Vicino Labs
Leggii

Privacy Policy

Effective 2026-11-10Version 1.4Operator Vicino Labs

The basic features of Leggii, a sheet music app made by Vicino Labs, work without an account and only on your device; your scores, notes and recordings are stored there. Only AI lesson analysis, purchase checks, the optional sign-in (welegato ID), the Leggii cloud (Plus) and Ask Leggii go through our server (EU) and the services below. Here is exactly what the app handles.

1. Data controller

The operator's address and contact details are at the end of this document and in the Impressum.

Vicino Labs is the “controller” under the EU General Data Protection Regulation (GDPR) for any personal data processed in connection with this app.

2. Summary

  • The basic features need no account; scores (PDF), notes, folders, setlists and recordings stay on your device. With the Leggii cloud (Leggii Plus) they are also kept in the cloud (Cloudflare R2) for the devices of your ID.
  • No ad networks and no analytics or tracking tools. The banner at the bottom is our own banner for welegato, a service of the same company.
  • AI lesson analysis sends a recording's audio to Google Gemini only when you ask, and the audio is deleted after the analysis. The results are stored on your device.
  • Purchases, subscriptions and AI time are checked on our server (EU, Frankfurt, Germany) under pseudonymous numbers.
  • Signing in with a welegato ID is optional; account data then falls under the welegato privacy policy.
  • Questions to Ask Leggii are sent only to write the answer and are not stored. Only an AI answer you report yourself is kept, with your comment, for 180 days. Finding a score happens on the device.
  • Photo scans and title recognition run on the device. IMSLP is contacted only when you search or download.

3. Data stored on your device

  • The score PDFs you import or create, and preview images
  • Notes, symbols, text and repeat links, bookmarks and the last page read
  • Score details (title, composer, publisher), folders, favourites and setlists
  • Recordings and their details (kind, work or topic, names you typed, page turns)
  • Settings — language, pens, metronome, reading look, start of the free trial, whether Pro was bought, and similar
  • AI results and their PDFs (My notes), the AI time shown, and a random install number created on installation (sent to our server only for AI analysis, purchase checks and Ask Leggii, see below)

This data stays in the app's private storage and is never sent to us. It is deleted when you remove a score or uninstall the app. A file made with “Back up library” is saved only where you choose (a drive, a computer…). Legal basis: providing the app's features (Art. 6(1)(b) GDPR).

4. Android backup

On Android, if your device's Google backup is on, the app's settings (not your score files) are backed up to your Google account and restored when you reinstall. Google handles this backup under the Google Privacy Policy; we cannot see it. You can turn it off in your device settings.

5. Camera and photos

The app asks for the camera, or lets you pick photos, only when you use “Photos to PDF”. The photos are turned into a PDF on your device and are not sent to us.

6. Microphone and recordings

The app asks for the microphone only to record lessons, rehearsals, ensembles or practice. You start a recording with the record button and stop it yourself. While recording, a “Recording” notification is shown so the recording keeps going with the screen off or in another app. No automatic gain control is used, so loud passages are not squeezed.

Recordings and their details are stored only on your device and are not sent to us, except for an AI lesson analysis you ask for (below). They are not part of Android backup; they are included in a “Back up library” file you make yourself. When you send a recording (an audio file, or a Leggii recording file with its page turns), it goes only to the app or person you pick in your device's share sheet.

When you listen back, a playback notification (play, pause, stop) is shown so playback can continue on other screens or in the background.

If other people are recorded with you, it is your responsibility to get their consent first. The app reminds you of this and asks you to confirm before your first recording.

7. AI lesson analysis (only on request)

It runs only when you tap “AI analysis” on a recording, see the AI minutes it costs and start it. The first time, the app explains this and asks for your consent.

  • What is sent: the recording's audio (split into small mono, compressed parts), the kind of recording, the work and people you entered, “My instrument or part”, page-turn times and the answer language.
  • Processing: our server (Supabase, EU) prepares the job; the audio goes straight to Google's Gemini API, which writes the lesson notes or the transcript. We use the paid API; Google does not use this data to train its models.
  • Deletion: each audio part is deleted once it is analysed; anything left is deleted by Google within 48 hours. The results go back to your device and are stored only there; interim results on the server are deleted when the analysis ends.
  • Kept on the server: records to count your AI time (time, length, kind, minutes used, cost) with a pseudonymous account number – no recording content and no results.

Legal basis: providing the feature you asked for (Art. 6(1)(b) GDPR). You must get the consent of other people who are recorded. Under 16, please use it with a parent's consent. Google processes data under the Google Privacy Policy.

8. Text recognition (title and composer)

To read the title and composer from a score's first page, the app uses on-device text recognition — Google ML Kit on Android, Apple Vision on iPhone and iPad. Page images do not leave the device. Google ML Kit may send Google anonymous usage statistics such as device type, app version and performance, for diagnostics and improvement (ML Kit terms). Score content and photos are not included.

9. IMSLP search and downloads

When you use “IMSLP”, the app sends your search terms to the public sheet music library IMSLP (imslp.org) to get works and file lists, and opens IMSLP's download page inside the app when you download. Your search terms and your device's IP address reach IMSLP's servers, and IMSLP may set cookies. This is governed by the IMSLP privacy policy. We do not learn what you search for or download.

10. Purchases, subscriptions and AI time

Pro (one-time), Leggii Plus (subscription) and AI time top-ups are bought through Google Play (or the App Store). The store handles payment and card details; we never receive them.

  • The app sends the proof of purchase to our server. For Google Play purchases the server checks with the Google Play Developer API, for App Store purchases it verifies the signature of the transaction data signed by Apple, that the purchase is real and the subscription active. For this check, App Store purchases carry your pseudonymous account number. The server stores an irreversible hash instead of the token (for the App Store, of the original transaction ID), plus the product, time, subscription end date and AI time records.
  • AI time accounts are told apart by a random install number (stored as a hash) or by the purchase – no name or email is needed.
  • To give the trial's 30 AI minutes only once per device, a hash of the device identifier (Android ID / iOS keychain value) is stored (preventing abuse, Art. 6(1)(f) GDPR).
  • Top-up records are kept as hashes, separated from the account, even after an ID is deleted, so the same purchase is never credited twice.

Legal basis: providing what you bought (b), preventing abuse (f). The store's processing falls under the Google Privacy Policy, in the App Store under the Apple Privacy Policy.

11. welegato ID (optional)

Every basic feature of Leggii works without signing in. If you sign in, you use an account of welegato, run by the same company (the welegato ID).

  • Account data (email, name, sign-in method Apple, Google, Kakao or email, account number) is processed under the welegato privacy policy. An ID created in Leggii is marked “signed up in Leggii”, and one welcome email is sent at the first sign-in.
  • Leggii links the ID to your AI time and purchases (a record linking the pseudonymous account number to the ID), so Pro, Plus and AI time follow you to other devices.
  • For email sign-up and sign-in, Cloudflare Turnstile checks browser signals to stop automated sign-ups (Cloudflare privacy policy). Apple, Google and Kakao sign-in fall under those companies' policies.
  • If you choose “Continue with Apple” on iPhone or iPad, we receive the name and email confirmed by Apple. If you choose “Hide My Email”, we receive only a relay address created by Apple.
  • Deleting the ID in Settings › welegato ID › Manage ID deletes the welegato account, Leggii's AI account and links and the Leggii cloud. Scores and recordings on the device stay.

Under welegato's terms, only people aged 16 or over can sign in. Legal basis: providing the feature you chose (b).

12. Leggii cloud (Leggii Plus, optional)

With a Leggii Plus subscription and the welegato ID signed in, the Leggii cloud keeps the same library on every device of that ID.

  • What is stored: score PDFs, score details, ink and bookmarks, folders and setlists, my notes (AI notes PDFs) and — while “Recordings to the cloud too” is on (the default) — recordings and their details. For each file its size, fingerprint (SHA-256) and time of change are kept.
  • Where: the files with Cloudflare R2 (Cloudflare, Inc., processor); the list of items and the space used on our server (Supabase, EU, Frankfurt, Germany). Transfers are encrypted; files go only between the app of that ID and the cloud, through signed links that are valid for a short time. We do not open your scores or recordings.
  • Sending in welegato chat: if you pick a score, lesson notes or a recording from your cloud in a welegato chat, your chat partner can open that file for 7 days from sending, through links that are valid for a short time. The file is not copied; welegato keeps a record of the share (title, type, size). You can turn sharing off at any time (welegato privacy policy).
  • Syncing: on Wi-Fi only by default; you can allow mobile data. “Remove from this device (keep in cloud)” removes only the copy on the device.
  • Keeping and deleting: a score or recording deleted on one device is deleted in the cloud and on the other devices too. Deleting the ID deletes all its cloud files and records without delay (within 24 hours at the latest). When Plus ends, only new uploads stop and everything can be downloaded for 90 days; after two reminder emails the cloud files are then deleted. Files on your devices are never touched.

Legal basis: providing the subscribed service (Art. 6(1)(b) GDPR).

13. Ask Leggii

When you ask the assistant, your question, the app language, the name of the screen you are on and a few recent messages go to our server and the Google Gemini API to write the answer. Questions are not stored. Finding a score happens on the device; score titles are not sent.

To keep it free with up to 30 questions a day, a hash of the install number, the time, the question length, the language and the kinds of suggested actions are kept for 30 days to prevent abuse, then deleted. Legal basis: providing the feature you asked for (b), preventing abuse (f).

14. Reporting an AI answer

If an Ask Leggii answer or an AI lesson analysis seems offensive or wrong, you can report it. Only then do the reported AI text (for Ask Leggii, the question and the answer), the reason you chose, your comment, the app language and version and a hash of the install number go to our server, and our team gets a notification mail. Reports are used only for review and to improve the AI, and are kept for 180 days, then deleted. To prevent abuse we accept up to 10 reports a day per install. Legal basis: our legitimate interest in improving the service and handling inappropriate AI output (f).

15. Service providers (processors) and transfers

  • Supabase — server and database, EU data centre (Frankfurt, Germany) (policy)
  • Google — Gemini API (AI analysis, assistant), Google Play payments and purchase checks, text recognition (ML Kit)
  • Cloudflare — file storage of the Leggii cloud (R2, Plus), protection against automated email sign-ups (Turnstile)
  • Apple — App Store payments and purchase checks, Sign in with Apple (iPhone, iPad)

Where these providers process data outside the EU (e.g. in the USA), this is based on the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

16. The welegato banner and external links

The banner below the score list and the links in Settings open welegato (a music platform of the same company) or another Vicino Labs app in your browser or Google Play (the App Store on iPhone and iPad) only when you tap them. Links carry a tag (utm_source=leggii) that only says the visit came from the app, with no value that identifies you. Once open, that site's policy applies — welegato privacy policy.

When you share a photo scan as PDF from the free version, each page carries the line “Leggii Score with welegato · welegato.com”. It contains no personal data.

17. Sharing and export

When you share a score or export a PDF with notes, the file goes only to the app or person you pick in your device's share sheet.

18. Data we don't collect

Without signing in we receive no name, email or phone number. We collect no location, contacts or advertising ID. Recordings are sent only briefly, for an AI analysis you asked for, and are not stored. A Bluetooth pedal works like a keyboard and needs no extra permission.

19. Children

The basic features have no age limit. Signing in with a welegato ID is only for people aged 16 or over; under 16, AI lesson analysis and Ask Leggii need a parent's consent. Children should use IMSLP and external links together with a parent.

20. Your rights

  • Access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR)
  • Lodge a complaint with a supervisory authority — e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW) or the authority where you live

We hold no data about you; what is on your device you can delete in the app or by uninstalling it. For any question, please contact us below.

21. Changes to this policy

We may update this policy when the law or the app changes; changes and the effective date are posted on this page.

22. Contact

For questions about data protection, please contact us.

Trading name
Vicino Labs (sole proprietorship, Einzelunternehmen)
Owner
Jeong-Hwan Lee
Address
Ruhrallee 41, 44139 Dortmund, Germany
Email
contact@vicinolabs.com
Impressum
vicinolabs.com/impressum
This policy is effective from 10 November 2026 (version 1.4). Previous versions 1.3: 9 November 2026, 1.2: 6 November 2026, 1.1: 5 November 2026, 1.0: 22 October 2026.Terms of Service →Impressum