Cresc Flow Privacy Policy

Effective: May 6, 2026

Welcome

Welcome to Cresc Flow (the app), a music practice tool built by Tiny Cresc. This Privacy Policy explains what information we collect when you use the app, how we use it, who we share it with, and the choices you have. By using Cresc Flow you agree to the practices described here.

Information We Collect

Account information. When you sign up or sign in, we receive a Firebase user identifier. If you sign in with email, we also receive the email address you provided. If you choose Sign in with Apple or Continue with Google, we receive only the anonymous identifier those services share with the app, never your full Apple ID or Google account contents. Anonymous use creates a random Firebase identifier with no email or name attached.

Practice content. Goals, sessions, notes, media links, composer favorites and unlocks, chat messages, and glossary mastery. This content lives locally on your device. Cross-device sync of practice content is a Premium feature: when you are a Premium subscriber and signed in, it is also stored in your private Firebase account so you can keep working on another device. Without a Premium subscription, this content stays on-device only.

In-app preferences. Theme, language, week start, notification times, vibration, and sound effects. These sync to your Firebase account whenever you are signed in, regardless of subscription tier, so your settings carry across devices.

Audio and microphone. With your permission, the app uses the microphone for the tuner, recorder, ear training, and tone tools. The tuner and ear training tools process audio in real time and never store or transmit it. Practice recordings are saved as audio files on your device. Premium subscribers' recordings are also uploaded to private cloud storage so they sync across devices.

Usage analytics. When the Share Usage Data setting is on, the app reports anonymous events through Firebase Analytics, such as paywall views, purchase outcomes, first-time setup progress, and the completion of your first practice session. These events do not include the contents of your goals, sessions, notes, or audio. You can turn analytics off at any time from this Privacy section.

Purchase information. Subscription receipts and product identifiers are validated through Apple StoreKit and the App Store. We see only Apple's per-app anonymous transaction identifiers and the resulting subscription state. We never see your payment instrument, billing address, or full Apple ID.

Game Center (optional). If you opt in, your Game Center display name and player identifier are used to publish leaderboard scores tied to your tracked practice time. Game Center can be disabled at any time from Account, Settings, Game Center.

How We Use Your Information

We use the information we collect to:

Provide and operate the app's features.
Sync your content across the devices you sign in on.
Authenticate you and keep your account secure.
Process subscriptions and unlock content you have purchased.
Diagnose bugs, measure feature performance, and prioritize improvements (only when Share Usage Data is on).
Respond to you when you contact support, submit feedback, or request a password reset.

We do not sell your information. We do not use it for advertising or profiling, and we do not share your personal practice data with third parties to train AI models on it.

How We Share Your Information

Google Firebase. Authentication, Firestore (your synced practice content), Cloud Storage (Premium audio backups), Cloud Functions, and Analytics. Firebase processes data on our behalf under Google's cloud privacy commitments.

Apple. Sign in with Apple, in-app purchases, and Game Center are handled by Apple. Apple sees only what is needed to provide each service.

Optional integrations you choose. If you submit feedback in-app, the message you provide is sent through a server-side webhook to our team. If you tap a community link (Discord, Reddit, our App Store page) you leave the app and the destination's own privacy policy applies.

Legal disclosure. We may disclose information when required to comply with valid legal process, to protect our rights, or to keep users safe.

We do not sell or rent personal information.

Data Retention and Deletion

Local data is stored in a private storage area dedicated to this app, and is removed when you uninstall the app or tap Reset Data in Account.

Cloud data persists until you tap Delete Account in Account, which signs you out, deletes your authentication record, and queues a server-side cleanup of your Firestore documents and Storage objects. Once a deletion request has been fully processed, your account and content cannot be recovered.

Aggregate analytics events that contain no personal identifiers are retained for the limited window set by Firebase Analytics' default retention policy. You can shorten this window further by turning Share Usage Data off.

Your Choices and Rights

You control your data through these settings:

Share Usage Data. Toggle this off to opt out of Firebase Analytics events.
Reset Data. Wipes all local content from this device.
Delete Account. Deletes your account and all cloud-stored content.
Free Up Local Cache (Premium). Removes audio files from this device while keeping the cloud copy.
Manage Subscription. Opens Apple's subscription page to cancel or change tier.
Game Center, Vibration, Sound Effects, Notifications. Each can be turned off independently in Account settings.
Microphone permission. You can revoke it at any time from iOS Settings, App Privacy, Microphone.

Depending on where you live (for example the EEA, UK, California, or other regions with comparable laws), you may have additional rights to access, correct, port, or delete personal information we hold about you. To exercise these rights, contact us using the email below.

Children's Privacy

Cresc Flow is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has used the app without parental consent, please contact us at the email below and provide the account email or user identifier. Once confirmed, we will promptly delete the account and all its contents, with the same effect as the Delete Account feature.

Security

Account data is transmitted over TLS to Google Firebase and stored under Firebase's standard security model. Per-user content is gated by Firestore security rules that require the request to be authenticated and to match your user identifier. Credentials on this device are stored in iOS Keychain. No system is perfectly secure, however, so please use a strong password and enable two-factor authentication on the Apple or Google account you use to sign in.

International Data Transfers

Firebase services we rely on are operated by Google and may store and process your data in the United States and other regions Google designates. By using Cresc Flow you agree to your data being processed in those regions, with the safeguards Google provides for international data transfers.

Changes to This Policy

We may update this Privacy Policy as Cresc Flow evolves. Material changes will be highlighted inside the app. The Effective date at the top of this screen indicates the latest revision. If you continue using Cresc Flow after a change takes effect, you accept the updated Policy.