Privacy Policy

Last updated: 21 October 2026

Fingerline ("we", "us") makes a tool that adds cello fingerings to sheet music. We built Fingerline to respect your privacy. This policy explains what we do and don't do with your information.

The short version

Fingerline does not require an account, does not ask for personal information beyond an email address if you choose to sign in (plus the display name Google or Apple may pass along), and does not sell or share data with advertisers. Your scores stay on your device unless you sign in to keep them in sync.

Information we do not collect

• We do not collect your contact details, other than the email address you give us if you create an account, and the display name Google or Apple may pass along if you sign in with them (see below).
• We do not require sign-up. Every feature works without an account.
• We do not access your camera, microphone, location, or contacts.
• We do not show advertising or use advertising trackers.

Files you import

Sheet music you open, scan, or pick from the library is processed to add fingerings. Your saved scores and preferences are stored locally on your device and are not uploaded to us unless you are signed in (see the next section). A PDF or MusicXML file you export or share from Fingerline is made on your device and goes only where you send it; we do not receive a copy.

Accounts (optional)

You can create an account with an email address and a password so that the scores in My Scores follow you between the web app, the phone app and the desktop app. If you do, we store your email address, a one-way hash of your password (never the password itself), and the scores you have saved, on our server in the United States. We use your email address only to identify your account; we do not send marketing email. You can sign out at any time, and you can delete your account from inside the app, which permanently removes your email address and every score held for it. Scores saved on your device stay there until you remove them.

Instead of a password, you can sign in with Google or with Apple. Google or Apple then tells us the email address of the account you chose, that it has been verified, and the account number Google or Apple uses for you with Fingerline (a string of characters). Google may also include the display name on that account, and Apple may include the name you chose to share; we keep that name to show on your account card and nowhere else, and it is deleted with your account. We keep the account number so the same Google account or Apple ID always opens the same Fingerline account, even if its email address changes, and so an address that later passes to someone else does not open yours; it is deleted with your account. When you sign in with Apple, Apple also gives us a token that we keep encrypted and use for one thing only: when you delete your Fingerline account, we use it to disconnect Fingerline from your Apple ID, as Apple requires. "Sign out on every device", on the account card, ends every session your account has. We receive nothing else from them (no photo, contacts or other profile details), and we do not tell them anything about what you do in Fingerline. With Apple's "Hide My Email", the address we receive is a private relay address from Apple, and that is the address we keep. The same email address is one Fingerline account whichever way you sign in. If an account was created with a password and you later sign in to the same address with Google or Apple, that earlier password is turned off, because Google or Apple has confirmed the address is yours. If someone else typed your address into their own Fingerline account, confirming it with Google or Apple takes it back: it comes off their account, which keeps only its own sign-ins. Your use of Google's or Apple's sign-in is also covered by their own privacy policies.

One account, several ways in. Under "Ways to sign in" on the account card you can add another sign-in to your account (for example your Apple ID as well as your Google account) or remove one, as long as one way in is left. Removing an Apple ID also disconnects it from Fingerline. The first time you use a sign-in that no Fingerline account knows yet, you choose: create a new account, or sign in to the account you already have and add it there. While you choose, we hold that sign-in's account number and email address for at most 15 minutes, then delete them. If a sign-in you add belongs to another Fingerline account of yours, we offer to merge the two, and nothing happens unless you confirm: the other account's scores and ways to sign in move into this one, its email address (and its password hash, if it had one) becomes another way into this account, and the other account is deleted. You can also add another email address and password to your account; we store that address and a one-way hash of its password, as for the first one. If you enter the email and password of another Fingerline account of yours, you are offered the same merge. Deleting your account removes all of these.

Score scanning & search

When you scan a PDF or search the public-domain library, your request is sent to our score-processing service solely to perform that scan or search and return the result. We do not use these requests to identify you, and nothing about them is linked to you or your account. The PDF you scan is deleted as soon as it has been read. The notes we read from it are kept in a cache, filed under a fingerprint of the file rather than anything about you, so the same score opens instantly next time; the oldest entries are removed as the cache fills. Search words are held in memory for at most 30 minutes, to answer a repeated search faster, and are not written down. The service also fetches public-domain scores from third-party libraries (such as the Mutopia Project and IMSLP) at your request; their use is governed by their own terms.

Performance video

If you use Performer Mode with a YouTube link, the video is embedded directly from YouTube and is subject to Google's privacy policy. Local video files you choose are read on your device only and are not uploaded.

App updates

The iPhone and Android apps ask the App Store or Google Play whether a newer version of Fingerline is available, so they can offer it to you. That request names the app, not you, and nothing about you or your scores is sent with it. The website updates itself and makes no such request. Your use of the App Store and Google Play is covered by Apple's and Google's own privacy policies.

Deleting your account or your data

In the app: tap your account at the top right to open the account card, choose Delete account, and confirm. This permanently deletes, at once, your Fingerline account and everything held for it on our server: your email addresses, password hash, display name, Google and Apple account numbers, and every score in My Scores. If you signed in with Apple, we also disconnect Fingerline from your Apple ID. Nothing is kept afterwards, and there is no extra retention period.

Without the app: email info@fingerline.app from the address on your account with the subject "Delete my Fingerline account". We delete the account and all of the data above within 30 days and reply to confirm.

Only some of your data: remove a score from My Scores while signed in and it is deleted from our server too; "Sign out on every device" ends every session; and you can remove a way to sign in from "Ways to sign in". To have only your display name removed, email us as above.

Children

Fingerline itself is suitable for all ages and works without any personal information. Accounts are meant for people aged 13 and over, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email us and we will delete it.

Changes

If this policy changes, we will update this page and the date above.

Contact

Questions? Email info@fingerline.app.