Privacy Policy

Who we are

Cuesheet is an iPhone app for cycle and spin instructors, owned and operated by Shelterwood AI Inc., a Canadian corporation based in Toronto, Ontario. References to "we," "us," or "Cuesheet" mean Shelterwood AI Inc. Contact: privacy@cuesheet.ca.

Privacy Officer. Per PIPEDA Principle 1 (Accountability), our designated Privacy Officer is Peter Cresswell, Founder, Shelterwood AI Inc. Reach the Privacy Officer at privacy@cuesheet.ca.

What the app stores on your device

Everything Cuesheet handles lives on your iPhone. There is no cloud sync, no shared backend, and no server we run that holds your data. The app stores:

• Your cuesheets and class history. Segments, bound tracks, cue placements, and the dates you ran each class — all in the app's local storage on your device.
• Apple Music user token. When you authorize Apple Music access, an Apple Music user token is saved in your iOS Keychain. We never see this token; it's used by the app on your device to play music during Run mode.
• Your preferences. Default class template, freshness window, Run-mode preferences — stored on-device.

What we don't collect

• We don't have user accounts, so we don't have your name, email, or password.
• We don't track your location.
• We don't use analytics on the app or website. No third-party SDKs, no telemetry.
• We don't sell, share, or rent any data — we don't have any to sell.
• We don't use third-party AI providers. AI suggestions run on the on-device foundation model accessed through Apple's Foundation Models framework. Your prompts and class history never leave your iPhone.

Class ratings and AI suggestion bias

At the end of a class, you can rate it 👍, 😐, or 👎. These ratings are stored on your device alongside your cuesheet history and are used to gently bias future AI track suggestions — tracks tied to 👍 classes get modestly favored, tracks tied to 👎 classes get modestly avoided. Ratings never leave your iPhone, are never sent to any server, and are never shared with Apple, AI providers, or anyone else.

You can reset this bias at any time from Settings → Reset AI preferences inside the app, which clears the rating signal used for suggestions without touching your cuesheet history.

What Apple may share with us anonymously

If you opt in via iOS Settings → Privacy & Security → Analytics & Improvements → Share with App Developers, Apple sends us anonymous crash reports and aggregate usage data through App Store Connect. This is opt-in, not tied to your identity, and tells us things like "the app crashed on iOS 26.1 on iPhone 15 Pro" — nothing about who you are. You can turn it off in iOS Settings any time.

Apple Music (third-party)

Cuesheet requires an active Apple Music subscription to play tracks. Cuesheet currently supports Apple Music only.

• You authorize Apple Music access via the iOS MusicKit system prompt — your Apple ID credentials never pass through Cuesheet.
• Apple's own privacy policy governs what they collect about your listening: Apple Privacy Policy.
• Cuesheet stores only the Apple Music user token (in your iOS Keychain) and uses it to search and play tracks during Run mode.

Data retention and deletion

Because all your data lives on your device, there's nothing on our side to delete.

• If you delete the Cuesheet app, all of your cuesheets, history, preferences, and tokens are removed with it.
• To revoke Cuesheet's access to Apple Music, go to iOS Settings → Privacy & Security → Media & Apple Music and toggle Cuesheet off.
• iOS Keychain entries for Cuesheet are removed when the app is uninstalled.

Security and breach notification

Because cuesheets, history, and music-service tokens live on your device only, our server-side breach surface is limited. If we ever discover a breach involving personal information under our control that creates a real risk of significant harm, we will:

• Report the breach to the Office of the Privacy Commissioner of Canada within the timelines required by PIPEDA s.10.1.
• Notify affected individuals through the app on next open and through any contact channel they have provided to us, with a description of the breach, the information involved, and the steps we and you can take to reduce risk of harm.
• Maintain a record of every reportable breach for at least 24 months, as required by PIPEDA, and make those records available to the Privacy Commissioner on request.

Children's privacy

Cuesheet is designed for adult cycle and spin instructors and is not directed at children. We do not knowingly collect personal information from children under 13. Because the app has no user accounts and doesn't collect personal data, age verification isn't part of the flow. If you believe a child has somehow provided us personal information, contact us and we'll address it.

Your rights

Privacy regulations including GDPR (Europe), CCPA (California), and PIPEDA (Canada) grant you rights including access, correction, deletion, and portability of personal data. Because we don't collect personal data about you, there's typically nothing for us to access, correct, or delete on our side. If you have a question or concern, email privacy@cuesheet.ca and we'll respond within 30 days.

Changes to this policy

If we change this policy, we'll update the "Effective" date at the top. If the change is material — for example, if we ever start collecting analytics or add user accounts — we'll notify you in the app on next open before the change takes effect.

Contact

Questions about this policy? Email privacy@cuesheet.ca.

Cuesheet is operated by Shelterwood AI Inc., Toronto, Ontario, Canada.