle in the Guitarist tab, under My Profile, in the Analytics section. When switched off, no further events are sent from your device. Analytics are on by default until you switch them off. The toggle controls usage analytics only. It does not control crash reporting or advertising, which are described below.

Crash Reporting (Android)

On Android, we use Google Firebase Crashlytics to be told when the App crashes, so that we can fix it. When a crash occurs, Crashlytics collects technical details of the failure, including device model, operating system version, App version, and the internal state of the App at the moment it stopped working. It also assigns a randomly generated installation identifier. This information is technical and is not used to identify you. Crash reporting runs automatically and the App has no switch to turn it off. The iOS version of the App does not use Crashlytics.

Advertising

Open Chord is free, with no subscriptions and no paywalls. It is supported by advertising. Adverts are supplied by Google AdMob and appear as a banner at the bottom of the screen on both Android and iOS.

To serve adverts, Google collects information from your device through its advertising software. This includes your device's advertising identifier, your IP address, device and operating system details, the App's name and version, and information about how adverts are displayed and whether you interact with them. Google can derive your approximate location from your IP address. Google uses this information to select and show adverts, which may be personalised, to measure them, to prevent fraud, and for its own purposes described in how Google uses information from sites or apps that use its services and in the Google Privacy Policy. Google decides how it uses this information, and is responsible for that use. We do not receive your advertising identifier, and we receive only aggregate advertising reports, such as the number of impressions and earnings by country.

Your Advertising Choices

• Consent form. Where the law requires it, the App shows Google's consent form before requesting adverts, and the App respects the choice you make there. Where that form is not required or is not available, the App may request adverts without showing it.
• iOS. The App asks permission through Apple's tracking prompt before it can use your advertising identifier. If you decline, the App does not receive your advertising identifier, and you still see adverts, but they will be less relevant to you. You can change this at any time in Settings, then Privacy and Security, then Tracking.
• Android. You can opt out of personalised ads, or delete your advertising ID, in your device settings under Google or Privacy, then Ads. The menu names vary by device and Android version.
• Google's controls. You can manage how Google personalises adverts at myadcenter.google.com.

Open Chord is not directed at children under 13, and we do not ask Google to treat the App as child-directed.

Instrument Sounds

The instrument sounds used in the App are downloaded once from a public content delivery network, jsDelivr, and then stored on your device. As with any request to a website, this reveals your device's IP address and general technical details to that network, which handles them under its own privacy policy. We send no information about you or your practice with the request, and the files are static and identical for every user.

App Stores

Google Play and the Apple App Store collect their own information about your download and use of the App, under their own privacy policies. They may give us aggregate statistics about installs and crashes. We do not control how they handle your information.

Why We Use This Information

What	Why
Data stored on your device	To run the App and remember your progress
Usage analytics	To see where learners get stuck and improve the App
Crash reporting and error details	To detect and fix faults that stop the App working
Instrument sound downloads	To deliver the sounds the App needs to function
Advertising	To keep the App free of charge

Where the law of your country requires your consent for any of these, we rely on the choices you make in the App, in the consent form, and in your device settings.

We do not sell your information for money. Advertising, through Google, involves the disclosures described above, which some laws treat as a sale, a share, or targeted advertising, and the "US State Privacy Rights" section below applies. Apart from that, we do not share your information with third parties for their own purposes. PostHog and Google Firebase Crashlytics handle data on our behalf, as our service providers.

Third-Party Services

The App uses the following third-party services, each of which has its own privacy policy:

• PostHog, for usage analytics
• Google Firebase Crashlytics, for crash reporting on Android
• Google AdMob, for advertising on Android and iOS
• jsDelivr, for delivery of the instrument sound files

The App also links to our website and to our Instagram and X pages. Those sites have their own privacy practices, which we do not control.

International Transfers

We are established in the United Arab Emirates. PostHog stores analytics data in the United States, and Google processes data in the United States and other countries. By using the App, you understand that information about you is processed in countries other than your own, which may have different data protection laws.

Data Retention

Data stored locally on your device remains there until you use "Clear all data" in the App, clear the App's data through your device settings, or uninstall the App.

• Analytics events and the installation identifier: kept for as long as we need them to analyse how the App is used. We set no automatic deletion date. We review what is stored from time to time and delete what we no longer need, and we delete on request as described under Your Rights.
• Crash reports: retained by Google Firebase Crashlytics for 90 days, then deleted automatically.
• Advertising data: held by Google, under Google's own retention practices.
• Aggregated statistics that contain no identifier and cannot be traced back to any device may be kept indefinitely.

We do not maintain our own separate copy of any of this data.

Your Rights

Depending on the law that applies to you, you may have the right to know what information we hold about you, to have it deleted or corrected, to object to or restrict how it is used, to receive a copy, to withdraw your consent, and to complain to the data protection authority of your country.

If you are in the United Arab Emirates, you have rights under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and may complain to the UAE Data Office.

In practice, you can:

• Stop usage analytics immediately using the toggle in the Guitarist tab
• Delete everything held on your device using "Clear all data"
• Request deletion of analytics data already collected by following the steps on our Delete Your Data page
• Manage advertising through the choices described under Advertising above

Because the App has no accounts, the only way we can locate your analytics records is the anonymous installation identifier shown in the My Data section. Without it we hold nothing that would let us identify you, and we may be unable to act on your request. Please copy your identifier before you clear your data, because clearing it creates a new identifier that is not connected to the old one. We cannot delete data that Google holds for advertising. You must use Google's controls for that.

US State Privacy Rights

This section applies to residents of California and of other US states whose laws give similar rights.

Category of personal information	Examples	Disclosed to
Identifiers	Anonymous installation identifier. Advertising identifier, where you allow it.	PostHog, Google
Internet or other electronic network activity	Usage events, screens visited, ad interactions	PostHog, Google
Device and technical information	Device type, operating system version, App version, crash and error details, IP address in transit	PostHog, Google
Approximate location	Derived by Google from your IP address for adverts. We do not collect or derive it.	Google

We collect this information from your device, for the purposes described in this policy. We do not collect sensitive personal information as the law defines it, and we do not use the information to make decisions about you. We keep it for the periods set out under Data Retention.

We do not sell personal information for money. Showing personalised adverts through Google may count as "sharing" for cross-context behavioural advertising, or as "targeted advertising," under some state laws. You can opt out by declining personalised adverts in Google's consent form where it appears, or by turning off tracking or ad personalisation in your device settings, as described under Advertising. Personalisation happens on Google's systems, so we cannot switch it off for you ourselves, and the App does not currently read browser-based opt-out signals such as Global Privacy Control.

You may ask us to tell you what personal information we hold about you, to delete it, to correct it, or to stop selling or sharing it, to the extent we are able to, given that Google controls its own advertising data. We will not treat you differently for doing so. You may use an authorised agent, and we may ask for proof of authority and for your anonymous identifier, as explained under Your Rights. If we refuse a request, you may appeal by replying to our decision, and you may then contact your state attorney general. We do not knowingly sell or share the personal information of anyone under 16 years of age.

Data Security

Data transmitted between the App and our service providers is encrypted in transit. Learning progress stored on your device is protected by your device's own security features. We do not operate our own servers and do not hold a separate copy of your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page and add an entry to the change history below. Where a change materially affects how we handle your information, we will tell you in the App where practicable. We encourage you to review this page periodically.

Change History

• October 14, 2026. Added the Test feature to the list of analytics events: one anonymous event when you finish a Test round, with its topic, level, first-try score, and duration, and nothing about the individual questions or answers. Clarified that your Test answer history is stored only on your device.
• October 3, 2026. Confirmed that PostHog processes analytics data under a signed data processing agreement. Replaced the fixed 12-month analytics retention statement with a statement of how long we actually keep the data.
• October 2, 2026. Described advertising through Google AdMob and the choices you have. Added crash reporting limits, the full list of analytics events, the reminder and share features, and US state privacy rights. Stated that the App is not offered in the European Economic Area, the United Kingdom, or Switzerland.
• August 6, 2026. Previous version.

Contact Us

For any question about this Privacy Policy, or to exercise any of the rights described above, please contact us at:

OAK TEK - FZCO
Dubai Silicon Oasis, Dubai, United Arab Emirates
Trade Licence No. 90142, issued by the Dubai Integrated Economic Zones Authority
Email: oaktechnologiesfze@gmail.com

We aim to respond to any request within 30 days.