Privacy Policy

Version 1.1 · Effective 7 October 2026 · Last updated 7 October 2026

This Privacy Policy explains how DQCLabs (“we”, “us”) collects, uses and shares information when you use the OrganKey app for iOS, iPadOS and Android and the website organkeyboard.web.app. For users in the EU and UK, we are the data controller for the processing described here, except where a third party acts as an independent controller.

1. Information we collect

No account

You do not need to create an account or sign in to use OrganKey, and we do not operate our own server that stores information about you.

Information that stays on your device

The following is stored only on your device, is not sent to us, and is removed when you delete the app or clear its data:

• your settings — audio, keyboard, arranger, MIDI and pedal settings, and your diagnostics choice;
• your custom organ presets, favourite and recent voices and styles;
• your MIDI Learn mappings and pedal assignments;
• your registration memories;
• recordings you make with the Performance Recorder (Premium), saved as audio files on your device. They leave your device only if you choose to share them.

What you play — the notes and chords from the on-screen keyboard or a connected MIDI device — is processed on your device to produce sound and accompaniment. It is not recorded, stored or sent anywhere. The app does not use your microphone, camera, photos, contacts or location.

Information that leaves your device

• Usage information — only if you turn on diagnostics. Screens viewed and feature events (for example, choosing or previewing a voice or style, using the arranger controls, saving a preset, connecting a MIDI device or completing MIDI Learn, opening the Premium screen, and purchase or restore events), session activity, and basic device and app information (device model, operating system, app version, language and country). This is collected through Google Firebase Analytics. Individual notes and chords you play, and the names of your MIDI devices, are never included.
• Crash and diagnostic information — only if you turn on diagnostics. Crash logs, error reports and the state of the app when a problem occurred, with basic device and app information, collected through Firebase Crashlytics.
• Advertising information in the free version, such as your IP address and the approximate location derived from it, device information, the device advertising identifier where it is available (see section 4), and interactions with ads (views and taps). This is collected by the Google Mobile Ads SDK and Google’s User Messaging Platform when consent is checked and when ads are requested and shown.
• Purchase information if you buy Pro or restore a purchase, such as the product, purchase date, price, currency, store country and Pro access status, together with an anonymous app user identifier created by RevenueCat. If you have an older subscription, its renewal dates and subscription status are also processed.
• Identifiers: a random app-instance identifier created by Firebase (only while diagnostics are on), the RevenueCat anonymous identifier, and the advertising identifier as described above.

We do not link this information to your name, email address or any account, because the app does not collect them.

Our website

This website does not use cookies, analytics or advertising scripts. It is hosted on Firebase Hosting, which keeps standard server logs (such as IP address, browser type and pages requested), and it loads fonts from Google Fonts, which receives your IP address. A language choice you make on the site is stored only in your browser.

2. Device permissions

• Bluetooth (iOS, iPadOS and Android) — used only to find and connect Bluetooth MIDI keyboards, controllers and pedals. Information about nearby devices is used on your device to show the list of MIDI devices and is not sent to us.
• Location on Android 11 and older — on those versions Android requires the location permission before an app can scan for Bluetooth devices. OrganKey requests it only for that scan and does not read, store or share your location. On Android 12 and newer the Bluetooth scan permission is requested with the “never for location” flag instead.
• App Tracking Transparency (iOS and iPadOS) — see section 4.
• Internet — used for ads, purchases and, if you turn them on, diagnostics. Playing the instrument does not need a connection.
• USB MIDI devices are used through your operating system’s MIDI support and need no extra permission.

You can decline Bluetooth or location; everything except Bluetooth MIDI keeps working.

3. How we use information

• To provide the app — to remember your settings and presets on your device, to connect your MIDI devices, to check whether you have Pro access, and to restore purchases.
• To improve reliability — if you have turned on diagnostics, to find, diagnose and fix crashes and errors.
• To understand usage — if you have turned on diagnostics, to see in aggregate which features are used so we can improve them.
• To fund the free version — to show, measure and limit the frequency of ads, prevent ad fraud, and, where you have agreed or the law allows, show more relevant ads.
• To support you — to answer questions you send us, and to handle purchase, restore and billing questions.
• To meet legal obligations — for example, keeping financial records.

Under EU and UK data protection law, we rely on your consent for diagnostics (which you give by turning them on and can withdraw at any time), for personalised advertising and for storing or accessing information on your device for advertising where consent is required; on our legitimate interests for serving non-personalised ads that fund the free version; on the performance of a contract for Pro purchases; and on legal obligations for financial records.

We do not sell your personal information, and we do not use it for any purpose not described in this policy.

4. Advertising and consent

The free version of OrganKey shows ads served by Google AdMob. Ads may appear in the voice and style browsers, occasionally after you choose a voice or style, and sometimes when you return to the app. You can also choose to watch a rewarded ad to try a Premium voice or style for a limited time. Ads are never shown while you are playing, and are turned off while OrganKey Premium is active.

Consent

Before any ad is requested, the app uses Google’s User Messaging Platform to check whether a consent message is required where you are (for example, in the EEA, the UK and Switzerland). Where it is, the message lets you accept, refuse or choose specific purposes and partners. If you do not consent to personalised ads, you may still see non-personalised or limited ads, which use information only to serve, measure and protect ads.

Where a consent option is required for your region, you can review, change or withdraw your choice at any time with Ad Privacy Choices at the bottom of the app’s Settings screen.

Tracking on iOS and iPadOS (App Tracking Transparency)

On iOS and iPadOS, the app may ask for your permission to track your activity across other companies’ apps and websites for advertising. It asks only after any required Google consent message has finished and before the advertising SDK starts. The device advertising identifier (IDFA) is only available if you allow tracking. Declining does not limit any feature of the app. You can change your choice at any time in Settings → Privacy & Security → Tracking.

Android advertising ID

On Android, the Google Mobile Ads SDK may use your device’s advertising ID. You can reset or delete it in your device settings (usually Settings → Privacy → Ads or Settings → Google → Ads).

Google acts as an independent controller of the advertising information it collects. See How Google uses information from sites or apps that use its services. We receive only aggregate reports from AdMob, such as impressions and earnings, and not information about you individually.

5. Pro purchases

OrganKey Lifetime Pro is an optional one-time, non-consumable purchase with no expiry date, renewal or recurring payment, sold through the Apple App Store and Google Play. We offer only Lifetime Pro for new purchases. Payment is processed entirely by Apple or Google. We never receive your card number, billing address or other payment credentials.

We use RevenueCat to show the Lifetime Pro product and price, confirm Pro access, and restore purchases after reinstalling or on another compatible device using the same account in the same store. Purchases do not transfer between the App Store and Google Play. RevenueCat receives purchase information from the store (such as the product, purchase date, price, currency, store country and Pro access status), an anonymous app user identifier, basic device and app information, and your IP address. We can see anonymous purchase records, which we use to support customers and keep financial records.

If you bought a subscription in an older version, RevenueCat also processes its renewal dates and status so we can confirm your access. You can manage or cancel it in your store account; deleting the app does not cancel it. Rewarded Pro passes are stored on your device with their original expiry and are separate from purchase records.

6. Third-party services

The app and website use the following services, which receive or process information as described above:

Service providers that process information on our behalf (Firebase and RevenueCat) do so under data processing terms that require them to protect it. Google, when serving ads, and Apple and Google, as app stores, handle information under their own privacy policies. These providers may process information outside your country, including in the United States, using legally recognised transfer safeguards such as Standard Contractual Clauses.

7. Data retention and security

• On your device: kept until you delete the app or clear its data.
• Usage and crash information: kept for a limited period under Firebase’s retention settings, after which it is deleted or kept only in aggregate form.
• Advertising information: kept by Google under Google’s retention policies.
• Purchase records: kept for as long as needed to provide Pro access, restore purchases, handle refunds and meet tax and accounting obligations.
• Emails you send us: kept while we handle your request and for a reasonable period afterwards.

Information sent from the app is encrypted in transit. Information on your device is protected by your operating system’s app isolation and device security. No method of transmission or storage is completely secure, but we limit what is collected to reduce risk.

8. Your choices and privacy rights

Choices in the app

• Diagnostics: Share diagnostics at the bottom of Settings is off by default. Turning it on enables Firebase Analytics and Crashlytics on that device; turning it off again stops them. No feature depends on it.
• Ad consent: where available in your region, use Ad Privacy Choices at the bottom of Settings.
• Tracking and advertising ID: use your iOS Tracking setting or Android Ads setting described in section 4.
• No ads: buying OrganKey Lifetime Pro (or an active rewarded Pro pass) turns ads off.
• Bluetooth and location: you can deny or revoke these in your device settings at any time.
• On-device data: delete the app, or clear its storage in your device settings, to remove everything stored on your device.

Your rights

Depending on where you live (including the EEA, the UK and US states such as California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its processing, to opt out of targeted advertising or “sharing” for advertising, and to withdraw consent at any time. We will not discriminate against you for exercising these rights.

To make a request, email us at the address in section 9. Because the app has no accounts, we may not be able to identify information linked only to a random identifier. For purchase records, include the order or transaction ID from your Apple or Google receipt so we can find the matching record. Requests about advertising data held by Google can also be made through My Ad Center. You also have the right to complain to your local data protection authority.

9. Children, changes and contact

Children

OrganKey is not directed at children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy when the app or the services it uses change. We will update the date at the top of this page and, for material changes, let you know in the app or on this website before the changes take effect.

Contact us

For privacy questions or requests, contact DQCLabs, publisher of OrganKey, at cuong.software.dev@gmail.com.