Pitcheon

Privacy

Last updated:

Pitcheon has no accounts, no analytics and no server that receives your content. This page describes the only two occasions on which the app or this website touches the network.

What the app sends

Update checks. On launch, Pitcheon asks this website whether a newer version exists. That request necessarily reveals your IP address, the version you are running and your Mac's architecture, in the same way that loading any web page does. It is not stored beyond ordinary server logs and is not linked to any identifier.

Model downloads. The first time you prepare a song, the app downloads machine-learning models. These come from third parties — Meta's public file host and Hugging Face — so those requests go to them, not to us, and their own privacy terms apply. Pitcheon sends them nothing about you beyond what an ordinary file download involves.

What never leaves your Mac

Your audio files, the separated stems, the transcribed lyrics, your recordings and your scores. All of it is written to a folder on your own disk and is never uploaded. There is nowhere for it to go.

What this website stores

No cookies, no analytics, no embedded third-party content. Nothing on this site tracks you.

The site and the downloads are hosted by GitHub, Inc. and Vercel, Inc., both in the United States. Requesting a page or a download necessarily transmits your IP address and browser user agent to them, and they keep their own access logs under their own terms. That is the only processing involved, and it is the same processing that loading any web page involves.

Before launch Add the data controller's contact address (the imprint will carry it), and state the legal basis for the update check — legitimate interest under Art. 6(1)(f) GDPR is the usual reading. Because GitHub and Vercel are US providers, note the transfer basis you rely on. Worth ten minutes with someone qualified.

Your rights

Under the GDPR you may request access to, correction of, or erasure of personal data held about you, and may complain to a supervisory authority. Given that the only personal data involved is a server log entry, in practice there is very little to request — but the contact address in the imprint reaches a human.