Last updated 4 August 2026 · Effective 4 August 2026
In short
CueFlip has no servers and no accounts. There is no CueFlip backend to send anything to. We operate no analytics, and we receive nothing from the app.
Your microphone audio never leaves your device. It is analysed on your iPhone or iPad and is never uploaded anywhere.
Your scores and annotations stay on your device, and — only if you choose — in your own private iCloud, which we cannot access.
No advertising, no tracking, no third-party SDKs, no data sales.
This policy explains how CueFlip for iPhone and iPad handles your information. It is short because the app is built not to collect anything: CueFlip does all of its work on your device, and we do not operate any server that it talks to.
CueFlip is made by CueFlip Team ("we", "us"). Where this policy describes information we actually receive — which is limited to what Apple passes on and what you send us by email — we are the data controller for the purposes of the UK and EU General Data Protection Regulation.
1. What stays on your device
Everything CueFlip creates or imports is written to the app's private container on your device. None of it is transmitted to us, because there is nowhere to transmit it to.
Rehearsal recordings. When you teach CueFlip a piece, it records you playing it and keeps that recording so the app can rebuild its acoustic model later.
Acoustic features. The numerical fingerprint the app derives from your recording in order to follow along.
Score PDFs and page thumbnails, copied into the app when you import them.
Your annotations, including anything you draw with Apple Pencil.
Your page-turn markings, performance history, and app settings.
This data is included in your encrypted iPhone or iPad backup if you make one. Deleting the app deletes all of it from the device. We hold no copy and cannot recover it for you.
2. Microphone
CueFlip needs the microphone for its central function: hearing you play, so it can find your place in the score and turn the page at the right moment.
The microphone is used only while you are recording a rehearsal or running a performance. It is not used in the background, and not while the app is closed.
Audio captured during a performance is analysed frame by frame in memory and discarded immediately. It is never written to disk.
The rehearsal recording you deliberately make is saved on your device, and only there.
No audio is ever uploaded, to us or to anyone else, for any purpose. CueFlip performs no speech recognition and sends nothing to any cloud audio service.
3. iCloud sync
CueFlip can keep your library in step across your own devices using Apple's CloudKit. This is off unless you turn it on.
Your data is stored in the private database of your own iCloud account. By Apple's design, the developer of an app cannot read the contents of a user's private CloudKit database — we have no access to it, and no ability to grant ourselves any.
Nothing passes through any server of ours; the app talks to Apple directly.
You can turn sync off in the app, and you can delete the app's iCloud data from iOS Settings → your name → iCloud.
4. Subscriptions
CueFlip offers optional auto-renewing subscriptions. They are sold and administered entirely by Apple.
Apple handles payment. We never see your card details, billing address, Apple Account, name or email.
The app checks whether you are subscribed by asking Apple's on-device StoreKit framework. That check makes no request to any server of ours — we run none — and produces no record we can see.
Apple provides us with anonymised, aggregated sales reports, as it does for every developer. These show units and revenue, never the identity of a purchaser.
CueFlip can share Apple Pencil annotations live with another iPad in the same room, so that people can rehearse from the same markings.
The connection is made directly between the two devices over your local network. It does not pass through our servers and needs no internet connection.
It happens only when you deliberately pair with someone using a one-time code, and only for as long as you keep the session open.
What is exchanged is the ink itself, plus a device-generated public key and the display name and colour that identify you in the session.
Please note the default display name. Unless you change it, CueFlip uses your device's own name, which on many devices is something like "Anna's iPad" and therefore contains your name. It is shown to whoever you pair with. You can change it in the app before you pair.
We receive nothing from this feature whatsoever.
6. What we never do
No analytics or telemetry. CueFlip does not report your usage to us, on any schedule, in any form.
No third-party SDKs. The app bundles no advertising, analytics, attribution or crash-reporting libraries. Its only dependencies are Apple's own frameworks.
No advertising identifier. CueFlip does not use the IDFA and never presents an App Tracking Transparency prompt, because it does not track you.
No tracking across other companies' apps or websites, and no profiling.
No sale or sharing of personal information, as those terms are defined by the California Consumer Privacy Act. We have never done it and have no mechanism to.
No accounts. CueFlip asks for no registration, no username, no password, no email address.
7. What Apple gives us
Even with no servers of our own, distributing through the App Store means Apple passes a small amount of information to us. We want to be precise about it rather than claim we receive literally nothing.
Crash and energy diagnostics. If you have switched on Share with App Developers in iOS Settings → Privacy & Security → Analytics & Improvements, Apple may give us crash logs and performance measurements for CueFlip. Apple collects these, not us; they are aggregated and, per Apple, not identifiable to you. You can turn this off for every app in that same iOS setting.
Aggregated App Store statistics — downloads, retention, and territory-level counts — which Apple shows us in App Store Connect. These are aggregates and never identify a person.
Ratings and reviews you choose to write publicly on the App Store, under whatever nickname you chose there.
All of the above is collected and processed by Apple under the Apple Privacy Policy. We only see what Apple decides to show developers.
8. If you email us
Writing to us is the one and only way information about you reaches us directly.
We receive your email address, whatever you write, and anything you attach. Please do not send anything you would rather we did not have.
We use it solely to answer you, and to fix the problem you report.
Legal basis (GDPR): our legitimate interest in responding to correspondence, Art. 6(1)(f), and where you are a customer, performance of a contract, Art. 6(1)(b).
Processor. Our support mailbox is hosted by Google (Gmail), which stores the message on its infrastructure and may process it outside your country. Google acts as our processor and applies the Standard Contractual Clauses to such transfers.
Retention. Support correspondence is deleted within 24 months, or sooner if you ask us to delete it.
9. Permissions you control
Every permission CueFlip requests, and what happens if you decline.
Permission
Why it is needed
If you refuse
Microphone
To hear you play and follow the score.
Automatic page turning cannot work. The rest of the app still works as a score reader.
Local Network
To find a nearby iPad when you share annotations.
Only nearby sharing is unavailable. Nothing else changes.
Both can be granted or revoked at any time in iOS Settings → Privacy & Security. CueFlip requests no access to your contacts, photos, calendar, location, health data, or files outside the ones you explicitly pick when importing a score.
10. Children
CueFlip is a tool for musicians and is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children — in fact we do not knowingly collect personal information from anyone. If you believe a child has sent us personal information by email, contact us and we will delete it.
11. Your rights
If you are in the European Economic Area, the United Kingdom, Switzerland, California, or another jurisdiction with comparable law, you have rights over personal data we hold about you: access, correction, deletion, restriction, objection, and portability, and the right not to be discriminated against for exercising them.
In practice this is narrow, because the only personal data we hold is the correspondence described in section 8. Email us and we will act on your request within 30 days, free of charge. Everything else lives on your device or in your own iCloud, where it is already entirely under your control:
To see or export your data: use the export function in the app's settings.
To delete everything: delete the app; and, if you used iCloud sync, remove CueFlip's data in iOS Settings → your name → iCloud.
If you are in the EEA or UK and believe we have mishandled your data, you may complain to your national supervisory authority.
12. Changes and contact
If we change this policy in a way that materially affects you, we will update the date at the top of this page. If a future version of CueFlip ever collects something, we will ask for your consent inside the app before it does — it will never start quietly.
CueFlip