Privacy Policy

Super Bon Effective 12 October 2026

Super Bon is a songwriting capture app. You record musical ideas, and they stay yours. This policy explains exactly what we hold, where it is, and what you can do about it.

Who is responsible

Super Bon is provided by Björn Ehlers, Sweden, who is the data controller for the purposes of the UK and EU General Data Protection Regulation.

Contact: privacy@superbon.studio

What we collect

Your account. When you sign in with Apple we receive a user identifier that is unique to Super Bon, and an email address. If you chose "Hide My Email", that address is an Apple relay address and we never see your real one. You may add a display name; it is optional, and it is shown to people you share a Project with.

What you make. Your recordings — audio and video — and the information that describes them: Project titles, notes, timestamps, loop positions, layer volumes and the structure of your timeline.

Who you work with. If you invite someone to a Project, we store that the two of you are on it and which invitations have been used, so the Project can be shared and so you can remove people.

Technical records needed to run the service. When each Project last changed, how much storage your recordings use, and the records needed to sync between your devices.

How the app is used, so it can be made better. Super Bon records that things happened — a take was recorded, a Layer added, a Project exported, a sync failed — with no detail about what they were. Never the audio, never a Project title, never a word of your Notes, and never the exact length of a recording. Nothing in these events could identify a piece of music.

These are held by PostHog, on their European servers, against an identifier that is a random number for your account and carries no name or email address.

It starts switched on, and you can switch it off at any time in Settings. From then on nothing further is recorded, and you can ask us to delete what already was — see Your rights below.

There is no advertising and no tracking software of any kind. We do not follow you to other apps or websites, we do not profile you, and we make no automated decisions about you.

What we never do

We never listen to your recordings, and we never use them to train AI models. The instrument detection in Super Bon runs entirely on your phone; your audio is not sent anywhere for it.

We do not sell your data, share it for advertising, or give it to anyone except the service providers listed below, who hold it on our behalf in order to run the app.

Where it is kept

Everything is stored in the European Union.

Both providers act as our processors under data processing agreements. Both are incorporated in the United States and their staff may access data for support and maintenance; where that happens it is covered by the safeguards in those agreements, including the European Commission's Standard Contractual Clauses.

Apple provides Sign in with Apple and distributes the app. Apple's handling of your Apple Account is governed by Apple's own privacy policy, not this one.

Why we are allowed to hold it

To provide the service you asked for (Article 6(1)(b) — performance of a contract). Your account, your recordings and your sharing all exist because you asked the app to keep them.

To keep the service secure and working (Article 6(1)(f) — legitimate interests). The technical records above exist so that syncing works, storage can be accounted for, and abuse can be prevented.

To understand how the app is used (Article 6(1)(f) — legitimate interests), so that the app can be improved by watching whether features are reached rather than by guessing. You may object by switching it off, which is the switch in Settings and takes effect immediately.

How long we keep it

For as long as your account exists. We do not keep data "just in case".

Deleting is immediate and permanent. Deleting a Project removes it and its recordings — there is no trash and no recovery period. Deleting your account removes your account, every Project you created and every recording in them, for everyone those Projects were shared with. Layers you recorded in other people's Projects stay with those Projects, because they are part of somebody else's work.

Deleted data may persist for a short period in routine encrypted backups held by our providers before being overwritten. (Exact retention window to be confirmed with Supabase and Cloudflare.)

Your rights

Under the GDPR you may ask us to:

• give you a copy of your personal data, or the data you have given us in a portable form
• correct anything that is wrong
• delete your data — though the app already lets you do this yourself, immediately, from Settings
• restrict or object to how we use it

Write to privacy@superbon.studio and we will respond within one month.

If you think we have handled your data wrongly, you may complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or to the supervisory authority in your own country.

Children

Super Bon is not intended for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes in a way that affects you — for example if we add a service that processes your data — we will update this page and tell you in the app before it takes effect.

Super Bon is in beta. This policy describes the app as released on the date above.