Privacy Policy

Last updated: October 17, 2026

This policy explains what information Narwolf ("Narwolf", "we", "us") collects when you use the Narwolf website, iOS app, API and MCP server (together, the "Service"), how we use it, and the choices you have. Narwolf is operated by an individual (sole proprietor) in Colorado, USA.

Beta

Narwolf is currently an invitation-only beta. It is provided as is, features may change, and data loss is possible. Please keep your own copies of anything you care about.

Information we collect

• Account information. Your email address and password (stored only as a hash), your account name, time zone and settings.
• Your content. Songs, lyrics, chords, chart PDFs, notes, set lists, tags and audio recordings you create or upload.
• Location (optional). If you allow it, the app records your precise location when you make a recording (only while the app is in use). We convert it to a street address using Google Maps Geocoding and store the address with the recording. You can decline location access and still use the Service.
• Device and app information. App version and build, platform, device model, operating system version and user agent. These are sent with requests and stored with recordings so we can diagnose problems.
• Error reports. When something goes wrong, error reports are sent to Sentry. We configure Sentry not to send default personal data such as IP addresses or cookies.
• Access tokens. Personal access tokens you create for the API or MCP server are stored only as hashes. The mobile app keeps its login token in the device keychain.

Cookies

We use only strictly necessary cookies: a session cookie, a remember-me cookie that keeps you signed in, and a theme preference cookie (kept for one year). We do not use analytics, advertising or tracking cookies, so we do not show a cookie banner.

How we use information

We use your information to provide and secure the Service, store and show your content, let you sign in, diagnose and fix problems, and communicate with you about your account. We do not use your content to train AI or large language models.

Service providers

We share information with the following providers only as needed to run the Service:

• Railway for hosting, the database and Redis.
• Cloudflare R2 for file storage (audio, charts and other uploads).
• Google Maps Geocoding to turn a recording location into a street address.
• Sentry for error monitoring.
• Expo for app delivery and updates.
• An email delivery provider to send account emails such as password resets.

If you ask Narwolf to import a chart from Ultimate Guitar, our servers contact Ultimate Guitar only for that request. Links to Spotify, Apple Music and Tidal open those services, which are governed by their own policies.

No sale or advertising

We do not sell your personal data, we do not share it for advertising, and we use no third-party analytics.

Sharing your content

Your content is private to your account. You can create a link to a read-only view of one set list. It shows the songs, keys, tempos, and chart and lyrics PDFs, but not your recordings or notes. Anyone with the link can view it. You can revoke the link at any time, and you can set it to expire. Shared pages are excluded from search engines.

Retention and deletion

You can delete a recording, which moves it to Recently Deleted, and then delete it permanently. You can delete your account in the app or under Settings, which deletes your content. Backups and logs may persist for a limited period afterward.

Your rights

Depending on where you live, including under US state privacy laws and GDPR-style laws, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. To make a request, email [email protected]. We will respond within a reasonable time. We make no claim of certification under any particular privacy framework.

Children

Narwolf is not intended for children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.

Security

We use reasonable measures to protect your information, but no system is completely secure.

Changes to this policy

We may update this policy. When we do, we will change the date at the top. If a change is significant, we will take reasonable steps to let you know.

Contact

Questions or requests: [email protected].