Privacy Notice — Tocaris

Last updated: October 6, 2026

This notice describes what data Tocaris itself collects (your songs, your practice). The account and payment you manage at accounts.emysof.com are governed by the EmySof Account and Payments Privacy Notice — this document doesn't replace it, it complements it.

1. Data controller

Tocaris is developed and operated by EmySof. Contact: [email protected].

2. Data we collect

2.1 Account

You sign in with the same shared EmySof account (email + password, or Google). We store your account identifier and whether you have active Pro access (is_pro) — never your password, which Supabase Auth manages.

2.2 Your songs

When you import a Guitar Pro file, we store the file and its information (title, artist, measure count) in our storage, so you can reopen it and practice it.

2.3 Your practice

For the practice tools to work, we store:

Which measures you marked as hard, learning, or mastered.
The fragments you saved to repeat later.
Which measure you left off at last time ("Continue where you left off").
Your practice sessions (when and how long you practiced), to calculate your streak and your Panel metrics.

3. Who we share data with

Provider	What for	What they receive
Supabase	Authentication, database and storage of your songs	Your account, your songs, your practice data
accounts-service (EmySof)	Verifying your Pro access and processing payments	Your account identifier and your subscription status

We don't sell your data to third parties, we don't show ads in Tocaris, and we don't use your songs or your practice activity to train AI models.

4. How long we keep your data

For as long as your account exists. If you delete a song, it's deleted along with the practice data associated with it — except your free-imports quota, which never resets (it's for life, not per active song).

5. Security

All communication with Tocaris is encrypted (HTTPS/TLS). Access to your songs and practice data is protected by Supabase's security policies (Row Level Security) — only you can read or modify your own data.

6. Your rights

You can delete any song (and its associated practice data) yourself from the Library. To request access to, correction of, or complete deletion of your account, write to us at [email protected] from the email associated with your account. If you're a resident of Mexico, this corresponds to your ARCO rights (Access, Rectification, Cancellation, Opposition) under the Federal Law for the Protection of Personal Data Held by Private Parties (LFPDPPP).

7. Minors

Tocaris is not directed at children under 13.

8. Changes to this notice

We may update this document — the "Last updated" date above reflects the current version.

9. Contact

Questions about this notice: [email protected].
See also our Terms of Service.

Like any legal document drafted with AI assistance, a lawyer's review is recommended before treating it as final for your specific jurisdiction.