Nalu Ukulele Privacy Policy
Last updated: 29 August 2026
Nalu Ukulele is an app for practising the ukulele. It is built to work without an account and without a connection: your songs, favourites, progress and settings stay on your device and are never sent to us.
In short. We don't ask you to sign up. We have no server that receives your data. We use no analytics and no crash reporting. We never ask for microphone access. The only data that leaves your device is what Google collects to show ads and, if you buy the ad removal, what is needed to process that purchase.
Who processes your data
Data controller: Andrea Libutti.
For any request about this policy or your data:
info@andrealibutti.com.
What stays on your device
The following is stored in a local database on your phone and never leaves the device. We hold no copy of it and cannot read it:
- songs you import, with lyrics, chords and your chosen fingerings;
- favourites and practice routines you save;
- your practice history: duration, tempo in BPM and your own rating of each session;
- your settings: language, metronome, duration, guide notes.
Uninstalling the app deletes all of it. There is no backup on our systems, so we cannot restore it for you.
What we do NOT do
- No account: we collect no name, email or password.
- No microphone: the app never requests microphone access and records no audio. The tuner is not part of this version.
- No usage analytics: no statistics, behavioural profiling or automatic crash reporting.
- No data selling: we do not sell or share data with third parties for their own commercial purposes.
- No location, contacts, photos or files.
Advertising
Nalu Ukulele is free and shows a banner ad served by Google AdMob. To serve ads, Google may process data such as your device advertising identifier, IP address, device type and interactions with the ads. Google processes this as an independent controller; see the Google partner policy.
Your consent
If you are in the European Economic Area, the United Kingdom or Switzerland, a consent panel (Google UMP) appears on first launch where you choose whether to accept personalised ads. You may refuse: you will still see ads, but they will not be personalised.
On iOS, Apple's system prompt additionally asks whether you allow tracking across other companies' apps and websites. You can deny it and the app works exactly the same — only the relevance of the ads changes.
You can change your mind at any time in your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads).
If you remove ads
The one-time "Remove ads" purchase turns off the banner: from then on the app neither requests nor displays ads.
In-app purchases
The purchase is handled by the Apple App Store: payment details are processed by Apple and never reach us. We never see your card number or billing details.
To record that the purchase happened and let you restore it, we use RevenueCat, which receives the purchase receipt and technical device information. The app does not link the purchase to any personal identifier: an automatically generated anonymous identifier is used, because there is no account.
Catalog updates
The chord and scale catalog ships inside the app and works offline. If we enable update checks in the future, the app may contact an endpoint of ours sending only the catalog version number it already has. As with any internet request, the server will see the IP address the request comes from. Your songs, your progress and other personal data are never sent.
Third parties involved
| Party | Why | What it may process |
|---|---|---|
| Google AdMob | Serving the ads that keep the app free | Advertising identifier, IP, device data, ad interactions |
| Apple | Handling the purchase and payment | Purchase and payment data (never shared with us) |
| RevenueCat | Recording the purchase and enabling restore | Purchase receipt, anonymous identifier, technical device data |
These parties are also based outside the European Union, mainly in the United States. Transfers rely on the safeguards required by the GDPR, in particular the Standard Contractual Clauses adopted by the European Commission.
Legal bases
- Consent (Art. 6(1)(a) GDPR) for personalised advertising and tracking: we ask first, and you can withdraw it.
- Performance of a contract (Art. 6(1)(b)) to handle the ad-removal purchase and its restoration.
- Legitimate interest (Art. 6(1)(f)) to serve non-personalised advertising and for the technical security of the service.
How long
Data on your device stays until you delete it or uninstall the app. Data processed by Google and RevenueCat follows the retention periods those companies set in their own policies.
Your rights
You may request access, rectification, erasure, restriction and portability of your data, and object to processing, by writing to info@andrealibutti.com.
In practice, since we keep no data that identifies you:
- to delete everything the app holds about you, uninstall it;
- for advertising data you can reset or delete your advertising identifier in your device settings, and withdraw consent as described above;
- for purchase data you can contact Apple and RevenueCat.
You also have the right to lodge a complaint with your national supervisory authority — in Italy the Garante per la protezione dei dati personali (garanteprivacy.it).
Children
The app is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has sent us data, write to us and we will act.
Changes to this policy
If the way the app handles data changes, we will update this page and the date at the top. Substantial changes will also be announced in the app.