What sustain stores, and why
sustain is a desktop app for click tracks, backing pads and setlists, made in Norway. It stores the minimum it needs to keep a band's setlists in sync between people and computers. There is no advertising and no tracking across other apps or websites, and nothing is sold or shared for marketing.
What we store
- Your account. When you sign in with Google we receive your email address, your name and your profile picture. We keep your name and initials so the people in your organisation can see who last changed a setlist. A device login is a shared account for a computer, not a person, and carries no personal details.
- Your content. The organisations you belong to, their members and pending invitations, and the songs, setlists and playback settings you create in them.
- Technical data. The app version, so it can tell you when an update is available, and the ordinary server logs (IP address, time of request) that our hosting providers keep for a short period to run the service.
- Error reports. When the desktop app crashes, freezes or hits an error, it sends a report so the bug can be found and fixed: what went wrong and where in the code, the app version, your operating system and computer model, and a random account id. Reports never include your email address, your IP address, your computer's name or the names of your audio devices. An error message can occasionally name the song or setlist that was involved. Reports are deleted automatically after 30 days.
- App starts and updates. Each time the desktop app starts it reports its version and whether it was just updated, and each step of an update (found, downloaded, installed, or failed and why), so we can see whether updates reach every computer. These reports carry the same details as an error report and nothing about what you play or do in the app. They go to Sentry and are deleted after 30 days.
- Debug logs, only if you send one. The app keeps a diagnostic log on your own computer: what it did recently (clicks, focus, which kind of key was pressed but never which letter or digit), errors, and your computer's setup — operating system, graphics card, connected hardware, and which audio, MIDI, overlay or text-input programs are running (other programs are only counted, never named). It leaves your computer only if you choose to send it: from the Help menu or the About dialog, or when the app asks you after it crashed, froze or went blank the last time you used it (at most once a day). It is then sent with audio device names, your user folder and email addresses removed. It is kept with error reports and deleted after 30 days.
Where it lives
Accounts and content are stored with Supabase in Ireland and kept in sync through PowerSync in the EU. A copy of your organisation's data is also kept on your own computer so the app works without an internet connection. Sound files and app updates are downloaded from Supabase and GitHub. Error reports go to Sentry and are stored in Germany, as are the start and update reports.
Who can see it
Members of your organisation can see that organisation's content. Nobody else can, apart from the providers above, who process it on our behalf and only to run the service.
Your rights
You can ask to see, correct or delete the data we hold about you at any time by emailing tjol.ravndal@gmail.com. Deleting your account removes your profile and sign-in; songs and setlists you added to an organisation stay with that organisation. The EU General Data Protection Regulation applies, and you can complain to the Norwegian Data Protection Authority (Datatilsynet) if you think we have got something wrong.
Changes
If this policy changes, the new version is published here with a new date at the top.