TabLift Privacy Policy

Last updated: 2026-10-27

TabLift is a browser extension and a mobile app (iOS and Android) that clean up guitar tab and chord sheets. This page explains what data TabLift collects, why, and what control you have over it, across both the extension and the mobile app.

The short version

Both the extension and the mobile app work without an account. If you never create one, your library stays on your device and never reaches our servers (the mobile app still sends crash reports, described below).
Creating an account is optional, and lets you sync your settings and your saved song library across devices.
We store your email address and a unique account ID — nothing else about you as a person.
We never sell your data, to anyone, ever.
TabLift offers an optional Pro subscription (unlimited sync of your songs, set lists and collections across devices). Payment is handled by Apple (App Store), Google (Google Play), or Stripe (our website), depending on where you subscribe — we never see or store your card details, only your subscription status. Subscribing in the mobile app doesn't require an account: without one, we keep only a random ID with your subscription status (no email or name) so Pro works and can be restored.
You can permanently delete your account and all synced data at any time, from inside the extension or the app.

What we store, and why

Data	Why we have it	Where it lives
Saved tabs/chords, transpose settings, tuning, theme, etc.	Core functionality of the extension and app	Locally on your device always; also in Supabase once you're signed in, so it syncs across devices
Email address, account ID (a random identifier, not derived from anything personal)	To authenticate you and know which synced data belongs to you	Supabase (see "Who else sees your data" below)
Settings/preferences, saved song library	To sync these across your devices when you're signed in	Supabase, only if you create an account and use sync
Subscription plan (free/Pro), subscription status, and the reference ID your payment provider (Apple, Google Play, or Stripe) uses for it	To know which features your account is entitled to	Supabase. No card numbers or other payment details are ever stored by us — your payment provider holds those.
Text of songs you import from other websites	To show you the song	On your device, and in Supabase while you're signed in, so the song syncs to your other devices. It's private to your account — we never share or publish it.
When your account first opened the upgrade screen (mobile app) -- a single date	To understand how many people consider Pro	Supabase
Crash and error reports (mobile app): what went wrong, device model, operating system and app version, and your account ID if you're signed in	To find and fix bugs	Firebase Crashlytics (Google). Reports don't include your email address or your songs.

We do not collect browsing history, page contents from sites you visit, or any advertising or tracking data. TabLift doesn't include ads or an analytics SDK.

The mobile app uses your microphone only with your permission, and only while the tuner is running or while you record a loop. The tuner's sound is analyzed on your device to find the pitch and is never recorded. Loops you record (Practice, My loops) are saved only on your device -- they aren't synced, backed up or sent to us or anyone else, and leave your device only if you share one yourself.

Signing in

Account creation uses Google sign-in (both extension and app), and Apple sign-in (iOS app). When you sign in, that provider shares your email address and account identifier with our authentication service (Supabase) so it can create your account — TabLift never sees or stores your password, and we never receive anything from these providers beyond what's needed to identify your account.

Who else sees your data

Supabase hosts our database and authentication service. They store your account data on our behalf, encrypted at rest and in transit, and enforce database-level rules (Row Level Security) so your account can only ever read or write its own data — not even we can query one user's data through another's session.
Google and Apple act as sign-in providers, per above, and as payment processors if you subscribe through their app stores (below).
Apple, Google Play, and Stripe process Pro subscription payments, depending on where you subscribe. Your payment details go directly to them; we only ever receive your subscription status and a reference ID, never your card number or other payment details.
Firebase Crashlytics (mobile app) — if the app crashes or hits an unexpected error, a crash report (device/OS info, app version, and a stack trace) is sent to Google's Firebase Crashlytics service so we can find and fix the bug. If you're signed in, that report is tagged with your account ID so we can tell how many people a given issue affects — it never includes your saved song content, email address, or password.

We do not sell, rent, or otherwise share your data with any other third party.

If a copyright owner sends us a valid notice about content saved to an account, we may remove that content — see our Copyright Policy.

How long we keep it

Synced data is kept for as long as your account exists. If you delete your account, your account and all synced settings/songs are permanently deleted immediately — this isn't a soft-delete or a grace period. If you never created an account, uninstalling the extension or the app removes all local data from your device. Crash reports are kept by Firebase Crashlytics for up to 90 days.

Your rights

Access: your synced settings and song library are visible directly in the extension or the app at any time.
Deletion: open the extension's Account panel, or the app's Settings screen, and choose "Delete my account" to permanently delete your account and all synced data. You can also email us (below) to request deletion. Full steps: Data Deletion Instructions.
Portability: your song library can be exported to a file at any time from the Library tab (extension) or Settings (app).

Children's privacy

TabLift is not directed at children under 13, and we do not knowingly collect data from children under 13.

Changes to this policy

If our practices change, we'll update this page and the "Last updated" date above.

Contact

Questions, or a deletion request by email: trav-dev@outlook.com