Privacy Policy
This covers two things: the Aubel app, and this marketing website at aubel.app. They handle data in different ways, so they are explained separately.
Aubel the app
You can use Aubel's training without an account. Do that and nothing leaves your phone. Your alarms, your progress, your settings stay in local storage on the device, and deleting the app deletes them with it. That is how the app shipped at launch and it still works that way.
An account changes it. Signing in syncs your data to our server so it survives a reinstall and follows you to another device, and it turns on the parts of Aubel that need other people: friends, groups, classrooms, and leaderboards. Here is what an account stores.
Who you are. Your email, a display name, and a public username (your handle). You sign in with Apple, Google, or an email and password. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's private relay address, never your real one.
What you set. Your instrument, your experience level, and whether you are a student or a teacher. A small avatar is generated from your username. It is artwork, not a photo of you.
How you practice. Your scores, progress, streaks, points, and the results of your training sessions across the games. This is the same practice data the app already keeps on the device. The account syncs it so you don't lose it.
Who you connect with. Friends you add, groups or classrooms you join, where you land on a leaderboard, and any challenges you play.
What you have unlocked. Whether you have bought the full app, so it stays unlocked for you across your devices.
All of this lives in a database run by Supabase, hosted in the United States. Supabase stores the data and handles the sign-in step for us. Nothing is sold, and none of it is used to advertise to you.
When you buy Aubel, Apple handles the payment inside the app and Stripe handles it on the web. Your card details go straight to them. We never see or store a card number, only the fact that you paid.
No tracking
There are no analytics or advertising SDKs inside the app. No third party watches what you tap. No advertising identifiers, no pixels, no cross-app tracking. The data above exists because a feature you used needs it, not to build a profile of you.
Crash reporting
The app uses Sentry to report crashes and errors so we can find and fix them. When the app hits a problem, Sentry receives the technical details of that failure: the error and where in the code it happened, your device model and iOS version, and which build of the app you are on. It is set up to leave personal information out, so it does not receive your name, email, handle, or account, and error text is scrubbed of email addresses before it is sent. Sentry is a United States company. These reports are used only to diagnose and fix bugs. They are never used to advertise to you or to track you across apps.
Permissions
Aubel asks for a few iOS permissions to do its job. These run on your device.
Notifications. Used to fire your alarms and the optional daily practice nudge. Local notifications, scheduled on the phone.
AlarmKit (iOS 26 and later). Used to schedule alarms that can wake your phone with a full-screen takeover, even during Focus. Apple handles this entirely on device.
Face ID. Used to protect your Screen Time settings inside Aubel so someone else can't disable a Focus restriction without you. Face ID runs in Apple's Secure Enclave. Aubel never sees your face data.
Family Controls and Screen Time. Used for the optional Focus feature, where Aubel can shield specific apps until you finish a training session. Apple's framework keeps the list of apps you select on your device. Aubel has no way to read or transmit it.
Teachers and classrooms
If you join a classroom, the teacher who runs it can see your training progress and scores for that class. That is the point of a classroom, and it is worth saying plainly: a teacher whose class you join can see how you are doing.
Children
Aubel is for ages 13 and up. Do not create an account if you are under 13. We do not knowingly collect data from children under 13, and if we find that we have, we delete it. Support for younger students, with the parental and school consent that requires, may come in a later release.
Deleting your account
You can have your account and everything attached to it deleted. Email euan@maley.be and we will remove it within 30 days. Deleting the app from your phone does not delete an account on its own. The synced copy stays on the server until you ask us to remove it.
This website (aubel.app)
The marketing website is a different matter. It uses privacy-friendly, cookieless analytics to understand how visitors find and navigate the site. Here is what that means in practice.
Cookieless analytics. We use Umami and Vercel Web Analytics. Neither sets cookies, and neither collects or stores personal data or any identifier that could follow you across sites — so there is nothing to consent to and no cookie banner. What they record is aggregate and anonymous: which pages are viewed, the referring site or search source, and broad device and browser type. An approximate country is derived from your IP address to show roughly where traffic comes from; the IP address itself is not stored. None of it can be tied back to you as an individual.
Cookies. This site sets no analytics or advertising cookies. We previously used Google Analytics 4 with a consent banner; that has been removed in favour of the cookieless tools above.
Email signup (historical). Before the app launched in May 2026, the homepage offered an email signup for launch notification. Submitted addresses were stored in a Google Sheet via Google Apps Script and used only for the one-time launch notification. The signup is no longer offered. Stored addresses will not be used for any other purpose. To request deletion of your email from the historical list, email euan@maley.be and it will be removed within 5 business days.
If you are in the EEA or UK
We honor your rights under GDPR. You can access the personal data we hold about you, have it corrected, have it erased, restrict how it is processed, object to its processing, and receive it in a portable format. To exercise any of these, contact euan@maley.be. The data we hold is your account and practice data; the website analytics are anonymous and hold nothing tied to you, so most requests are quick to fill.
Changes
If this policy changes, the new version will appear at this URL with an updated effective date.
Contact
Questions: euan@maley.be