Privacy Policy

Who we are

Cuesheet is an iPhone app for cycle and spin instructors, owned and operated by Shelterwood AI Inc., a Canadian corporation based in Toronto, Ontario. References to "we," "us," or "Cuesheet" mean Shelterwood AI Inc. Contact: privacy@cuesheet.ca.

Privacy Officer. Per PIPEDA Principle 1 (Accountability), our designated Privacy Officer is Peter Cresswell, Founder, Shelterwood AI Inc. Reach the Privacy Officer at privacy@cuesheet.ca.

What the app stores on your device

Everything Cuesheet handles lives on your iPhone. There is no cloud sync, no shared backend, and no server we run that holds your data. The app stores:

• Your cuesheets and class history. Segments, bound tracks, cue placements, and the dates you ran each class — all in the app's local storage on your device.
• Apple Music access. When you authorize Apple Music access via the iOS system prompt, the authorization is held by MusicKit (part of iOS), not by Cuesheet. We never see your Apple ID or any music-service token. Cuesheet asks iOS to play tracks; iOS plays them.
• Your preferences. Default class template, freshness window, Run-mode preferences — stored on-device.

Diagnostics you can choose to share

Cuesheet writes a small JSON-lines file for each Run-mode class — track starts, cue dispatches, scrub events, segment timings, and the Apple Music track IDs the cuesheet referenced. This file stays on your iPhone unless you tap Settings → Diagnostics → Share Run-mode event log. Before iOS shows the share sheet, the app confirms what the file contains so you can decide where (or whether) to send it. The file does not contain your Apple ID, your Apple Music token, or any audio. Cuesheet never uploads it automatically — the share is user-initiated, every time.

What we don't collect

• We don't have user accounts, so we don't have your name, email, or password.
• We don't track your location.
• We don't use analytics on the app or website. No third-party SDKs, no telemetry.
• We don't sell, share, or rent any data — we don't have any to sell.
• We don't use third-party AI providers, and this version has no AI features. Any on-device AI we add later would run through Apple's Foundation Models framework on your phone — your class history would never leave your iPhone — and we'd update this policy before it ships.

Class ratings

At the end of a class, you can rate it 👍, 😐, or 👎. These ratings are stored on your device alongside your cuesheet history. They never leave your iPhone, are never sent to any server, and are never shared with Apple, AI providers, or anyone else. This version does not use the ratings for anything beyond your own records; a future AI feature may use them to gently bias track suggestions, and if it does we will update this policy first.

What Apple may share with us anonymously

If you opt in via iOS Settings → Privacy & Security → Analytics & Improvements → Share with App Developers, Apple sends us anonymous crash reports and aggregate usage data through App Store Connect. This is opt-in, not tied to your identity, and tells us things like "the app crashed on iOS 26.1 on iPhone 15 Pro" — nothing about who you are. You can turn it off in iOS Settings any time.

Apple Music (third-party)

Cuesheet requires an active Apple Music subscription to play tracks. Cuesheet currently supports Apple Music only.

• You authorize Apple Music access via the iOS MusicKit system prompt — your Apple ID credentials never pass through Cuesheet.
• Apple's own privacy policy governs what they collect about your listening: Apple Privacy Policy.
• Cuesheet asks iOS to search and play Apple Music tracks via MusicKit; the authorization lives in iOS, not in Cuesheet's storage.
• To align cues to the beat, Cuesheet downloads each track's short Apple Music preview clip from Apple, analyzes it on your device to estimate tempo and beat timing, then discards the audio — only the timing data (tempo, beat grid) is kept on your iPhone.

Data retention and deletion

Because all your data lives on your device, there's nothing on our side to delete.

• If you delete the Cuesheet app, all of your cuesheets, history, and preferences are removed with it.
• To revoke Cuesheet's access to Apple Music, go to iOS Settings → Privacy & Security → Media & Apple Music and toggle Cuesheet off. The authorization lives in iOS, so this is the canonical revoke path.

Security and breach notification

Because cuesheets, history, and music-service tokens live on your device only, our server-side breach surface is limited. If we ever discover a breach involving personal information under our control that creates a real risk of significant harm, we will:

• Report the breach to the Office of the Privacy Commissioner of Canada within the timelines required by PIPEDA s.10.1.
• Notify affected individuals through the app on next open and through any contact channel they have provided to us, with a description of the breach, the information involved, and the steps we and you can take to reduce risk of harm.
• Maintain a record of every reportable breach for at least 24 months, as required by PIPEDA, and make those records available to the Privacy Commissioner on request.

Children's privacy

Cuesheet is designed for adult cycle and spin instructors and is not directed at children. We do not knowingly collect personal information from children under 13. Because the app has no user accounts and doesn't collect personal data, age verification isn't part of the flow. If you believe a child has somehow provided us personal information, contact us and we'll address it.

Your rights

Privacy regulations including GDPR (Europe), CCPA (California), and PIPEDA (Canada) grant you rights including access, correction, deletion, and portability of personal data. Because we don't collect personal data about you, there's typically nothing for us to access, correct, or delete on our side. If you have a question or concern, email privacy@cuesheet.ca and we'll respond within 30 days.

Changes to this policy

If we change this policy, we'll update the "Effective" date at the top. If the change is material — for example, if we ever start collecting analytics or add user accounts — we'll notify you in the app on next open before the change takes effect.

Contact

Questions about this policy? Email privacy@cuesheet.ca.

Cuesheet is operated by Shelterwood AI Inc., Toronto, Ontario, Canada.