Privacy Policy

Data controller

The controller for the personal data described here is:

• ›Company: Frank Iversen
• ›Company registration number: 984461178
• ›Postal address: Stuevollvegen 7, 6412 Molde
• ›Email: bugs@strofa.no

Strofa does not carry out processing that requires a data protection officer under Article 37, and has therefore not appointed one. Privacy enquiries go to the address above and are normally answered within 30 days.

Personal data we process

Below is every category we actually store. Most of it is content you enter yourself.

• ›Account: email address and password. The password is stored only as a cryptographic hash at Supabase — we cannot read it. If you use Sign in with Apple, we receive Apple's private relay address instead of your real email.
• ›Profile and artist page: display name, phone number, booking email, bio and links to social media — only what you fill in yourself. If you choose to publish a public artist page, that information is available to anyone on the internet.
• ›Songs and setlists: lyrics, chords, notes, tags, attachments (PDFs, images, documents) and audio tracks. This content may contain personal data if you type it in yourself.
• ›Venues: name, postal address, coordinates for the map view, phone number, email address, notes and photos of the room. The contact details usually belong to someone other than you — see the note on your own responsibility below.
• ›Gigs and calendar: date, times, soundcheck, venue, setlist and notes. Exporting a gig to the iOS Calendar happens locally on your device.
• ›Contracts: the promoter's company or personal name, address, contact person, email, agreed fee, terms and any guest-list names. Contract PDFs are stored in private object storage.
• ›Electronic signing: when a contract is signed we store the signer's name and email address, the timestamp, the IP address and the browser user agent. These details are also burned into the signed PDF, because they are the evidence that the signature is genuine.
• ›Rehearsal recordings: audio you record in the app. A recording made in a rehearsal room can capture the voices of other people present. Recordings are private to you or your band and are kept in private object storage.
• ›Audience data: selfies submitted via a QR code (shown on the big screen), song requests with a first name and a free-text message, and nicknames and answers from the pause quiz. See the separate section below.
• ›Play log and statistics: which songs were played, when and at which gig. Used for the band's own report and statistics.
• ›Display devices: a device name and a free-text location you write yourself ("Stage", "Bar"). This is not location data — it is a label you choose.
• ›Subscription: whether you have an active trial or subscription, and an anonymous user ID tied to the purchase. Payment itself is handled by Apple or Google; we never see your card details.
• ›Technical traces: IP addresses in tables that limit the number of attempts (sign-in, guest code, band invitation, AI usage), and crash reports containing device model, OS version and an anonymised stack trace.

Legal basis

We process personal data on the following grounds under Article 6 of the GDPR:

• ›Contract — Article 6(1)(b): account, songs, setlists, venues, gigs, contracts, recordings, syncing across devices and bands, and subscription status. Without this data we cannot deliver the service you pay for.
• ›Legitimate interest — Article 6(1)(f): security and abuse prevention (IP-based attempt limits), crash reporting to keep the app stable, and automated content moderation of audience submissions before they appear on a public screen. The balancing test rests on the data being minimal, used only for that purpose and deleted quickly.
• ›Consent — Article 6(1)(a): audience photos, names on song requests and nicknames in the pause quiz, plus the advertising-measurement cookie on strofa.no. Consent is given actively before submission and can be withdrawn by asking us to delete the data.
• ›Legal obligation — Article 6(1)(c): purchase and subscription records that must be retained under accounting and bookkeeping law.

Your own responsibility: if you enter other people's personal data — venue contacts, promoters in contracts — or make recordings while others are present, you are responsible for having the right to do so and for informing them. Strofa processes that data on your behalf.

Use of artificial intelligence

Several Strofa features use the Claude language model from Anthropic, PBC (USA). The content is sent to Anthropic for processing at the moment you use the feature. This applies to:

• ›Clean up and format a song: the entire lyrics and chords are sent.
• ›Importing documents and chord charts: the entire PDF or document is sent, including anything that happens to be written in it.
• ›Reading contracts: the promoter's entire contract PDF is sent, including their name, address, contact person and fee.
• ›Setlist and report suggestions: the band's repertoire and playing history are sent.
• ›Content moderation: audience photos — that is, pictures of faces — and submitted text are sent to assess whether they are suitable for a public screen.
• ›Other AI features: automatic song tagging, MIDI assistance, quiz import, band news and the "Ask Strofa" help feature.

The legal basis is contract (Article 6(1)(b)) for features you start yourself, and legitimate interest (Article 6(1)(f)) for automated moderation, which is necessary to keep unsuitable images off a big screen in a public venue. Anthropic acts as a processor and does not use the content to train models. None of these features make automated decisions with legal effect for you under Article 22 — moderation can only stop a submission from being shown on the screen.

If you do not want content sent for AI processing, simply do not use these features. Everything else in Strofa — songs, setlists, calendar, recordings, sync — works without them.

Processors

We use the following processors. All are bound by a data processing agreement and process data only on our instructions.

• ›Supabase — database, sign-in and realtime sync. The database runs in the EU (Frankfurt, Germany).
• ›OVHcloud — private object storage for audio tracks, attachments, recordings and contract PDFs. Stored in Gravelines, France.
• ›Anthropic, PBC (USA) — the Claude language model used by the AI features described above. Transfer to the USA, see the section below.
• ›RevenueCat (USA) — subscription management. Receives your user ID and purchase status, not payment-card details. Transfer to the USA, see below.
• ›SMTP2GO — outgoing email: account confirmation, password reset and contract signing.
• ›Sentry — crash and error reporting, in Sentry's EU region. Device model, OS version and stack traces. Songs, setlists and other content are not sent.
• ›Cloudflare — hosting of the websites strofa.no, my.strofa.no and booking.strofa.no.
• ›Apple and Google — app distribution, Sign in with Apple, and purchase processing in the App Store and Google Play. They are independent controllers for the purchases.
• ›Spotify and other music services — used only to look up song information. No personal data is sent to them.
• ›Google (Tag Manager, Fonts) — on the websites only, not in the app. See the cookie section.

Transfers outside the EEA

Two of our processors are in the USA: Anthropic (the AI features) and RevenueCat (subscriptions). The transfer takes place on the basis of the European Commission's Standard Contractual Clauses (Article 46(2)(c)) in the data processing agreements with both, supplemented by the measures those providers document for encryption in transit and at rest. All other processors keep the data within the EU/EEA. You can request a copy of the transfer safeguards by contacting us.

Retention periods

We delete automatically. The periods below are implemented as a database job that runs every hour, not as a routine somebody has to remember:

• ›Audience photos (stage photos): 6 hours. The picture has done its job once the night is over.
• ›Song requests from the audience: 30 days. Names and messages are deleted with them.
• ›Quiz participants and answers: 30 days.
• ›IP-based attempt counters: 7 days. Covers sign-in, guest code, band invitation, display pairing and AI usage.
• ›Web sign-in requests: 1 day. The request itself expires after five minutes.
• ›Contracts and the signing log: for as long as the contractual relationship lasts. The signature evidence — name, email, timestamp, IP address — is the documentation that the agreement was entered into, and cannot be deleted without making the contract worthless (Article 17(3)(b)). Deleting the contract or your account deletes the log too.
• ›Everything else: until you delete it or delete your account. Songs, setlists, venues, gigs, recordings and statistics are kept while the account exists — including after a subscription ends, so everything is intact if you come back.
• ›Data kept only on the device: if you delete the app, the local copy is gone. We do not back it up.

Audience and guests

Some features process data about the audience rather than about you as a musician. They are switched on by the band that is playing; Strofa operates them and enforces the automatic deletion periods above.

• ›Stage photos: the audience can submit a selfie via a QR code. Before submitting they are told that the photo will be shown on the big screen in the venue, that it is deleted automatically after 6 hours, and that it is sent for automated content moderation. Submitting requires active consent.
• ›Song requests: a first name (or nickname) and an optional message. Shown to the band and may appear on the big screen.
• ›Pause quiz: a nickname chosen for the evening and the answers given. No sign-in, no email address.

Audience members can ask for deletion before the deadline by contacting us or the band at the venue.

What we do not do

• ›We process no location data. The app never asks for location access; the permission is explicitly blocked in the Android manifest and we use no location libraries. The coordinates stored for a venue are the address of the room — not where you are.
• ›Photos taken with Strofa Foto never leave the device. They are stored locally only and are not uploaded anywhere.
• ›No advertising and no ad tracking in the app.
• ›We do not sell personal data and do not share it with anyone beyond the processors listed above.
• ›Your content is not used to train AI models.

Security

All traffic is encrypted (TLS). Access to data is enforced server-side with per-row access rules, so you only see your own data and the data of bands you are an approved member of. Files in object storage are private and are fetched only through time-limited links. We carry out security reviews of the access rules. In the event of a personal data breach involving risk, we notify the Norwegian Data Protection Authority within 72 hours and notify you where the law requires it.

Your rights

Under Chapter III of the GDPR you have the right to:

• ›Access (Art. 15): to learn what we process about you and receive a copy.
• ›Rectification (Art. 16): to have inaccurate data corrected. Most of it you can correct yourself in the app.
• ›Erasure (Art. 17): to have your data deleted. Account deletion is built into the app, see below.
• ›Data portability (Art. 20): to receive your content in a machine-readable format. You can also export songs and setlists directly from the app.
• ›Objection (Art. 21): to object to processing based on legitimate interest.
• ›Restriction (Art. 18): to require processing to be restricted while an objection or correction is being handled.
• ›Withdrawal of consent (Art. 7(3)): where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

Request this by contacting us at the address at the bottom of this page. We respond within one month.

If you disagree with how we handle your personal data, you can lodge a complaint with the Norwegian Data Protection Authority: datatilsynet.no. If you live in another EEA country, you may complain to the supervisory authority where you live.

Deleting your account

You delete your account yourself in the app: Settings → About Strofa → Delete account. Deletion is final and cannot be undone. It removes:

• ›your sign-in and all account information,
• ›songs, setlists, notes, tags, venues, gigs, contracts and the signing log, play log and statistics,
• ›audio tracks, attachments and recordings in object storage,
• ›your public artist page, so it is no longer reachable on the internet,
• ›your band memberships. Content you shared with a band and which the band owns stays with the band.

A running subscription must be cancelled separately in the App Store or Google Play — we cannot cancel it for you. If you delete the account without cancelling, Apple or Google will keep charging you.

Using the app without an account

You can use Strofa entirely offline without signing in. In that case your content stays only on your device and is not transmitted to us. Note that data kept only on the device is not backed up by us and may be lost if the app is removed.

Children

Strofa is built for musicians and is not directed at children. We do not knowingly create accounts for children under 16. The audience features require no account and collect only a first name or nickname; if we discover that we have received data about a child contrary to this, we delete it.

Cookies & advertising on this website

strofa.no uses Google Ads (a conversion-measurement cookie) to see how visitors found the site. It only activates after you accept it in the cookie banner — off by default. You can change your choice at any time via the small "Cookie settings" link at the bottom of any page. The websites also load typefaces from Google Fonts, which means your IP address is visible to Google when a page loads. The Strofa app itself contains no advertising, no ad trackers and no cookies.

Changes to this policy

We update this policy when the service changes. The date at the top shows the most recent change. For significant changes we will give notice in the app or by email before they take effect.

Contact

Questions about privacy, or requests concerning your rights: bugs@strofa.no. Mark the message "Privacy" and it will be prioritised.