Your guitar stays in the room.

1. Who is responsible

GuitarHarbor is published by Tim Grootes. Questions about privacy or this policy can be sent to hello@bumblly.com.

2. Data kept on your device

Onboarding choices, app settings, practice history and chord progressions you create are stored in the app’s local data. GuitarHarbor has no conventional sign-in and does not sync this learning data to a GuitarHarbor cloud account. Apple may include local app data in a device or iCloud backup according to your Apple backup settings.

3. Microphone and guitar audio

Microphone access is optional and requested only when you use the tuner or listening feedback. Short audio buffers are analysed in memory on your device. GuitarHarbor does not record, save or upload microphone audio.

4. Optional Haro cloud AI

Haro starts only after you choose “Use Haro AI.” A chat request can contain your typed question, app language, the current app surface and up to four recent messages from that open chat. Cloud narration contains only a GuitarHarbor-authored caption, its content ID, language and voice settings.

GuitarHarbor removes email addresses and phone-like numbers from learner chat text before provider processing. This is an additional safeguard, not a reason to enter personal information. Please do not type names, addresses, health details, account credentials or other personal data.

The bounded request is sent through GuitarHarbor’s first-party server to OpenRouter and xAI. Provider routing requests zero-data-retention and disables provider data collection. Microphone audio, recordings, payment-card details and local practice history are never attached. Chat question and answer text is used to answer the live request and is not written to GuitarHarbor’s server database or logs.

5. Pseudonymous access and quota records

Haro needs to verify the app and enforce fair-use limits without asking you to create a GuitarHarbor login. The server derives a stable pseudonymous identifier from Apple-signed app/account proof using a one-way secret hash. It does not receive your Apple ID email or name.

The server stores account creation and last-seen times, short-lived session records, monthly question and narration quota totals, and operational request metadata: a random request ID, quota source, status and time. It also keeps short-lived, one-way IP-derived rate-limit buckets to prevent abuse. It does not store the text of Haro questions or answers.

6. Retention

• Haro sessions expire within one hour.
• Chat and speech request-status metadata is deleted after 35 days.
• Only the current and immediately previous monthly quota buckets are retained.
• Rate-limit buckets are deleted after a few minutes.
• Inactive pseudonymous accounts without paid-credit history are deleted after 365 days.
• If cloud credits are offered, pseudonymous purchase records are retained while needed to prevent duplicate crediting or preserve an unused balance, unless you request cloud deletion.

7. Delete or turn off Haro

Open Haro, tap the settings menu and choose Delete Haro cloud data. After a current Apple-signed app proof is verified, this permanently deletes the pseudonymous account and its sessions, quota records, request metadata and cloud-credit records. No conventional account or password is required.

Turn off cloud AI removes consent and the session from this device but does not claim that server records were deleted. If you intend to remove both, use the deletion action before deleting the app. Deleting the app removes local data from that device but cannot send a server deletion request.

8. Purchases

Apple processes App Store purchases and payment details. GuitarHarbor receives product and entitlement information through StoreKit to unlock and restore Pro access. GuitarHarbor does not receive your full payment-card details.

9. Children and age

The local learning tools do not ask for a name or age. Haro cloud AI is intended for people age 13 or older. A parent or guardian must choose and supervise Haro on behalf of anyone younger and should manage microphone permission and App Store purchases.

10. Tracking, advertising and sale

GuitarHarbor contains no advertising SDK, third-party analytics SDK or cross-app tracking. GuitarHarbor does not sell personal data.

11. Changes

If this policy changes materially, the effective date will be updated and fresh in-app consent will be requested before newly disclosed Haro cloud processing begins.