Music Box Privacy Policy

1. The Music Box app

Music Box is a paper-strip music box made by Ruby Cat for iPhone. The app has no accounts, advertising, analytics or tracking. It does not access your microphone, camera, contacts, photos or location, and it does not upload what you play or punch.

You do not need a network connection to play, punch or keep strips. The app does not operate a Music Box cloud service or sell personal data.

One typeface from Apple. The words written on a strip are set in a Kaiti typeface that iOS does not carry by default. The app asks iOS for it, and iOS may download it from Apple once and keep it for every app. The app sends nothing with that request; Apple handles the download under its own privacy policy. Until the typeface is there, or without a connection, the words are set in another typeface.

2. Strips stored on your phone

Music Box's local app preferences store only your strips: the ones you punched or renamed, and the ones sent to you. For each strip that is:

• Its title and any message written on it.
• Its holes.
• Its speed and where its bar lines fall.
• Whether it was sent to you.

They are used to list your strips under Tunes and to put the last one back in the box when you reopen the app. We do not receive your strips or sync them through a Music Box service. Tape over holes and the steps Undo can take back are not stored.

Retention and deletion. Strips remain on your phone until you delete them (swipe a strip under Tunes) or delete the app and its data. Offloading the app can retain its data. Your device backup may also contain these preferences, depending on your system settings; restoring a backup may restore them. Manage or delete those backups using Apple's device and backup controls.

3. Strip links

Sending a strip creates a link that contains its title, its message, its holes, its speed and its bar lines. It goes only where you send it. You share it through the system share sheet or copy it to the clipboard; the app or person you choose handles it under their own practices. We do not receive it.

Opening a strip link loads a page from rubycat.co, but the strip itself is after the “#” in the link, which browsers do not send to the website. The request information described in section 5 therefore includes the page address without the strip. The strip page reads the strip in your browser and plays it there; it sends nothing.

A strip you punch on the strip page. If you punch or change a strip on that page, the page keeps that one strip in your browser's local storage, so it is still there when you come back. It stays in your browser and is not sent to us. Clearing the site's data in your browser removes it.

4. Sound, timing and motion

The app makes its sounds on your phone and plays them there. It does not record audio. System timing information is used only to line the sound up with your touches, and is not sent off your device.

While the app is open, it reads the phone's motion sensor to tell how the phone is tilted, so that the light moves across the metal as you tilt it. The readings are used at that moment only: they are not stored and do not leave your device.

5. Visiting this website

This website is hosted on Cloudflare. Serving and protecting the site involves processing request information such as your IP address, requested URL, request time and browser headers.

Cloudflare Worker logging is enabled, so requests may be logged for site operation. Log retention and access: ask at contact@rubycat.co.

These Music Box pages contain no advertising pixels, embedded analytics, forms or remotely hosted fonts. The product page runs a script that moves its strip and makes its sound in your browser, and the strip page runs the music box itself; after loading their own files from rubycat.co, neither makes network requests. The page code does not set cookies. The product page does not use browser storage; the strip page uses it only as section 3 describes.

For information about the hosting provider, see Cloudflare's privacy policy. Following an external link is subject to that site's own practices.

6. Support and privacy requests

If you contact support, your email address, message and any attachments are used to respond to your request. Please do not send passwords or unnecessary sensitive information.

• Operator: Ruby Cat, reachable at contact@rubycat.co.
• Support and privacy email: contact@rubycat.co
• Support-message retention and access: ask at contact@rubycat.co.
• How to request access or deletion: email contact@rubycat.co.

7. Policy changes

Effective date: the day Music Box 1.0 is released on the App Store.

This policy describes Music Box 1.0. If the app's data practices change, this policy will be updated.