Scope
This policy applies to the Tabla Focus iOS app, website, feedback and waitlist forms, and related support channels.
Account and sign-in
Tabla Focus uses Sign in with Apple to create your account. There is no guest mode. When you sign in, we receive your Apple account identifier and the name and email you choose to share through Apple's sign-in flow (Apple lets you keep your email private with a relay address).
Account-backed app data — including profile details, favorites, routines, practice sessions, progress, skill and mastery data, and personal analytics — is stored in our Supabase backend so supported account data can sync across your devices. Explicit columns are read and written; we do not run open-ended queries against your data.
Compositions and Scanned Notes: separate private iCloud storage
Compositions and Scanned Notes use separate private CloudKit stores. Composition notation — including your compositions and phrases — is stored on your device and, when iCloud is available, in your own iCloud accountusing Apple's CloudKit private database.
Scanned Notes uses a separate private CloudKit store. Scanned notebook pages, note titles, dates, tags, and recognized text stay on your device and in the private iCloud database tied to your Apple ID. Neither composition notation nor Scanned Notes content is stored in Supabase, published, or shared with other Tabla Focus users.
Your practice analytics
Analytics in Tabla Focus means your own practice statistics. We record in-app activity — practice sessions, feature opens, routine follow-through, reminders, and related events — in our Supabase backend so the app can show your own history, streaks, and progress. This history is personal: it powers your own progress view inside the app, not comparisons against other users, and it is never used for advertising.
You can export a copy of this data at any time from Settings → Your Data, as a zip of plain CSV files.
Product telemetry
Separately from your practice analytics, a small set of explicit feature-usage signals — such as that a feature reached a useful state, a practice session was saved, or a bundled accompaniment completed a cycle — is processed by PostHog, a third-party product-telemetry service, in the United States, so we can decide which features to keep and improve. These signals are tied to a pseudonymous account identifier, never your name or email; use stable bundled catalog identifiers and rounded duration units; and never include notation, note contents, recordings, audio, images, titles, filenames, dictated text, or raw error messages. There is no session recording, autocapture, automatic screen tracking, or cross-app tracking.
The Analytics switch in Settings → Your Data is on by default and gates the PostHog product-telemetry stream. Turning it off stops new PostHog capture immediately; an event already accepted by the SDK may still be delivered from its local queue. Turning the switch off does not erase historical PostHog data. Your personal practice records and statistics remain the app's separate practice-history service and are not treated as optional product telemetry.
PostHog uses the pseudonymous Supabase account UUID as its distinct identifier. A sign-out resets the local SDK identity, but PostHog's reset operation does not delete events already stored on its servers and does not rewrite queued events created for the previous account. The app sends only an explicit, allowlisted event set; automatic lifecycle events, screen views, element interactions, rage clicks, replay, surveys, and automatic error capture are disabled.
We do not collect the IDFA (Apple's advertising identifier), sell any data, or track you across other apps or websites.
The website uses Google Analytics 4, and only after you grant consent in the banner. For details, see the Cookie Policy.
We also receive data you intentionally provide, such as feedback and waitlist form entries. If you contact support directly, we receive your message and email address.
Onboarding service
The app's first-run onboarding screens are served by Adapty, a third-party service that will also manage the subscription when one launches. Adapty is initialised when the app starts and receives standard device-level technical data and onboarding interactions; after you sign in it is linked to the same pseudonymous account identifier used for telemetry — never your name, email, or practice content. Adapty is not used for advertising.
Microphone: two uses, one rule
The microphone is used for exactly two features, and audio never reaches our servers from either.
Laya Check uses the microphone only for live processing on your device so it can show when strokes land. It does not record, store, upload, transcribe, or grade your audio. Leaving Laya Check ends that live processing.
Practice recordings are audio takes you deliberately record. They are saved on your device and, when iCloud is available, in your own iCloud accountusing Apple's CloudKit private database — the same arrangement as Compositions and Scanned Notes. We do not store recordings in Supabase, we cannot listen to them, and they are never published or shared with other Tabla Focus users. You can export your recordings from the app as audio files at any time, and delete any recording inside the app.
The Tabla Map
The Tabla Map never uses your device's location — the app does not request location permission at all. The map you pan is rendered by the Google Maps SDK, which fetches map tiles from Google; Google receives the technical data needed to serve those tiles, such as your IP address and the map region you are viewing, under its own privacy terms. The bundled Google Maps SDK also reports a device identifier together with crash and performance diagnostics to Google, as declared in the SDK's own privacy manifest. Places shown on the map come from our own curated directory. Tapping directions opens the Google Maps app or website outside Tabla Focus.
Listening and reference content
Some catalog features fetch public reference data directly from third parties, which — like any web request — exposes your IP address to that provider: album and track details from Apple's iTunes catalog service, artist portraits and summaries from Wikipedia and Wikimedia Commons. None of these requests carry your identity or any of your practice data.
Playing full recordings from the Listening Room uses Apple Musicand requires your own Apple Music subscription. Playback authorisation and listening history stay with Apple under Apple's terms; Tabla Focus only learns whether you granted access.
The teacher and school directory
The directory lists tabla teachers, schools, and venues, compiled from information those people and organisations already publish about themselves — their own websites and public social profiles — together with entries submitted to us. A listing holds a name, the type of listing, a location, a short description, a website, and public social handles.
Direct personal contact details are not published: telephone numbers and email addresses are withheld from the public directory, so anyone reaching a listed teacher does so through the channels that teacher publishes themselves.
If you are listed and would rather not be, tell us and the entry is removed — no justification needed. Corrections are made the same way. See notice and takedown for how to reach us.
Roadmap ideas and voting
You can suggest ideas and vote on the public roadmap without creating an account. To remember a browser's votes and reduce repeated voting, we set a necessary signed anonymous browser cookie that lasts for up to one year. The cookie is not used for advertising or cross-site tracking.
We store pseudonymous vote records created from that anonymous browser identifier. We do not store the raw identifier in those records. Idea requests are checked with Cloudflare Turnstile to distinguish people from automated abuse; Cloudflare receives the technical information needed to perform that check under its own privacy terms.
We also use one-way keyed hashes (HMACs) derived from browser and network identifiers to enforce submission and voting limits. We do not store the raw identifiers in these rate-limit records, and the records expire after 48 hours. The text, Area, moderation state, and related review information for submitted ideas are kept as needed to review, publish, reject, or merge the request and maintain the public roadmap.
How we use information
Account-backed app data is used to run app features, sync your own practice content, show your own practice history, and support account deletion. Provided website and support information is used to respond to requests, improve product quality, and maintain service security and reliability.
Launch and product update emails include an unsubscribe option so you can opt out at any time.
Legal bases we rely on
Where the UK or EU GDPR applies, we rely on performance of a contract to create your account and run the core features you sign in for; consentfor product telemetry, website analytics, and launch or product-update emails, each of which you can withdraw at any time; and legitimate interests in keeping the service secure and reliable, maintaining the teacher and school directory, and preventing automated abuse — you can object to the last two. We do not process special categories of personal data.
Automated decisions
We do not use automated decision-making or profiling that produces legal or similarly significant effects. Your practice analytics describe your own activity to you and are never used to judge, rank, or gate you against other players.
Data sharing
We do not sell personal data and we do not share it with third-party advertisers. Data is processed through the providers used to run Tabla Focus, each named here: Apple (Sign in with Apple, private iCloud/CloudKit storage for Compositions, Scanned Notes, and practice recordings, Apple Music playback, catalog lookups, notifications), Supabase (account data and sync), PostHog (pseudonymous product telemetry, US-processed), Adapty (first-run onboarding and, later, subscription management), Google (Maps SDK map tiles plus a device identifier and crash and performance diagnostics in the app; Google Analytics 4 on the website, only after consent), Cloudflare (automated-abuse checks), Wikipedia and Wikimedia Commons (public reference content), and Firebase/Google Cloud (website hosting and form storage).
Retention
We keep account-backed data for as long as your account is active, so your practice history and progress stay available across devices. Raw app analytics events are archived after 13 months. Retention-safe personal aggregates can remain so your own long-term totals and progress continue to work without retaining the raw event stream. Support and feedback submissions are kept for up to 12 months after the request is resolved, then deleted. Other operational records are retained only as long as needed for reliability, security, and compliance. Roadmap rate-limit records expire after 48 hours; the anonymous voting cookie expires after up to one year. Roadmap ideas and associated pseudonymous votes may remain while needed to operate and preserve the accuracy of the roadmap.
Deleting your account
You can delete your account inside the app from Settings → Account → Delete Account. Deleting your account:
- Removes your Tabla Focus profile, account-backed content, favorites, practice sessions, analytics history, and progress from our backend
- Revokes your Sign in with Apple credential, so the app no longer has access to sign you in
Compositions, Scanned Notes, and practice recordings are stored separately in your own iCloud account, so deleting your Tabla Focus account does not remove those stores on its own. The delete-account screen offers independent choices to erase Compositions and/or Scanned Notes from iCloud and this device — both off by default — and you can delete practice recordings individually inside the app at any time.
If deletion fails partway through, your account is not deleted and you can try again.
Contact: hello@tablafocus.com.
Your rights over your data
If you are in the United Kingdom, the European Economic Area, India, or another region with comparable data-protection law, you have the right to ask for a copy of the personal data held about you, to have inaccurate data corrected, to have your data deleted, to object to or restrict how it is used, and to receive it in a portable form. Where processing rests on your consent, you can withdraw that consent at any time. In India these rights arise under the Digital Personal Data Protection Act; grievances are handled through the same contact below, and you may escalate to the Data Protection Board of India if unsatisfied.
The fastest portable copy is self-service: Settings → Your Data exports your account-backed data as a zip of CSV files, and the app can export your recordings, Scanned Notes pages, and compositions directly.
Product analytics run on consent, and the switch is in Settings under Your Data and in the banner on this website. Account data is processed to provide the service you signed in for. The teacher and school directory and automated-abuse checks rest on legitimate interests, and you can object to either.
To exercise any of these rights, write to hello@tablafocus.com. Requests are answered within one month. You can delete your account, and everything attached to it, from inside the app at any time without asking.
Tabla Focus is run by Sreeram Kongeseri, who is the data controller, based in Portugal in the European Union, and is reachable at the address above. If you believe your data has been handled wrongly, raise it with us first at the same address and we will look into it directly. You may also complain to a data-protection authority — your own national authority where you live, or our lead supervisory authority in Portugal, the Comissão Nacional de Proteção de Dados (CNPD). In the United Kingdom that authority is the Information Commissioner's Office, and in India the Data Protection Board of India.
US state privacy rights
If you live in California or another US state with a comprehensive privacy law, you have the right to know what personal information we hold, to access, correct, or delete it, and to appeal our decision. We do not sell your personal information and do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act. We will not discriminate against you for exercising these rights. Tabla Focus is currently below the revenue and volume thresholds that make that Act binding on a business; we honour these rights for every US user regardless. To make a request, use the same contact as above.
Where your data is processed
Some providers process data outside your country. Compositions, Scanned Notes, and practice recordings stay in your own iCloud under Apple's terms. Account data is held by Supabase; product telemetry by PostHog in the United States; onboarding by Adapty; automated-abuse checks by Cloudflare; website hosting and forms by Firebase/Google Cloud. For transfers outside the United Kingdom and the European Economic Area we rely on the data processing terms these providers apply to every customer: Supabase, PostHog, and Adapty each incorporate a data processing agreement into their standard terms, including the European Commission's standard contractual clauses or an equivalent transfer mechanism, and those terms govern our use of the service.
Children
Tabla Focus is not directed at children under 13, and the minimum age of digital consent varies by country — 13 in the United Kingdom and the United States, and between 13 and 16 across the European Economic Area depending on the member state. Signing in requires an Apple ID used in accordance with Apple's age terms for your region. We do not knowingly collect personal data from children; if you believe a child has created an account, contact us and it will be deleted.
Security and breach notification
Data is protected through application controls, access restrictions, and routine security practices. If a breach ever affects your personal data, we will notify you and the relevant authorities within the timelines required by the law that applies to you, with a plain-language description of what happened and what you can do.
Policy changes
We may update this policy when product or legal requirements change. Material updates will be reflected by the date on this page.