When you sign in with email/password or with Google, Papiano stores your name, email address, and profile photo (if provided) to create your player identity. Password sign-in is handled by Amazon Cognito, which stores your credentials in hashed form — Papiano itself never sees your plaintext password.
Display name, user ID, bio, country, role, avatar, recorded play time, friend list entries, blocked users, and submitted reports are stored so profile, friends, and moderation features work. Your display name, bio, avatar, and play time are visible to other players by design.
Chat messages, message edits, deletion state (whether a message was removed), and images you send in chat are stored so conversations sync across your devices and so moderators can review reported abuse. Public room chat is visible to other players in that room; avoid putting sensitive personal information in messages, names, or bios.
Room names, player lists, room status, room-level chat, access settings, and moderation actions (mutes, kicks, bans) are processed in real time through AWS AppSync and Lambda so players can join, leave, and play together.
When you buy Coin or subscribe to Premium, Papiano stores the purchase record — the product purchased, the Google Play order or purchase token, and the purchase and renewal dates — so the right Coin balance or Premium status can be granted and kept up to date. Your card and other payment details are collected and processed by Google Play and never reach Papiano.
When you use Audio Transcribe, the audio file you upload — or the YouTube, Instagram, or TikTok link you paste — is stored in AWS S3 and sent to Modal, a third-party GPU compute provider, to generate a MIDI and sheet-music result. The result is saved to your transcription history so you can reopen it later.
If you allow notifications, Papiano registers your device with Google Firebase Cloud Messaging and stores the resulting device push token so it can deliver notifications to that device. Turning off notifications in your device settings stops new notifications from being delivered.
Piano settings, visual preferences, sound options, presets, and your sign-in session are stored on your own device by the app. Clearing the app's storage, or uninstalling it, removes this local information and signs you out.
Standard connection and device information — such as app version, approximate connection quality, and authentication events — is processed by Amazon Web Services to deliver the app, detect abuse, and keep accounts secure. See section 10 (Advertising) for how the advertising identifier is used.
Papiano shows advertising through Google AdMob to free users. Premium subscribers see no ads.
AdMob uses your device's Android advertising ID to serve ads, measure ad performance, and prevent fraud. If you're in the EEA or the UK, Papiano asks for your consent to this through Google's consent form before any personalized ads are shown, and you can change that choice at any time in Settings > Ad privacy choices.
You can reset or delete your advertising ID, and opt out of personalized advertising, at any time in Android Settings > Privacy > Ads. Google explains how AdMob and its partners use data in Google's policy on partner sites and apps.
Where applicable law requires a stated legal basis, Papiano processes data under: performance of a contract (running the account and features you sign up for, including purchases), consent (where you actively opt in, such as choosing Google sign-in or, in the EEA/UK, personalized ads), and legitimate interest (keeping the service secure and moderating abuse).
These providers act as data processors for Papiano and are contractually and technically restricted from using your data for their own purposes, other than Google's advertising use described in section 10.
Papiano's infrastructure runs in AWS's ap-southeast-1 (Singapore) region. If you use Papiano from outside that region, your data is transferred to and processed in Singapore. By using Papiano, you consent to this transfer.
Moderators may review reported content, remove abusive material, restrict accounts, disable rooms, or remove unsafe images to protect players. Actions taken and the reports that triggered them may be retained for safety records even after the related content is removed.
Papiano requires account holders to be at least 13 years old, consistent with the Terms of Service. We do not knowingly collect personal data from children under 13. If we learn an account belongs to a child under 13, we disable it and delete the associated data, subject to section 17.
Account and profile data is retained for as long as your account is active. You can delete your account at any time — in the app under Settings > Delete account, or by emailing legal@papiano.app from your account's registered address. Full instructions are on the Delete your account page.
When you delete your account, your profile, photo, bio, country, friends, blocks, chat membership, notifications, Coin balance, and play time are removed from the live service immediately. A restore copy of your account and your sign-in record are kept for 30 days, so an accidental deletion can be undone through support, and are then permanently deleted.
Moderation records (reports and the actions taken on them) and anti-abuse ledgers (such as quest claims and daily usage counters) are kept without any profile data attached, to protect the integrity of the service. Routine backups are kept until they expire on their own schedule.
Content you already shared with other players is not pulled back retroactively: messages you sent stay in the chats of the players who received them, and MIDI files you published to the MIDI Library stay online. Both are shown as posted by "Deleted User" instead of your profile.
You can edit profile details, remove optional profile information, leave rooms, block users, and clear supported chat history directly in the app.
To delete your account and its data, use Settings > Delete account in the app, or email legal@papiano.app from your account's registered address — see the Delete your account page for full details.
To request access to, or correction of, your account data without deleting it, email legal@papiano.app from your account's registered address. We respond to verified requests within a reasonable time, generally within 30 days.
Papiano uses industry-standard safeguards available through its infrastructure providers — including encryption in transit, hashed credential storage through Amazon Cognito, and access-controlled backend services — but no online service can guarantee absolute security. If a breach affecting your personal data occurs, we will notify affected users and relevant authorities as required by applicable law.
This policy may be updated as Papiano grows. Material changes will be reflected on this page and, where practical, announced through the app or official community channels.
Data access, correction, or deletion requests: legal@papiano.app. General account or app issues: support@papiano.app.
No. Papiano does not sell personal information to third parties. Data is used only to operate accounts, multiplayer rooms, chat, moderation, purchases, Audio Transcribe, and — for free users — advertising, as described in this policy.
Yes, to free users. Ads are served by Google AdMob: an app-open ad when you launch Papiano, an ad when you start an Audio Transcribe job, an ad when you download sheet music as a PDF, and an optional rewarded ad if you choose to export a video without the watermark. Premium subscribers see no ads. AdMob uses your device's advertising ID for ads, measurement, and fraud prevention; you can reset or opt out of it in Android Settings > Privacy > Ads.
Papiano runs on Amazon Web Services (Cognito, S3, AppSync, and Lambda) in the ap-southeast-1 (Singapore) region. Google handles Google sign-in, push notifications through Firebase Cloud Messaging, purchases through Google Play Billing, and advertising through AdMob. Modal processes the audio you submit to Audio Transcribe.
In the app, open Settings > Delete account and type DELETE to confirm. Without the app, email legal@papiano.app from your account's registered address requesting deletion. See the Delete your account page for full details. We aim to permanently delete account data within 30 days, except copies kept where required by law or to resolve disputes.