Privacy Policy
ENYO Metronome needs no account, and without one it collects no personal data. It counts anonymous app sessions and which of its features are used, so we know how many people use it, on which devices and what to improve, and it keeps an anonymous record of the tips people give. Nothing it counts or records can be tied to you. There is no advertising and no tracking. If you choose to create an ENYO Sync account, in the app or the web app, we store your email address, your name and what you sync, only to keep it the same on your devices.
Who this is from
ENYO Metronome is made by ENYO Technologies. This policy covers the ENYO Metronome app on iPhone, iPad, Mac, Apple Watch and Apple Vision Pro, the ENYO Metronome web app that runs in a browser, and the pages at metronome.enyotechnologies.com and enyo-metronome.netlify.app.
Anonymous usage counts
The app uses TelemetryDeck, a privacy-focused analytics service, to count sessions: it sends a signal when the app starts or comes back to the screen. Each signal carries the technical details the service adds itself — the app version, the operating system and device model, screen size, language, region and time zone settings, the time of day, and accessibility display settings such as text size.
From version 1.2.2 it also sends the name of a feature when you use it — for example that Stage Mode was opened, the tuner was used, the click was started with the count-in on, or Apple Music was allowed — at most once each time you open the app, so we can see which features are used most and least. These signals say only which feature and which of the app's own options; the options themselves are fixed choices, such as the name of a beat visual. Some give an amount as a range rather than a number: how many setlists and songs you keep (for example "2–5"), and how long the click ran before it stopped (for example "15–30 minutes").
From version 1.3, once each time you open the app, it also says which of its own options you have chosen — the instrument you picked, whether a weekly goal and iCloud sync are on, roughly how much is in your journal (as a range), whether a gig is coming up, whether Apple Music is connected, and how the screen is laid out — so the other counts can be told apart, for example drummers from guitarists. When something in the app fails, such as the click not starting or a purchase not going through, it sends a fixed name for the failure and nothing else.
Each signal also says whether you are a supporter, and choosing or buying a tip sends a signal of its own, naming which tip. From version 1.3, when a tip is bought, RevenueCat (see Purchases) also passes on that it was bought and what it came to, converted to US dollars. This helps us decide what the app should cost, if anything; it never includes anything from your payment.
None of this carries a name, an email, a song, a setlist's name or a tempo, or anything you type, search for or play. Instead of a device identifier, the service receives a salted one-way hash of it, which cannot be turned back into the identifier or linked to you. The counts are used only to see how many people use the app, on which devices and which of its features, and they are never sold or shared for advertising.
What the app stores, and where
On your device
Your settings — tempo, time signature, subdivision, click sound, volume, beat pattern, appearance and the rest — are stored on the device using the system's standard preference storage. They never leave it unless you turn on iCloud sync, and they are removed when you delete the app.
In your iCloud account
If you are signed in to iCloud with iCloud Drive enabled, your setlists and songs are synced through Apple's iCloud key-value storage so they appear on your other devices. This data lives in your iCloud account, under your Apple Account. We have no access to it — we cannot read it, copy it, or recover it for you. Apple's handling of iCloud data is covered by Apple's Privacy Policy.
Turning off Sync with iCloud in the app's Settings, or iCloud Drive, stops the syncing. The metronome itself works fully offline.
Your practice journal — when and how long you practised, at which tempos, on which songs and instruments, and your goals, pinned songs and gigs — is kept on the device and, while Sync with iCloud is on in the app's Settings, also in the private iCloud database of your Apple Account, so every device you sign in on shares one journal. Its contents are stored encrypted, and as with your setlists we cannot read, copy or recover it. Turning the setting off stops the syncing and keeps the journal on each device.
In your ENYO Sync account, if you create one
From version 1.4 the app on iPhone, iPad, Mac and Apple Vision Pro can also sign in to an optional ENYO Sync account, which keeps your setlists, songs and practice journal the same on every device and in the web app. It works beside iCloud sync, not instead of it, and you can use either, both or neither. What it stores, where and for how long is set out below.
Playing together with SharePlay
If you share Stage Mode on a FaceTime call, the setlist or song in hand — song names, tempos and meters — and the timing of the beat are sent to the other people on the call through Apple's SharePlay, so their metronomes play with yours. This goes through Apple, end-to-end encrypted, only for as long as you share, and never to us.
Files you choose to share
Exporting a setlist writes a .metroset file that you then send wherever you like. The file contains only the setlist: song names, tempos, meters and beat patterns. Nothing is uploaded anywhere in the process, and the file goes only where you send it.
Permissions the app asks for
Microphone
The tuner, and Listen, which works out a tempo from what you play, use the microphone. The sound is analysed on the device as it arrives and is never recorded, saved or sent anywhere. The app asks the first time you use either, and works without it otherwise.
Apple Music
With your permission, the app asks Apple Music for songs' album covers, plays their 30-second previews, and — if you subscribe to Apple Music — plays whole songs along with the click. On iPhone and iPad it asks only when you choose to connect it: from the Library, a song's preview or Settings. These requests go to Apple, which learns which songs were looked up, as it does for any app that uses Apple Music; they are covered by Apple's Privacy Policy. Nothing about them reaches us, beyond the usage count that you allowed it or not.
Notifications
If you turn on practice reminders in Goals, the app asks to show notifications. The reminders are scheduled on the device at the days and time you choose; nothing is sent anywhere to deliver them.
The app asks for no other permission — no camera, location, contacts, photos or health data.
What the app does not do
- It does not sell personal data, and without an ENYO Sync account it collects none.
- It contains no advertising, and no advertising identifier is read.
- It does not track you across apps or websites, and shows no tracking prompt.
- It needs no sign-in. The app (from version 1.4) and the web app offer an optional ENYO Sync account; the metronome never needs one.
- It contains two third-party libraries: TelemetryDeck's, for the anonymous counts above, and from version 1.3 RevenueCat's, for the purchase records below. Everything else is Apple's own frameworks.
Purchases
The app offers two optional tips: a small one that can be given as often as you like, and a larger one that also unlocks an alternate app icon. Neither unlocks any feature. Purchases are processed entirely by Apple through the App Store using StoreKit. We never see your payment details — not your card, not your name, not your address. The app receives a signed receipt from Apple confirming the purchase, and checks it on the device.
From version 1.3 on iPhone and iPad, the app also keeps a record of tips with RevenueCat, a service that records in-app purchases for developers. The app checks in with RevenueCat when it starts, under a random identifier RevenueCat creates on the device. With it go the same salted hash the usage counts use; the identifier iOS gives this developer's apps on your device (the vendor identifier, which no other company's apps share and which is not the advertising identifier); the app version, the operating system and device model; your preferred languages and App Store country; and whether the device allows apps to ask to track (this app never asks). When you buy a tip, RevenueCat receives the App Store's record of it — which tip, its price and currency, and the date — from the app and from Apple. It never receives your name, email, Apple Account or payment details, and we cannot connect anything it holds to you. RevenueCat processes this on our behalf, to show us how many tips were given; it is not used for advertising or tracking.
Apple provides us with anonymous, aggregated sales reports — totals by country and date. These contain no information that identifies any individual. Beyond them, the anonymous usage counts described above note that a tip was chosen or bought, and whether you are a supporter.
Children
The app is suitable for all ages and, without an account, collects no personal data from anyone, children included. The anonymous session counts described above are the same for everyone and identify no one. ENYO Sync accounts are meant for people aged 16 and over; anyone younger needs a parent's or guardian's consent to create one.
Your rights
Privacy laws including the GDPR and the CCPA give you rights to access, correct, export, restrict and delete the personal data a company holds about you, to object to its use, and to complain to a data protection authority (in Hungary, the NAIH).
Without an ENYO Sync account we hold none: the session counts and purchase records cannot be connected to you, so there is nothing we could find, produce or erase for a particular person. The data the app creates is on your own device and in your own iCloud account, entirely under your control: delete a setlist in the app to remove it, or delete the app to remove everything it stored locally.
With an ENYO Sync account, you can see and correct your name in the account panel, and delete the account with everything in it there at any time. For a copy of everything your account holds, or any other request, write to support@enyotechnologies.com from the account's email address; we answer within a month.
ENYO Sync, if you create an account
ENYO Sync is an optional, free account that keeps your setlists, songs and practice journal the same on every device and in every browser you sign in on: the app on iPhone, iPad, Mac and Apple Vision Pro (from version 1.4) and the web app. The metronome never needs it. You create it with an email address and a password, or by continuing with Apple or Google, in the app or in the web app.
What we store.
- Your account: your email address; your password, which our provider keeps only as a one-way hash that no one can read; your first and last name (the app greets you by the first); an identifier for the account; how you sign in; and when the account was created and last signed in. If you continue with Apple or Google, they share your name, your email address (with Apple, if you choose, a private relay address that forwards to yours) and an identifier for your account with them; Google also shares the address of your profile picture, which is stored with the rest but not used. We never see your Apple or Google password.
- What you sync: your setlists and songs (their names, their order and their settings, such as tempo, meter, accents and sound); your practice journal (when and how long you practised, the tempos, meter, song and instrument); your weekly goal, pinned songs, gigs (their date, time, venue and reminder), milestones and the instruments you play. Each item carries the time it was last changed.
Where. Accounts and synced data are kept for us by Supabase, on servers in Frankfurt, Germany, in the European Union. To keep the service working and safe, Supabase also keeps short-lived technical logs of requests, such as the IP address, the time and the browser. Emails about your account (confirming your address, resetting a password) are sent through Resend, which receives your email address, your first name and the email itself in order to deliver it. Both act only on our instructions, as our processors; where data reaches a company outside the European Union, the European Commission's Standard Contractual Clauses protect it. Signing in with Apple or Google happens on their own pages, under their own privacy policies.
How it is used. Only to keep your account and to sync. While you are signed in, the app and the web app send what changes, fetch what changed elsewhere, and stay connected to Supabase so that changes arrive within about a second. We do not look at your synced data except when you ask us for help with your account; it is never used for advertising, never sold and never shared. The anonymous usage counts described above carry nothing from your account.
On your devices. Signing in keeps a sign-in token and your account's identifier, email address and name on the device, so that you stay signed in: in the app, in the device's Keychain; in the web app, in the browser's storage for this site. Sign Out removes them; your setlists, songs and journal stay on the device or in the browser.
Deleting. Delete Account, in the account panel (opened from your picture, or in the app from Settings › ENYO Sync), deletes the account and everything synced to it from our server at once and for good, together with any purchase record linked to it. Each device keeps its own copy, signed out. When you delete a single item while signed in, a marker of it stays on the server, with its last contents, so that your other devices delete it too; these go when the account is deleted. We keep the account and its data until you delete it; to have an account deleted that you can no longer sign in to, write to us.
Legal basis. We process this data to provide the account and the sync you asked for (Article 6(1)(b) GDPR), and keep the technical logs to keep the service secure (our legitimate interest, Article 6(1)(f) GDPR).
The web app
ENYO Metronome also runs in your browser, at metronome.enyotechnologies.com/app/ (the older address enyo-metronome.netlify.app leads there), and can be installed from there as a web app. It works like the Mac app. This section says what it keeps and what it sends; the rest of this policy applies to it as well, except the parts about Apple's services (Apple Music, SharePlay, the App Store and notifications), which the web app does not use, and iCloud, which it does not use either.
What stays in your browser
Your settings, setlists and songs, practice journal, goals, pinned songs and gigs are kept in your browser's own storage for this site, on your device. You need no account, and unless you sign in to ENYO Sync (above) nothing is synced: none of it is sent to us or to anyone else. Exporting a setlist or your journal writes a file that goes only where you put it. Clearing this site's data in your browser removes everything the web app stored.
The tuner, and Listen, which works out a tempo from what you play, use the microphone once you allow it in your browser. The sound is analysed in the browser as it arrives and is never recorded, saved or sent anywhere.
Anonymous usage counts, only if you allow them
The first time you open the web app, a small card at the bottom of the window asks whether you want to help improve ENYO Metronome by sharing anonymous usage counts, with Allow and No thanks. You can change your answer at any time in the web app's Settings, with the Anonymous usage counts switch.
- If you allow them, the web app sends the same anonymous counts as the apps, described under Anonymous usage counts: sessions, which features are used, as fixed choices and ranges, how long the click ran, how long each screen was open and how often its buttons were pressed. With them go technical details: that it is the web app and which version, the family of browser and operating system (for example Safari on macOS), whether it runs in a browser tab or installed, whether the device is a phone, a tablet or a computer, the screen size, your language, region and time-zone settings, the time of day, light or dark appearance and accessibility display settings. They also say what kind of place you came from — a search engine, an AI assistant, a social network, the App Store, one of our apps, this website or nowhere — and the campaign tag a link carried, if any; never the address of the page you came from. To tell sessions and returning visits apart, the web app keeps a random identifier in your browser, together with the dates and lengths of your recent sessions and any counts waiting to be sent. The identifier is made up in your browser, says nothing about you, and is sent only as a one-way hash, as the apps do. Turning the switch off deletes all of this from your browser at once, together with any counts not yet sent; clearing this site's data in your browser does the same.
- If you choose No thanks, or have not answered yet, nothing is stored on your device for counting and nothing is read from it. The web app then reports only that a visit started and what kind of place it came from, as above, with the web app's version and the language and browser family that your browser tells every website anyway. TelemetryDeck turns the connection into a visitor code that changes every day and then discards your IP address, so these counts cannot be connected from one day to the next, or to you.
- If your browser sends Global Privacy Control or Do Not Track, the web app sends nothing at all and does not ask, and the switch in Settings stays off.
None of this carries a name, an email, a song, a setlist's name, a tempo, or anything you type, search for or play. TelemetryDeck, the privacy-focused analytics service the apps use, receives and stores the counts on our behalf, on servers in the European Union; it uses no cookies. Counts from test copies of the site are marked as test data. The web app sets no cookies and loads no analytics, advertising or tracking scripts: it sends the counts itself.
Tips on the web
The web app cannot use the App Store, so its tip jar opens the page of our tip provider (Ko-fi, or another service named in the tip jar), either in a panel over the app or in a new tab. That page belongs to the provider: what you enter there, and the payment itself, are handled by the provider and its payment processors under their own privacy policies. The provider passes on to us what it shares with any creator who receives a tip, such as the name and message you choose to leave; we never see your payment details. The web app sends the provider nothing of its own. If you allow usage counts, they note only which tip button was pressed and, when the provider sends you back, which tip was given; never an amount or anything from the payment. If you mark this browser as a supporter's, that mark is kept in this browser only.
This website
The website's other pages — About, the song tempo pages, Support and this policy — set no cookies and load no fonts or scripts from anyone else's server, which is why you see no cookie banner. About shows Apple's App Store badge, which your browser loads from Apple. The web app is described under The web app.
Support and this policy count nothing. About and the song tempo pages send one anonymous visit count each time one of them is opened: the same count the web app sends before you answer its question, described under The web app. It says that a page of that kind was opened (a song page, a list of songs, or About; never which song), what kind of place you came from, the website's version, and the language and browser family that your browser tells every website anyway. Nothing is stored on your device for it, and the only thing it reads is whether the browser is one of our own test devices, whose visits are not counted. TelemetryDeck turns the connection into a visitor code that changes every day and then discards your IP address, so these counts cannot be connected from one day to the next, or to you. If your browser sends Global Privacy Control or Do Not Track, nothing is sent.
Our web host records standard server access logs, as every web server does, and those are used only to keep the site running.
Links to the App Store, Apple Support and other Apple pages lead to Apple, whose own privacy policy applies once you leave here.
Changes
If a future version of the app changes what it stores or sends, this policy will be updated before that version is released, and the effective date at the top will change with it. Substantive changes will also be noted in the app's release notes.
Contact
Questions about this policy, or about privacy generally: support@enyotechnologies.com.