Privacy Policy

Last updated: 23.09.2026 · applies to the abtakt app (beta) and this website. The German version (Datenschutzerklärung) is authoritative.

In short: abtakt needs no account. What you upload is stored in Frankfurt, Germany (AWS) so that we can turn it into rehearsal notes. We use no tracking, no ads and no analytics SDK. You can delete all your data in the app at any time.

1. Controller

Vladimir Viro, Augsburg (Germany). Postal address: see Imprint.
E-mail: datenschutz@abtakt.com

No data protection officer is appointed because none is legally required. Please send any questions to the address above.

2. Data we process

a) Installation ID

When the app first contacts our server, it receives a random installation ID and a secret key. The key stays in your device's keychain; we only store a one-way hash of it. The ID is not derived from device identifiers and is not an advertising ID. We also store the platform and app version.

b) Uploaded recordings and scores

When you upload a rehearsal recording or an audio file, we store the file. Recordings may contain the voices of choir members and the conductor's speech, and sometimes names mentioned during the rehearsal. This is personal data. When you upload scores (PDF or images), we store these files. For each upload we also store the file name, type, size, time and the details the app sends with it (such as the recording date or the work).

c) Choir spaces

When you enter an invite code, we store that your installation belongs to that choir space.

d) Reports

When you report content (for example for an infringement), we store your report and, if you provide it, your contact details. Reports are not linked to your installation ID.

e) Technical data

For every connection, AWS servers process your IP address to answer the request. We have not enabled access logs for the API or this website. Our own application logs contain no IP addresses, file names, content or keys, only technical events (such as "upload created" and error types). We delete them after 30 days.

f) Data that stays on your device

Recordings, scores and notes you do not upload stay on your device. The demo content is built into the app.

3. Purposes and legal bases

• Providing the app and analysing your uploads to create rehearsal notes (conductor's remarks, bar positions, pronunciation): Art. 6(1)(b) GDPR (contract under our Terms of Use).
• Voices of other people in recordings (choir members): Art. 6(1)(a) GDPR – consent obtained by the person recording before the recording (see section 4). Consent can be withdrawn at any time for the future, towards the conductor or us.
• Secure operation (abuse prevention, debugging, monthly limits): Art. 6(1)(f) GDPR. Our legitimate interest is a stable and secure service.
• Handling reports: Art. 6(1)(c) GDPR together with Art. 16 of the Digital Services Act (DSA), and Art. 6(1)(f) GDPR.

We do not use your uploads to train AI models, do not pass them on to third parties and do not build a catalogue from them. There is no automated decision-making within the meaning of Art. 22 GDPR.

4. Important for conductors: inform your choir first

Recording a rehearsal also records other people's voices. Please inform your choir before recording: that you record, why (rehearsal notes with abtakt), where the recording is stored (AWS, Frankfurt) and for how long (until deleted). Obtain the members' consent, for example once at the start of the season, and do not record if someone objects. You can refer them to this page.

5. Recipients and storage location

We store all data with Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, in the region eu-central-1 (Frankfurt am Main, Germany). AWS processes the data as our processor under Art. 28 GDPR (AWS Data Processing Addendum). Data is encrypted in transit (TLS) and at rest. As AWS belongs to a US group, access from the US cannot be ruled out completely; AWS is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply in addition.

Only the operator has access to uploads. Packages in a choir space are visible only to installations that entered that space's invite code. The app is distributed through Apple's App Store; Apple is responsible for the data it processes there.

6. Retention and deletion

• Uploads, choir space memberships and the installation ID: until you delete them. The app's "Delete my data" function immediately deletes all your uploads (files and records), your memberships and the installation itself. There are no additional backup copies.
• Application logs: 30 days.
• Reports: until handled, at most three years.

If you delete the app without deleting your data first, your uploads remain stored until you write to us. We can only identify them if you tell us when and what you uploaded.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)). Write to datenschutz@abtakt.com. As we keep no accounts, the quickest way to delete your data is the function in the app.

Export: "Export my data" („Meine Daten exportieren“) in the app gives you a copy of everything our server stores for your installation at any time – installation details, choir space memberships, uploads with status and details, and time-limited download links to your files – in a machine-readable format (JSON; Art. 15 and 20 GDPR).

If you can be heard on a recording someone else uploaded, contact the conductor or us directly.

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

8. Obligation to provide data

You do not have to upload anything. Without uploads abtakt cannot analyse your recordings; the demo content and recording on the device still work.

9. Website

This website sets no cookies, loads no third-party content and uses no tracking. It is delivered through Amazon CloudFront; your IP address is processed only to deliver the page and is not stored by us.

10. Changes

We update this policy when the app or the law changes. The date at the top shows the current version.