This Privacy Policy explains how Vidus Teknoloji Anonim Şirketi ("Vidus6", "we", "our", "us") handles personal data when you use the Scora app. It covers the app on every platform it is published on. Our website, vidus6.com, has its own privacy policy.
Who we are
Vidus6 is the brand of Vidus Teknoloji Anonim Şirketi, a consumer software company established in Türkiye. We are the data controller for the personal data described in this policy.
- Registered office: Esenyalı, Yanyol Cd. Varyap Plaza No:61 İç Kapı No:247, 34903 Pendik/İstanbul, Türkiye
- Email: contact@vidus6.com
- Phone: +90 850 303 27 01
In short
- Most of your content stays on your device. Anything a feature needs to send elsewhere is listed below under "What leaves your device".
- No account is required, and Scora does not offer one.
- We do not sell your personal data.
- Scora shows no ads.
Data we collect
Usage and device data
To understand which features work, fix problems and improve the app, Scora collects information about how it is used: events such as opening the app, completing onboarding, using a feature, viewing the subscription screen or making a purchase, together with the app version, device model, operating system version, language, country and a random identifier created when the app is installed. The app may also use an identifier provided by the device to recognise the same device after a reinstall and to prevent fraud and abuse.
This data is sent to our own analytics service and to Mixpanel (on its European servers) and Google Analytics for Firebase. It is not used to identify you by name.
Crash reports
The app may send crash reports (the state of the app and device at the moment of a crash) to Google Firebase Crashlytics so that we can fix bugs.
Purchases and subscriptions
Payments are processed by Apple (App Store) and Google (Google Play); we never receive your card details. We receive information about your subscription status, the products you bought, trial periods and renewals through RevenueCat, which manages subscriptions on our behalf. On iOS the app may receive an Apple Search Ads attribution token so that we can tell which of our campaigns led to an install. Purchase events (such as the product and its price) are also sent to Google Analytics for Firebase, which we use to measure and optimise our own advertising campaigns.
What leaves your device
Beyond the usage, crash and purchase data described above, this is what Scora sends off your device, and where it goes:
When you recognise a score, the page images you captured or imported are sent to our own server and from there to our recognition provider, Flat (Tutteo), which converts them into MusicXML. The images are never written to disk on our server, the provider's copy is deleted as soon as the result is returned, and they are never used to train models. A device identifier, your plan and the page count are sent with each request to enforce the page allowance. Your scores, edits and exports stay on your device. The tuner listens to your instrument on the device only; nothing is recorded or sent anywhere.
Permissions on your device
Scora may ask for the following device permissions, each only when a feature needs it: Camera (scanning sheet music), Photos (scanning photographed pages), Files (PDF import), Microphone (tuner only). You can withdraw a permission at any time in your device settings. Biometric checks (Face ID, fingerprint) are performed by your device's operating system; your biometric data never reaches us.
Messages you send us
When you contact us from the app or through our websites, we collect the details you provide, such as your name, email address and message, and use them to reply to you.
Ads and tracking
Scora shows no ads and does not ask for the tracking permission. Install attribution for our own campaigns uses the purchase and Apple Search Ads data described above, without tracking you across other apps.
How we use data and our legal bases
We use personal data to:
- Provide the app and the features you use, subscriptions and support. Legal basis: performance of our contract with you (GDPR art. 6(1)(b); KVKK art. 5(2)(c)).
- Understand usage, fix crashes, keep the app secure and prevent fraud and abuse. Legal basis: our legitimate interests (GDPR art. 6(1)(f); KVKK art. 5(2)(f)).
- Measure our own advertising campaigns through install attribution. Legal basis: our legitimate interests (GDPR art. 6(1)(f); KVKK art. 5(2)(f)).
- Meet our legal obligations, such as keeping records and responding to lawful requests. Legal basis: legal obligation (GDPR art. 6(1)(c); KVKK art. 5(2)(ç)).
Who we share data with
We do not sell personal data. We share it only with service providers that process it on our behalf under contracts that require them to protect it, or when the law requires it.
| Provider | Purpose |
|---|---|
| Google (Firebase Analytics, Crashlytics, App Check, Cloud Messaging) | Analytics, crash reports, protection against abuse, notifications |
| Mixpanel | Product analytics (European servers) |
| RevenueCat | Subscription management and purchase attribution |
| Apple and Google | App stores, payments, speech recognition, Apple Search Ads attribution |
| Flat (Tutteo) | Sheet music recognition: page images are converted to MusicXML, deleted there as soon as the result is returned, and never used to train models |
| Our own servers | Our analytics service and contact messages, and the app features described above |
We may also disclose data when the law requires it, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply.
International transfers
Some of our service providers store or process data outside Türkiye and outside your country, including in the European Union and the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the standard contractual clauses under the GDPR and the measures set out in article 9 of Türkiye's Personal Data Protection Law No. 6698 (KVKK).
How long we keep data
- On your device: until you delete it from the app or uninstall the app.
- Usage data: up to 24 months, after which it is deleted or kept only in aggregated form.
- Content sent to app features: as described under "What leaves your device"; content that is not stated to be stored is processed to produce the result and not kept.
- Messages you send us: for as long as needed to handle your request and a reasonable period afterwards.
- Purchase records: for as long as the law requires.
Your rights
Depending on where you live, including under the GDPR, the UK GDPR, the KVKK (article 11) and US state privacy laws, you may have the right to:
- learn whether we process your data and access a copy of it;
- have inaccurate data corrected and data deleted;
- restrict or object to processing, including processing based on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing that has already taken place;
- learn which third parties your data has been transferred to, and object to decisions based solely on automated processing that affect you;
- claim compensation for damage caused by unlawful processing.
To exercise any of these rights, email contact@vidus6.com. We respond within the period set by law (30 days under the KVKK). Because the app has no account, please tell us the identifier shown in its settings or support screen, if there is one, so that we can find your data. If you are not satisfied with our response, you can complain to a data protection authority, such as Türkiye's Personal Data Protection Authority (KVKK) or the authority in your country.
Children
Scora is not directed at children under 13, and we do not knowingly collect their personal data. If you are below the age required in your country to consent to data processing, please use the app only with the permission of a parent or guardian. If you believe a child has provided us with personal data, contact us and we will delete it.
Security
We apply technical and organisational measures to protect personal data, including encryption in transit, access controls and limiting access to those who need it. No system is completely secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy when the app or the law changes. The current version is always on this page with its "Last updated" date. If a change is significant, we will let you know in the app.
Contact
Questions about this policy or your data: email contact@vidus6.com or write to Vidus Teknoloji Anonim Şirketi, Esenyalı, Yanyol Cd. Varyap Plaza No:61 İç Kapı No:247, 34903 Pendik/İstanbul, Türkiye.