Privacy Policy
The short version
- eSuite has no accounts and no ads. The app and our website use no analytics or advertising tools, and nothing in eSuite tracks you across other companies’ apps or websites. We never sell your data.
- Your library stays on your device and in your own iCloud. We can’t see it.
- When the app connects to our server, for example to use the Catalog, the companies that run our service keep short-lived technical logs. These logs include your IP address, your approximate location and the web addresses requested, which can show which Catalog scores you looked at. They’re kept for up to 31 days, for security and to keep the service running. Visits to our website are logged the same way.
eSuite is made by eSuite Music LLC (“we”). This policy covers the eSuite app on iPhone, iPad, Mac and Apple Watch, and our website, esuitemusic.com.
How we keep data to a minimum
We built eSuite to collect as little as possible, and we’ve taken every reasonable step to keep it that way. Apart from emails you choose to send us and the optional reports Apple shares with developers (see section 9), the only information kept about your use of the app is what our service providers’ logs record automatically when the app connects to our server. Cloudflare and Supabase keep these logs and offer no way to switch them off, so they’re unavoidable for us. We use them only for security and to keep eSuite working.
- No accounts, no ads, no analytics tools and no tracking.
- Your library, annotations and Playlists stay on your device and in your own iCloud.
- Our server sits between the app and our database provider, Supabase, so with eSuite 27.1 or later, Supabase never sees your IP address.
- Your search text, the scores from your library used for recommendations and your purchase proof aren’t written to any log, and we don’t store them.
- We keep no subscriber list, no download history and no download counts.
- Live drawing updates are encrypted so our server can’t read them, and they aren’t kept.
- We never look up a particular person in the logs, never combine them with other information, and never export them.
1. Your library and iCloud
Your scores, annotations, Playlists and settings are stored on your device. If iCloud is on, your scores, annotations and Playlists sync through your own iCloud account, along with backup copies of your score files and which tips you’ve already seen. Your settings and recent searches stay on the device. We can’t see any of this. Apple’s privacy policy covers iCloud.
When you scan paper music, the camera is used only on your device.
The eSuite widgets use only what’s already on your device, and the Apple Watch app is a metronome that doesn’t connect to anything. Neither sends anything to our server.
2. Smart Suggestions
Smart Suggestions fills in missing details, like a score’s title and composer, by reading the score. It’s on unless you turn it off. It runs automatically when you import or scan a score, and shortly after the app opens for any score it hasn’t read yet (including scores you downloaded from the Catalog). It also runs when you tap Generate Smart Suggestions, for one score or several.
On supported devices running iOS 27, iPadOS 27 or macOS 27 or later, when you’re online, eSuite sends the text on the score’s first page, and sometimes the score’s current title, to Apple’s Private Cloud Compute. Otherwise, or if that request fails, the score is read on your device. Apple says Private Cloud Compute uses this text only to answer the request, doesn’t keep it, and doesn’t let anyone see it, not even Apple. It never reaches us.
To turn Smart Suggestions off on iPhone or iPad, open the Settings app, tap Apps, then eSuite, and turn off Smart Suggestions. On Mac, choose eSuite > Settings. There’s no setting that keeps Smart Suggestions on but limits it to your device.
These features run only on your device, never on Private Cloud Compute or our server: searching your library in your own words, choosing which Catalog recommendations to show you, tidying up a Catalog search before it’s sent, and matching what Visual Intelligence sees against your library.
3. The Catalog
When you browse, search, preview or download in the Catalog, the app sends your request to our server. Depending on what you do, that includes:
- what you type in Catalog search, including as you type (for suggestions), and any filters you choose
- the Catalog scores you open, preview or download, including eSuite+ scores the app downloads again for you automatically
- for recommendations: up to 50 of the Catalog scores in your library, and the two instruments that appear most in your library
Siri, Shortcuts and Spotlight send the same kinds of requests when they search or show the Catalog.
To understand what your search means, our server turns your search text into numbers, using a small model that runs at our server provider, Supabase. Your search text isn’t sent to any AI company.
We don’t keep your searches, and our database keeps no record of who opened or downloaded what. We also don’t keep download counts or popularity totals for any score. However, the app loads each score’s cover from a web address that includes the score’s Catalog ID, and those addresses appear in the Cloudflare logs described in section 6. So for up to 31 days, those logs can show which Catalog scores’ covers your app loaded: scores you browsed, searched for or opened, scores recommended to you based on your library, and sometimes scores already in your library.
Score files and preview pages download directly from Backblaze, using links that stop working after an hour.
4. eSuite+
Apple handles all purchases. We never see your name, email address or payment details.
When you import a score that needs eSuite+, when the app restores one for you, and when you preview a score as a subscriber, the app sends Apple’s signed proof of your purchase to our server so it can check your access. The proof includes Apple’s ID numbers for your purchase (some of them stay the same for your Apple Account), your plan and its dates, your App Store country, the price and currency, and a code Apple uses to check that the purchase belongs to your device. We check it, then discard it. We don’t store it, and we keep no list of subscribers.
5. Collaboration
Shared annotations travel through iCloud only to the people you invite, and you can stop sharing at any time. People you share with get your drawings for that score, the shared set’s name and color, the score’s title, when you shared it, a fingerprint of the score file (so their copy can be matched) and, for Catalog scores, the score’s Catalog ID. If you set a sharing name in an earlier version of eSuite, they see that too. Apple’s sharing screens may also show participants each other’s names or the contact details used to invite them. Notifications to collaborators also go through iCloud.
During live collaboration, drawing updates also pass through our server. Your drawings are encrypted with a key kept in your shared iCloud record, so our server can’t read them, and we don’t keep them. A few details travel unencrypted so that updates reach the right place: which annotation set and page, the pen width and color, stroke markers, and the timing. The connection, and sometimes individual updates, show up in the logs described in section 6.
On iPhone and iPad, when there’s no internet or our server can’t be reached, nearby devices can connect directly over the local network, with the same encryption. iOS asks for your permission first.
6. Server logs
The app’s requests go to our server at api.esuitemusic.com. The companies that run it keep short-lived technical logs. We use these logs only for security and to keep the service running.
- Cloudflare runs our server address and our website. For every request, it keeps your IP address, your country and network provider (worked out from your IP address), your type of device, system and app or browser (worked out from the request), the web address requested, and when. It keeps these for 31 days, and we can’t switch this off. Cloudflare also runs our domain name. When the name is looked up, Cloudflare keeps the address that asked for 31 days. That’s usually your internet or DNS provider’s address, not yours.
- Supabase runs our Catalog database, search, cover images and live collaboration. With eSuite 27.1 or later, it never sees your IP address. Its logs record the approximate location of the Cloudflare data center you connected through (usually a nearby city), your country, the web address requested, and a technical fingerprint of how your device’s software makes secure connections, which identifies the kind of software, not you. Supabase keeps them for 7 days.
- Backblaze stores score files. It sees your IP address and which file you’re downloading while it delivers a download. We haven’t turned on Backblaze’s download logs, so we keep no record of your downloads. Backblaze’s own practices are covered by its privacy policy.
These logs don’t contain the contents of what the app sends, like your search text, the list of Catalog scores used for recommendations, or your purchase proof. But the web addresses include the Catalog ID of every cover the app loads (see section 3), and they show what kind of request it was (for example, a search or a download) and when it happened.
We don’t use these logs to identify you, to follow you, or to study how you use eSuite. We don’t combine them with any other information.
If you use a version of eSuite older than 27.1, the app connects to Supabase directly, for example for live collaboration. In that case Supabase’s logs also include your IP address, the approximate location worked out from it, and the web addresses requested, for 7 days. Updating eSuite stops this.
7. Emails you send us
Feedback, Catalog corrections and any other email you send us (to feedback@esuitemusic.com or contact@esuitemusic.com) are ordinary emails, sent from your own mail app. We receive your email address, what you write, and any details the app filled in:
- Feedback on iPhone and iPad: the app version and build, your type of device (for example, iPad), the system version, and how many scores are in your library. On Mac, the feedback email starts blank.
- Catalog corrections: the score’s title, composer and Catalog ID, the detail you’re correcting, its current and suggested values, your note, and the app version.
You can delete these details before you send. Our mailbox is hosted by Apple’s iCloud Mail. We use emails only to reply and to fix things. We keep them until we delete them, and we’ll delete yours if you ask.
8. Our website
esuitemusic.com is hosted by Cloudflare, so visits are logged the same way as the app’s requests: your IP address, country, network provider, type of device and browser, and the page you visited, kept for 31 days. The website sets no cookies, runs no analytics or advertising scripts, and loads nothing from other companies. If a page fails to load, your browser may send Cloudflare a short error report with the page address, the page you came from and the type of error. Cloudflare says it doesn’t log IP addresses with these reports, though it works out your country and network provider from them.
9. Who else is involved
Only the companies that run the service for us:
- Apple: the App Store and purchases, iCloud, Apple Intelligence and Private Cloud Compute, Siri, age checks, and our email. If you’ve chosen to share analytics with app developers in your device’s settings, Apple also gives us crash reports and summary statistics about the app. Apple’s privacy policy covers this.
- Cloudflare: our server address, our website, and the logs in sections 6 and 8
- Supabase: our Catalog database, search, cover images and live collaboration
- Backblaze: score file storage and downloads
Each one handles this data to provide its service to us. Their own privacy policies explain their practices. We don’t sell, rent or share your data with anyone else, and we never use it for advertising.
Links in eSuite to other websites, such as a score’s original source, its licence or the App Store, open those sites, which have their own privacy practices.
10. How long data is kept, and deleting it
- Cloudflare logs: 31 days
- Supabase logs: 7 days
- Emails you send us: until we delete them
- Search text, purchase proofs and live drawing updates: not stored
On October 21, 2026 we deleted records kept by earlier versions of our service, such as subscription and download records. Copies may remain in Supabase’s backups until about October 28, 2026.
There are no accounts, so we hold nothing else about you. You can delete your library at any time in the app, or in your iCloud settings. Logs delete themselves on the schedule above, and we can’t remove single entries sooner. For questions, or to have an email deleted, write to us at the address below.
11. Children and age checks
eSuite doesn’t ask anyone, including children, for personal information, apart from the age check below. If a child has emailed us and you’d like that email deleted, let us know.
Age checks. Where the law requires it, eSuite asks Apple for your age range, never your birthday. eSuite uses it only on your device, to decide whether a parent or guardian needs to approve new features such as the Catalog and eSuite+. It isn’t kept after that check, and it’s never sent to our server or to anyone else. eSuite may also check, on your device, which version of eSuite your Apple Account first downloaded; that isn’t kept either. eSuite saves only small notes on your device, such as whether an update was approved or doesn’t need approval. None of them records your age. If a parent’s approval is needed, Apple sends the request to them. We never see it; eSuite only learns, on your device, whether it was approved.
12. Do Not Track
eSuite doesn’t track you across other companies’ apps or websites, so it works the same whether or not your browser or device sends a Do Not Track signal.
13. Changes
If our practices change, we’ll update this policy and the date at the top.
14. Contact
eSuite Music LLC. For questions about privacy, or to ask us to delete an email, write to feedback@esuitemusic.com.