Privacy Policy

Panjo is made by Sacred Blue Studios Inc. This policy describes what the Panjo app and the panjo.app website actually collect and why. The short version: you can play Panjo without an account and the core game works entirely offline; creating an account adds cloud features, and those are described below.

Playing without an account

Scores, settings, favourites, and songs you create are stored on your device. You can erase them at any time with Reset Data in Settings. Nothing you do in offline play is sent to us.

If you create an account

Accounts are optional and use Firebase Authentication (email and password, Google, or Sign in with Apple). With an account we store:

• Profile: display name, email address, and an avatar photo if you choose one.
• Progress: your game progress and settings, synced so a new device picks up where you left off.
• Leaderboards: your best score per song. Leaderboard entries are visible to other players.
• Bands and challenges: band names, membership, invite codes, and live gameplay events while you play together. Presence (whether you are online in a band) is visible to your bandmates.
• Purchases: which packs or subscription tier you own, so paid content unlocks on your devices.

You can delete your account from Settings in the app. Deletion removes your authentication record and profile.

Purchases

Payments are processed by Apple through the App Store, or by Google through Google Play; we never see your payment details. We use RevenueCat to keep track of what a purchase unlocks. RevenueCat receives an app-generated identifier and purchase receipts, not your name or email. See the RevenueCat privacy policy.

No ads, no tracking

Panjo has no advertising of any kind, shows no ads to anyone, and does not track you across other apps or websites. It never asks for tracking permission and does not read your device's advertising identifier.

Usage and crash data

To keep the app working and improve it, Panjo uses Google Firebase Analytics, Crashlytics, Performance Monitoring and Remote Config. They receive which screens, games and lessons are used, how fast the app runs, crash reports, and basic device details (model, operating system, app version). Advertising features and the advertising identifier are turned off. This data is linked to an anonymous app identifier, or to your account identifier if you are signed in, and is never sold or used for advertising. See Google's Firebase privacy information.

The microphone permission

iOS requires us to declare a microphone purpose string because of an audio library we use. Panjo never records audio. "Make a Melody" records the notes you tap, not sound from your microphone.

Generated artwork

Some artwork (spirit-animal banners, song backgrounds) is generated with Google's Imagen service. The prompts contain game content, such as an animal name or a song title, never your personal information. Generated images are cached on your device.

The website

panjo.app is a static site. We do not run analytics or set cookies. Our hosting provider (Firebase Hosting) records standard server logs, such as IP address and user agent, for security and operations, retained per Google's policies. The site serves its own fonts, scripts, styles and sounds; the only thing it loads from elsewhere is a small badge from our studio site, sacredbluestudios.com, which sets no cookies. The sounds you play on the site stay in your browser.

Children

Panjo is made for people of all ages, including children. Kids play free with no ads, and a grown-up decides what to buy.

• A child does not need an account, and we never ask a child for their name, email address, photo or location. A child's device that is linked to a grown-up uses an anonymous identifier only.
• Buying, subscribing and the Parent Zone sit behind a grown-up check, so a child cannot make a purchase on their own.
• Signing in with a name, email address or photo, and the social features that use them (leaderboards and bands), are for grown-ups and for people 13 and older.
• The usage and crash data described above is collected with advertising features off, and is not used to build a profile of a child.

If you believe a child has given us personal information, email us and we will delete it. A parent can review or delete the information linked to their child at any time by contacting us.

Credits

The grand piano sound is the Salamander Grand Piano by Alexander Holm, used under CC BY 3.0.

Your choices

• Play without an account; the core game does not need one.
• Reset local data or delete your account from Settings.
• Email us to ask what we hold about you or to request deletion.

Security and retention

Cloud data lives in Google Firebase with access rules that restrict each account's data to that account. We keep account data while the account exists and delete it when the account is deleted. No storage or transmission is perfectly secure, but we design for least access.

Changes

When this policy changes we update the date above; for material changes we will provide additional notice in the app or on this site.

Contact

Sacred Blue Studios Inc. — info@sacredbluestudios.com