Privacy Policy

Tonograph is built to work without an account and without a network connection. What it sends depends on which version you use: the paid version sends nothing, and the free version sends anonymous usage counts that you can turn off. This policy describes both.

What the app collects

The paid version (Mac App Store and Microsoft Store)

Nothing. The paid version contains no telemetry, no analytics, no crash reporting and no account system. It does not send your scores, your files, your machine details or your usage anywhere, and it makes no network requests on its own — not even to check for updates, which the store handles.

The free version (downloaded from this site)

The free version sends anonymous usage counts so that we can see which parts of the app are used and whether people who try it go on to the paid version. It is on by default, and you can turn it off at any time in Settings › General. When you turn it off, anything not yet sent is deleted from your computer and nothing more is sent.

What is sent:

• that the app started and closed, whether it was the first time it ran, how long it stayed open (rounded to 10 seconds), and roughly how many edits were made (rounded to 1, 2, 5, 10, 20, 50 and so on)
• the app version, the operating system, the processor type and the interface language
• the kind of file that was opened: a .gp file, a Tonograph file, a sample score or a new score
• that saving or exporting was tried, and which kind — the free version cannot write to disk
• that the message about the paid version was shown or clicked, and where in the app
• whether the pedalboard, the AI integration or audio input was used during that session
• the result of each update check: up to date, update available, or failed

Each item carries the date it happened (not the time) and a random install ID.

What is never sent: the contents of your scores, file names or paths, song and track titles, anything that passes through the AI integration, audio from your input device, your computer’s name, your user name, hardware identifiers, or the time of day.

The install ID is a random number created when the app first runs. It is not linked to an account, a purchase or your computer, and you can replace it at any time from Settings › General — the counts not yet sent under the old ID are deleted when you do.

The counts go to our own endpoint at tonograph.app, which runs on Cloudflare. We store the install ID only as a salted hash, never the ID itself. Our endpoint does not read or store your IP address. It does store the country the request came from, as reported by Cloudflare. Cloudflare itself handles the connection under its own privacy policy. The data is kept for three months and then deleted automatically. No third-party analytics service is involved.

Because the setting is on by default, the counts from the first session after installing are sent unless you turn the setting off during that session. If the app cannot reach the endpoint, it keeps up to 500 unsent counts on your computer and tries again the next time it starts.

What stays on your computer

The app writes several things to your own computer, and only there:

• Your scores — where you save them
• Auto-save and recovery files — used to restore work after an unexpected quit
• Settings — window size, panel layout, appearance, language and audio preferences
• Logs — written locally to help diagnose problems, and rotated automatically
• The install ID and unsent usage counts — free version only, described above

None of the first four is transmitted. You can delete all of it at any time by removing the application’s support folder.

Checking for updates

The version downloaded from this site checks for a newer release about 10 seconds after it starts, at most once every 24 hours, and also whenever you choose “Check for Updates…” from the Tonograph menu. If a newer version exists, the app asks before downloading anything. If you choose “Later”, the automatic check will not ask about that version again.

To check, the app asks dl.tonograph.app for a small file listing the current version. That request carries no identifier: no account, no licence key, no machine fingerprint and no information about your scores or your use of the app. As with any download, the server answering it sees your IP address; we do not use it to identify you or build a profile.

The store versions do not have this feature at all — the Mac App Store and the Microsoft Store deliver their own updates.

The AI (MCP) integration

Tonograph can act as an MCP server so that an AI client on the same machine can read and edit the score you have open. This feature is off by default. When you turn it on:

• the server listens only on your own machine (127.0.0.1), never on your network
• a token is required for every request
• the AI client you connect is a separate program with its own privacy policy — what it does with the score it reads is governed by that program, not by Tonograph

Buying the app

The paid version is sold through the Mac App Store and the Microsoft Store. Purchases, refunds and receipts are handled entirely by the store you buy from — Apple or Microsoft; Tonograph receives no payment details. That store’s privacy policy applies to the transaction.

This website

This site uses privacy-preserving, cookie-free analytics that record aggregate page views only. No cookies are set, no profile is built, and no personal information is collected. If you email us, we keep that correspondence only for as long as it takes to help you.

Changes

If this policy changes, the date at the top of this page changes with it.

Who operates Tonograph

Tonograph is developed and published by Noop, LLC. (合同会社Noop), a company registered in Japan. Our website is noop.co.jp, and the founder is Kazuyuki Hayashi.

Contact

Questions about this policy: support@tonograph.app