Cantora (Zyntec) turns photos of printed sheet music into scores you can play. To recognise the music, the pages you scan are sent to our server. This page explains which data the app handles, why, where it goes and how long it is kept.
In short
No account is required and there is no sign-in or e-mail.
Pages you scan are sent to our recognition server, processed in memory and not stored there. Before your first scan the app asks for your consent.
Your library (scores, page images and corrections) is stored on your device and, if iCloud is on, in your own private iCloud storage. We cannot see it.
No advertising, no tracking (App Tracking Transparency), no analytics and no third-party crash reporting tools are used.
Scanning and recognition
When you scan a page with the camera, pick a photo or open a PDF, the page image is sent over an encrypted connection (HTTPS) to our recognition service, which runs on Google Cloud Run (Google LLC) in the European Union (region europe-west1). The image is held in memory only while it is recognised and is not written to storage or kept after the request.
To check that a page actually shows printed music (and not, for example, handwriting or a photo of something else), the same image is also sent to Anthropic's Claude model (Anthropic, PBC) through its API. Anthropic does not use data sent through its API to train its models. Details: www.anthropic.com/legal/privacy
The result that comes back (the recognised notes) is stored in your library on your device. The app sends only the pages you choose to scan; it never sends your contacts, location or other photos.
If you do not give consent, nothing is sent and you can still use the sample piece.
Camera and photos
The camera is used only while you scan, through Apple's document camera. When you choose photos, Apple's photo picker gives the app only the images you select; it does not get access to the rest of your library.
Anonymous ID, page limit and abuse protection
To apply the page limit (5 pages every 30 days on the free version, up to 600 with Pro), the app signs in anonymously with Firebase Authentication (Google LLC). This creates a random ID that is not linked to your name, e-mail or Apple Account.
For that ID our server keeps a usage record in Google Cloud Firestore: one entry per page request with its time, whether you had Pro, and whether the page was given back (for example because it wasn't music). Entries are named with a one-way hash; they contain no page images, scores or file names.
Firebase App Check (with Apple's DeviceCheck) is used to confirm that requests come from the genuine app, which protects the service from abuse. Details: firebase.google.com/support/privacy
Your library and iCloud
Scores, the page images they came from and your corrections are stored in the app's storage on your device.
If you are signed in to iCloud and iCloud is enabled for the app, your library is synced between your devices through your own private iCloud database (Apple CloudKit). This data is stored by Apple under your Apple Account; we have no access to it. Details: www.apple.com/legal/privacy/
Your settings (for example language and sound) are stored on your device.
Purchases
Payments are processed by Apple; your card details never reach us.
RevenueCat, Inc. is used to verify your Pro purchase. RevenueCat receives an anonymous ID, your purchase and subscription records, the app version, device type and iOS version, your App Store country, and which purchase screen the purchase was made from. This is used only to unlock what you bought and to understand which purchase screens work. Details: www.revenuecat.com/privacy
So that our server can apply the Pro page limit, the anonymous Firebase ID is linked to your RevenueCat ID. Neither is linked to your name or e-mail.
Notifications
If you start the 7-day free trial and allow notifications, the app schedules a reminder on your device 2 days before the trial ends. It is created on your iPhone or iPad; no push service or server is involved.
Crash reports
The app contains no crash reporting tool of its own. If you have chosen to share analytics with app developers in Settings › Privacy & Security › Analytics & Improvements, Apple may share anonymous crash reports with us. You can turn this off at any time in the same place.
Sharing and export
Exported files (MusicXML, MIDI or PDF) are sent only where you choose, for example Files, Mail or another app. They are not sent to us.
E-mail to us
If you write to us, we use your message and e-mail address only to answer you, and delete them when they are no longer needed for that.
Retention and deletion
Page images are not kept on our server after recognition. You can delete pieces in the app at any time; with iCloud on, they are also removed from your iCloud. Deleting the app deletes its data on the device; data left in your iCloud can be removed in Settings › [your name] › iCloud.
The usage record for your anonymous ID is kept while it is needed to apply page limits. If you want it, or the anonymous purchase records at RevenueCat, deleted, write to us; your purchase history is also kept by Apple.
Service providers and transfers
Google LLC (Cloud Run, Firebase Authentication, App Check, Firestore), Anthropic, PBC (page check) and RevenueCat, Inc. (purchases) process data on our behalf, only for the purposes above. Some of them are based in the United States; transfers are covered by their data processing terms, including the EU Standard Contractual Clauses where required.
Your rights
You can contact us to exercise your rights of access, correction, deletion and objection under the GDPR, UK GDPR, CCPA and similar laws, and you may complain to your data protection authority. Because there is no account, requests usually concern the anonymous usage and purchase records described above.
Children
Cantora is not directed at children under 13 and does not knowingly collect personal data from children.
Changes
If the app starts processing new data, this page is updated first; the date above shows the latest change.
Contact
Zyntec · developer@zyntec.app