Privacy Policy

This policy describes how Live Band Toʻere (the “app” and the liveband.toere.app website) processes your personal data. By using the service, you accept these practices.

1. Data controller

The service is published and operated by Ruben Chang (author and operator of the app), under the supervision of Redsoyu (French Polynesia). For any question about your data or this policy: liveband@toere.app.

2. Data we process

• Account: your email address and, if you sign in with Google, your Google name and profile picture. Sign‑in is via Google or an email sign‑in link.
• Your content: the scores you import (EPUB/PDF files), your setlists and folders, and your band profile (name, bio, photos, country/city, genres).
• Fan base (collected by the band leader via the fan page, with the fan's consent): first name and, optionally, email address, to stay in touch with the band's community. This data is scoped to the band.
• Live sessions: the current song and position, and the broadcast setlist titles. This information is ephemeral (for the duration of the gig).
• Kiosque (shared catalog, optional): the files you submit and the email tied to your submission.
• Technical data: standard connection logs generated by our hosts (IP address, timestamp) for security and operation.

We use no advertising, no ad tracking, and no third‑party analytics, and we do not sell your data.

3. Purposes and legal bases (GDPR)

Purpose	Legal basis
Provide the service (account, shared library, setlists, live sessions)	Performance of the contract
Band fan base and email campaigns	Fan's consent (opt‑in, withdrawable anytime)
AI lyrics formatting in the Studio	Your explicit action (you send the text to format)
Import from Google Drive (read‑only, optional)	Your consent (Google authorization)
Security, abuse prevention, support	Legitimate interest

4. Processors and sharing

We share data only with the providers needed to run the service:

• Supabase — database hosting, authentication, file storage and real‑time sync.
• Google — “Sign in with Google”; and, if you enable it, read‑only access to your Google Drive to import files (we do not browse your Drive beyond what you import).
• Anthropic — when you use the Studio's AI formatting, the lyrics text you paste is sent to be structured. Do not paste sensitive data.
• Resend and Brevo — email delivery (campaigns to opt‑in fans; sign‑in links).
• Vercel — hosting of the website and server functions.

These providers act as processors on our behalf. Some may host data outside the European Union; appropriate contractual safeguards cover such transfers.

5. App permissions

• Modify system settings (brightness): to adjust screen brightness while reading on stage. Used only at your request.
• Keep the screen awake: to prevent sleep while you follow the score.

The app does not access the microphone, camera, contacts or your location.

6. Retention

Your account data and content are kept as long as your account (and band) exist. A fan's data is kept by the band until they unsubscribe. You can request deletion at any time (see §8).

7. Security

Data is encrypted in transit (HTTPS). Access is restricted by row‑level security (RLS): each band sees only its own data.

8. Your rights

Under the GDPR, you have the rights of access, rectification, erasure, portability, restriction and objection, and the right to withdraw consent. A fan can unsubscribe at any time (link in every email). To exercise your rights: liveband@toere.app. You may also lodge a complaint with your competent data protection authority.

9. Children

The service is not intended for children under 15, and we do not knowingly collect their data.

10. Changes

We may update this policy; the last‑updated date appears at the top. For material changes, we will notify you by an appropriate means.

11. Contact

liveband@toere.app