LEGAL
Privacy policy
Last updated: 18 October 2026
Who is responsible
Fretster is an independent project based in Spain. Its developer is the controller of your data. Contact: victor.suarez.ferrer@gmail.com.
What data we process
Your practice: tempos (BPM), sessions and exercises completed, ratings, notes, goals, monthly check-ins and streaks. They are stored on your device and, if you sign in, also in your account so they sync across devices.
Your account: if you sign in with Google, we receive your name, email address and profile photo. We do not store passwords.
Recordings: if you record a take, the microphone is only used while you record. The audio stays on your device and is never uploaded; your account only keeps its length and your ratings.
Academies: if you join a teacher's academy, that teacher can see your practice activity and progress (sessions, tempos, ratings and assignments). Teachers who connect Google Calendar authorise us to create and read their lesson events.
Analytics (only if you accept): Google Analytics records pages visited and actions such as starting or finishing a practice or installing the app, so we know what to improve. We also use Vercel Web Analytics, which counts visits in aggregate and without cookies.
Errors: when something breaks we may receive a technical report (browser, page and error) so we can fix it.
Why, and on what legal basis
Providing the service (showing your progress, syncing your data, the teacher portal): necessary to give you what you ask for when you use the app.
Usage analytics: only with your consent. You can change it at any time under "Cookies" at the bottom of every page.
Error reports and security: our legitimate interest in keeping the app working and safe.
We do not sell or rent your data, or use it for advertising.
Cookies and local storage
Necessary (no consent needed): your browser's local storage keeps your practice, your preferences and your Google sign-in.
Analytics (consent needed): Google Analytics sets cookies (_ga) only if you press "Accept". If you reject, it never starts and we delete those cookies.
Who else processes your data
Google (Firebase: sign-in, database and Google Analytics), Vercel (web hosting and cookieless analytics) and, when enabled, Sentry (error reports). Some of these providers may process data outside the EU with the safeguards the GDPR requires, such as standard contractual clauses.
How long we keep it
Account data until you delete your account. Data on your device until you clear the site's data. Analytics data for the retention period set in Google Analytics.
Your rights
You can access, correct, delete, object to, restrict and take away your data. From the menu you can export it as JSON and delete your account with all its data.
For anything else write to victor.suarez.ferrer@gmail.com. If you think we have mishandled your data, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
Children
If you are under 14, you need a parent or guardian's permission to create an account.