Privacy Policy

Effective 6 October 2026

Kordia is a chord chart app for iPhone and iPad. Your songs live on your phone. This page explains the little that reaches our server, why, and how to delete it.

Who runs Kordia

Kordia is made and run by Daniel Rios. In this policy, “we” and “us” mean Kordia. Questions go to theboss@kordiacharts.com.

What stays on your phone

These are saved on your device and never sent to our server:

• your own songs, charts, sets and collections;
• the PDFs and pictures you add;
• your personal key, capo and favourites, even for team songs;
• Recently Deleted, where deleted songs, sets and collections stay for 30 days;
• your settings, and the evening-before reminders, which the phone schedules itself.

Lift

Lift turns a screenshot or PDF into a chart you can edit. Your phone reads the pages itself. It then sends our server only what it read: the words and chords, where they sit on the page, the file's name, the page count and a fingerprint of each page. No picture or PDF is uploaded.

The server builds the chart and sends it back. What it received is deleted when your phone accepts the result, and after 24 hours at most. Apart from that, we keep only how many lifts you've used this month.

Help improve Lift is a switch in Settings, on by default. We don't keep anything for this today. If that changes, this policy will say what is kept and for how long before it starts, and the switch will turn it off.

Free lifts and your device

To count free lifts fairly without an account, Kordia uses two Apple services:

• App Attest proves a request comes from the real Kordia app. We keep the key it creates for your device.
• DeviceCheck lets Apple remember, for your device, whether its free lifts are used up this month, so it holds after a reinstall. Apple doesn't tell us who you are.

Your account

You only need an account to create or join a team, or to get more lifts each month. Accounts use Sign in with Apple. We keep:

• the identifier Apple gives Kordia for you;
• a token from Apple, used only to end the Apple link if you delete your account;
• your sign-in session, stored only as a scrambled code (a hash).

We don't keep your email address, even if Apple shares it with us.

Your profile

Your profile is a first name and a picture: a Kordia character, an icon, or a photo. Only your teammates can see it.

A photo is cropped and shrunk on your phone to at most 256 × 256 pixels before it's sent. Photo details such as location are stripped, and our server refuses any image that still carries them. Teammates see your photo through links that stop working after about a day.

Teams

A team lets a band share charts and sets. For a team, our server keeps:

• its name and image, and its invite code;
• who is in it, each person's role, and when they joined;
• the songs and sets shared with it, as text: titles, keys, charts, set dates and order;
• who changed each item and when;
• short change notes, such as “key changed” or “song added”;
• how far each member has read those notes.

Teams share typed charts only, never your PDFs or pictures.

A team image is resized on the phone to at most 512 × 512 pixels, with photo details removed.

Invite links

An invite link opens a public page. It shows the team's name, image and number of members, and the first name of the person who shared the link. It never shows song titles.

Purchases

Apple handles every payment. We never see your card or bank details. When you buy or restore a plan, the app sends our server Apple's signed record of the purchase, and our server checks it with Apple. Apple then tells our server about renewals, cancellations and refunds. We keep the subscription's Apple transaction number, the plan, its dates and its renewal state.

Notifications

The evening-before reminder is scheduled on your phone. Kordia doesn't send notifications from our server yet. When notes about team changes arrive, our server will keep a notification token for your device to send a short note about what changed, never on the day of a set. You'll be able to turn them off in Settings.

What we don't do

• We don't sell or rent your data.
• We don't show ads or track you across apps and websites.
• The app has no analytics or crash-reporting tools from other companies.
• This website sets no cookies and uses no analytics.

If you choose in iOS to share analytics with app developers, or send feedback through TestFlight, Apple passes those crash reports and that feedback to us.

Who else handles data

• Apple: Sign in with Apple, App Attest, DeviceCheck, notifications and the App Store.
• DigitalOcean: hosts our server in San Francisco, in the United States.

We share data with no one else, unless the law requires it.

Where your data is

Our server is in the United States. If you live elsewhere, what Kordia sends our server is stored and processed there.

Keeping it safe

The app talks to our server only over encrypted connections. Sign-in sessions are stored hashed, and your sign-in stays in your phone's Keychain. Each team's songs, sets and members are visible only to that team.

Deleting your data

Delete your account

In the app, tap your profile picture to open Account, then tap Delete account at the bottom. It removes your account, your sessions, your photo, your lift counts and any Lift data still on the server. It also ends the link with Sign in with Apple. The songs on your phone stay and keep working.

• If you're a member, you leave the team. Songs you added stay with the team, because they belong to it.
• If you own a team with other people, make someone else the owner, or delete the team, first.
• If you own a team on your own, the team and its shared songs are deleted with your account.

Deleting your account doesn't cancel a subscription, because Apple bills it. Cancel it in your Apple Account settings. The subscription's record stays, no longer linked to you, so the purchase can still be restored.

Leave or delete a team

When you leave a team, your teammates stop seeing your name and picture. When an owner deletes a team, our server removes its shared songs and sets, change notes, members, image and invite code.

Songs on your phone

Deleted songs, sets and collections wait in Recently Deleted for 30 days, then they're gone for good.

Your choices

You can change your name and picture in the app at any time. To ask what we hold about you, or to have it corrected or deleted, email us.

Children

Kordia isn't made for children under 13, and we don't knowingly collect their data. If you think a child has given us data, email us and we'll delete it.

Changes to this policy

When Kordia changes how it handles data, we'll update this page and the date at the top.

Contact

Daniel Rios, Kordia
theboss@kordiacharts.com