3.3. Content you upload
- Songs, chord sheets, repertoires, and collections.
- Event photos and albums.
- Descriptions and other data you save in the app.
October 28, 2026.
1.0 – draft for legal review before publishing
This Privacy Policy explains how NOTEQ collects, uses, stores, and protects the personal data of platform users.
NOTEQ is a platform for musicians, bands, and event organizers, enabling profile creation, song and repertoire management, booking organization, and related features.
Please read this policy carefully to understand what data we process, for what purposes, on what legal basis, and what rights you have.
The data controller is:
Depending on how you use the platform, we may process the following categories of data.
If you log in via Google, we receive from Google: Google account identifier, email address, display name, and profile photo URL. Google is the only external identity provider currently supported.
Depending on visibility settings, some of this data may be accessible to other users or the public.
The exact scope depends on app configuration and third-party services. We do not claim all data is anonymized.
We process data only to the extent necessary for specific, lawful purposes.
Legal basis: performance of a contract.
We use email for messages directly related to your account and platform activity: account verification and password reset; booking notifications (new request, confirmation, decline, cancellation, expiry); performance reminders (7 days and 24 hours in advance); review prompts, reminders, and results; band invitations and new member notifications.
We use Resend to send emails. NOTEQ does not use Resend for marketing campaigns.
Legal basis: performance of a contract or legitimate interest for operational communication.
If you grant notification permissions, we use Firebase Cloud Messaging (FCM) to send real-time notifications about platform events. A device token is assigned to your device for message delivery and stored by NOTEQ.
Legal basis: consent or legitimate interest for operational communication.
We use Sentry for error diagnostics, configured with: maskAllText: true, blockAllMedia: true, session replay disabled in normal operation (enabled only on error), and HTTP body and user data collection disabled.
Sentry is initialized only if you have approved the diagnostics category.
Legal basis: consent for diagnostic processing.
If you approve the analytics category, we use GA4 and PostHog. GA4 is configured in Advanced Consent Mode v2: before consent is granted, all parameters (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to 'denied', but the GA4 script still loads and may send cookieless pings without identifiers — Google uses these signals for aggregate behavioral modeling. Full data collection activates only when you grant analytics consent. NOTEQ does not send user_id, email, or any direct identifier to GA4. PostHog is initialized only with analytics consent. Before login, events are recorded without user identifiers. Once you log in, PostHog receives your user ID, email, name, and username — tracking is no longer anonymous from that point. If you revoke consent, PostHog stops collecting (opt_out_capturing). On logout, the PostHog profile is reset.
Legal basis: consent.
NOTEQ does not currently use active advertising tags, Google Ads campaigns, or other marketing technologies. GA4 is configured with Consent Mode v2 — ad_storage, ad_user_data, and ad_personalization are denied by default — but this configuration has no practical effect while no active ad campaigns exist.
If marketing technologies are introduced in the future, this policy will be updated and your consent requested before activation.
Legal basis: consent.
Where processing is based on consent, you may withdraw it at any time via privacy settings. Withdrawal does not affect the lawfulness of prior processing.
Most service providers process data outside Serbia. Transfer locations and mechanisms:
We retain data only as long as necessary for the purposes for which it was collected, unless longer retention is required or permitted by law.
Upon account deletion request, we will delete or anonymize data in accordance with applicable rules. Certain data may be retained where there is a lawful basis.
NOTEQ implements appropriate technical and organizational measures to protect data. No system can guarantee absolute security. In the event of a personal data breach, we will act in accordance with applicable law, including notifying the relevant authority or affected individuals where legally required.
To exercise these rights, contact us at [email protected].
If you upload photos or information about other people, you are responsible for having the appropriate authority or legal basis. Contact [email protected] if you believe your personal data has been published without a proper basis.
NOTEQ is a platform for managing musical content — songs, chords, and repertoires — and has no minimum age restriction. Minor users may use NOTEQ with the consent of a parent or legal guardian.
If we become aware that we have collected personal data from a child without appropriate authorization, we will take appropriate steps including deletion of that data.
We may update this policy when features, service providers, or processing methods change. The updated version will be published with a new date. For significant changes, we will notify users via the app or email. Publishing a new version does not constitute consent for processing that requires consent.
For questions, requests, or complaints regarding personal data processing:
[email protected]https://noteq.rs