Privacy Policy

Last updated: October 2026 · riffwork.gpdoom.com

Riffwork is built for musicians. We collect the minimum needed to run the Service and don't sell it to anyone.

1. What We Collect

Without an account, nothing is sent to our servers. Your files stay on your device.

When you sign in we collect:

Your account email and name (for sign-in and account recovery)
Songs and bar notes you sync to your cloud library, with timestamps for conflict resolution

When you send feedback from inside the app we receive the text you write plus basic device and app information (app version, device type, browser or OS version) so we can reproduce the problem.

The guitar tuner listens through your microphone. The audio is analysed on your device only. It is never recorded or uploaded.

2. How We Use It

Delivering your cloud library to your devices
Generating share links you create
Sending password reset emails (only when you request one)
Reading and answering feedback you send

We do not use your data for advertising, and we do not sell or rent it to third parties.

3. Data Storage

Account data and cloud files are stored with Supabase (AWS infrastructure, US East region). Data is encrypted in transit (TLS) and at rest.

4. Third-Party Content

Two optional features load content from other companies, only when you use them. The YouTube embed (play-along video) loads from YouTube. The Dropbox file picker loads from Dropbox. Those companies see your request under their own privacy policies. Riffwork has no ads and no analytics trackers.

5. Local Storage

Riffwork stores your local library, preferences, and app state on your device. This data never leaves it unless you sign in and enable cloud sync.

6. Cookies

We use a session token issued by Supabase to keep you signed in. We do not use advertising cookies or third-party tracking.

7. Your Rights and Deleting Your Account

Access: Your cloud songs are visible in your account library.
Export: Download any song by opening it and exporting to .gp7.
Delete a song: Delete individual songs in the app.
Delete your account: Delete account inside the app (Account menu) removes your account and data across Riffwork, RigWork and the records app. If you cannot sign in, email us from the account's address.

8. Children

Riffwork is not directed at children under 13. We do not knowingly collect data from children.

9. Changes

We may update this policy. Material changes will be communicated via the app or email before taking effect.

10. Contact

Questions or data requests: feedback@gpdoom.com · Support