Privacy Policy

1. Information We Collect

Account data

When you create an account, we collect and store the following in Firebase Firestore:

• Email address
• Display name
• Profile photo URL
• Account creation date

Authentication

Cardinal Music supports sign-in via Google Sign-In, Apple Sign-In, and email and password, all handled through Firebase Authentication. We do not store your raw password — Firebase manages credential security on our behalf.

User-generated content

Content you create in the app is stored in Firebase Firestore, including:

• Songs (chords and lyrics)
• Setlists
• Band memberships

Subscription data

Subscriptions and in-app purchase entitlements are managed by RevenueCat. Van Squared does not store your payment details. RevenueCat receives a user identifier and purchase receipt to verify entitlements. See RevenueCat’s Privacy Policy for details on how they handle that data.

2. How We Use Your Information

• To create and manage your Cardinal Music account.
• To store and sync your songs, setlists, and band data across devices.
• To verify your subscription status and unlock premium features.
• To respond to support requests.
• To comply with legal obligations.

We do not sell your personal data to third parties, and we do not use it to serve you targeted advertisements.

3. Third-Party Services

Cardinal Music uses the following third-party services, each governed by their own privacy policies:

• Firebase (Google) — authentication, database (Firestore), and cloud storage. Firebase Privacy Policy
• RevenueCat — subscription and entitlement management. RevenueCat Privacy Policy

4. Data Retention

We retain your account data and user-generated content for as long as your account is active. When you delete your account, all associated data — including your songs, setlists, bands, and account information — is permanently removed from our systems within 30 days.

5. Deleting Your Account

You can delete your Cardinal Music account at any time in two ways:

1. In-app: Open Cardinal Music → Settings → Delete Account and confirm. Deletion is immediate and permanent.
2. By email: Send a deletion request to vansquareddev@gmail.com and we will process it within 30 days.

For step-by-step instructions, see our account deletion page.

6. Children’s Privacy

Cardinal Music is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at vansquareddev@gmail.com and we will delete it promptly.

7. Security

We rely on Firebase’s industry-standard security infrastructure, including encrypted data transmission (TLS) and secure cloud storage, to protect your information. No system is 100% secure, but we take reasonable steps to safeguard your data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Significant changes will be communicated via in-app notice or email. Continued use of Cardinal Music after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact Van Squared at: