LigaturaPrivacy policy
Last updated: 12 November 2026
This page covers the ligatura.app website and the Ligatura app for iPhone. It says, in plain words, which data is processed, why, and what you can ask for.
In short
- The website sets no cookies and uses no analytics tool.
- Your working data in the app (gigs, fees, contacts, projects, invoices, files, IBAN) stays on your iPhone. It is never sent to Ligatura.
- During the beta, your artist name and email are only sent if you agree.
- No ads, no selling of data, no tracking across apps or websites, no newsletter.
Who is responsible
The data controller is Cyril Carron, in Switzerland. Full contact details are in the legal notice.
For any question about your data: support@ligatura.app.
The ligatura.app website
Cookies and analytics
The website sets no cookies, uses no trackers and loads nothing from third-party services: fonts and images are served by the site itself. There is no consent banner because there is nothing to accept or refuse.
Hosting
The website is hosted by Vercel Inc. (United States). Like any host, Vercel processes technical data on each visit: IP address, date and time, requested page, browser type.
- Purpose: to display the site and protect it against abuse.
- Legal basis: our legitimate interest in running a safe and available website.
- Retention: these logs are kept by the host for a limited time, under its own rules. We do not combine them with any other data.
Waitlist and contact
The “Join the waitlist” button opens your Mail app. If you write to us, we receive your email address and the content of your message.
- Purpose: to let you know when Ligatura reaches the App Store, and to answer your request.
- Legal basis: your consent, which you give by writing to us and can withdraw at any time.
- Retention: until the launch is announced, then 3 months at most. You can ask for deletion sooner, with a simple email.
- Recipients: Infomaniak Network SA (Switzerland), which hosts the support@ligatura.app mailbox, and nobody else.
The Ligatura app
What stays on your iPhone
Everything you create in Ligatura is stored on your iPhone:
- gigs, fees and income, projects, tracks, checklists;
- contacts and collaborators you add;
- invoices, attached files, cover photos;
- your invoicing profile (legal name, address, phone, bank, IBAN, VAT number), kept in the iOS Keychain.
iCloud sync. If it is turned on (Settings › Backup and data), this data goes through the private database of your iCloud account, managed by Apple. Ligatura has no access to it. The most sensitive fields (IBAN, VAT number, addresses, contact details) are end-to-end encrypted there.
Backups. Automatic copies stay on the iPhone, without your IBAN or contact details. A backup you export (AirDrop, Mail, Files) is encrypted with a password you choose. That password is not stored anywhere.
What leaves, only if you agree
On the “Your data, your choice” screen, at the end of onboarding, you can accept or decline. You can change your mind at any time in Settings › Beta › Data sharing.
| Data | Why | Received by |
|---|---|---|
| Artist name, email, chosen palette | To send you the welcome email and contact you during the beta | Make.com (automation, servers in the EU), which sends the email from support@ligatura.app and records your sign-up in a Google Sheets table |
| Answers to the day 7, day 14 and day 30 surveys, with your name and email | To improve the app based on your feedback | Formspree (United States) |
If you decline: nothing is sent to Make, and your survey answers are sent without your name or email.
Legal basis: your consent, which you can withdraw at any time. Withdrawing it does not affect what was done before.
Retention: data sent during the beta is kept until the end of the beta, then for 3 months. After that, it is deleted from Make, Google Sheets and Formspree.
What the app asks iOS for
Each permission is requested when it is needed, and you can revoke it in your iPhone’s Settings.
- Calendar: to write your gigs to your calendar and keep them up to date. Ligatura only reads it to find the gigs it added and avoid duplicates. It only edits its own events, and only copies your notes there if you turn that on. Nothing from your calendar is sent anywhere.
- Contacts: no access to your address book. The iOS picker only gives Ligatura the card you choose.
- Camera and photos: to take or choose a project cover. The iOS photo picker only gives the images you choose.
- Notifications: reminders for your gigs, scheduled on the iPhone.
- Face ID: to lock the app. Recognition is done by iOS; Ligatura never receives biometric data.
Transfers outside Switzerland and the EU
Vercel, Formspree and Google may process data in the United States. These transfers are covered by their contractual safeguards (standard contractual clauses).
Your rights
You can ask to access, correct or delete your data, receive a copy of it, object to processing or ask for it to be restricted, and withdraw your consent. Write to support@ligatura.app, or in the app use Settings › Beta › Data sharing › “Request deletion of my data”. You will get an answer within 30 days.
You can also contact a data protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in France the CNIL, or the authority in your country.
Security
The website is served over HTTPS only, with no scripts. In the app: invoicing profile in the iOS Keychain, files protected by iOS encryption, exported backups encrypted with a password, lock by Face ID or iPhone passcode. No advertising or analytics SDK.
Changes
If this policy changes in a significant way, the date at the top of the page is updated and, for the app, you are told in the app or by email before the change applies.