The microphone is used only while a session is running, to detect whether you are playing.
Measuring loudness requires the device to capture audio — there is no way to read volume without it. So a temporary recording is written to your device for the length of the session and deleted the moment the session stops. It is never uploaded, never sent to us, and never leaves your phone. Only the loudness figure is used, and only on your device.
You can decline the microphone permission entirely. The app still works — it simply times the whole session without separating playing from breaks.
If the app crashes we send a diagnostic report to Sentry, our error-monitoring provider, so the problem can be found and fixed. Reports contain the technical details of the failure: the error, where in the code it happened, your device model and OS version.
They are configured to exclude personal data — no email address, no account identifier, no practice notes, no photos, and no network request contents.
Your data is stored in Supabase. Access is enforced per account at the database level, so no user can read another user's sessions or photos.
If you enable reminders, the daily notification is scheduled locally on your device. No data leaves your device for this feature.
You can delete individual sessions from within the app at any time.
You can also permanently delete your entire account from inside the app, under Profile → Account → Delete Account. This irreversibly erases your account, your full practice history, your photos, and any stored Strava connection.
For any privacy question, email support@getduende.app.
Duende