Privacy Policy
Last updated 21 September 2026 · james.chang@igoodworks.com
CherryBerry is a music practice app used by teachers and by their students, many of whom are children. This policy says exactly what we collect, what we do not, and what never leaves the device. It describes the app as it actually behaves, not as we would like it to.
The short version
- We never ask for a date of birth. We ask for an age range.
- We never ask a student for their real name. You sign in with a name you choose.
- Practice video never leaves your device. Your teacher cannot see it. We cannot see it.
- There is no advertising, no analytics and no third-party tracking of any kind. The app contains no third-party code.
- A student's work is visible to their own teacher and to nobody else. Students cannot see or search for other students.
- You can delete any recording, or your whole account, at any time.
What we collect
Your account
- The name you sign in with, and the name you like to be called. Neither has to be your real name.
- Your password, stored only as a salted, peppered PBKDF2-SHA256 hash. We cannot read it.
- Whether you are a teacher or a student, and which instrument you play.
- Your age range — for example "10 – 13". Never a birthday.
- A recovery email address, if you choose to give one. This is optional and may be left blank.
- The name of your school, if you choose one from the directory or add it.
Your music and your practice
- Pieces your teacher adds: the title, the composer, the notation, and any sheet music pages.
- Audio recordings of your playing that you choose to send.
- How long you practised, when, at what tempo, and how many takes you recorded.
- Assignments, submissions, your teacher's written feedback, the notes they pin to a moment in your recording, and the stickers they award.
- The link between a student and their teacher.
Your device
- A push notification token, but only if you turn notifications on. It tells Apple's servers which device to deliver to. It is deleted as soon as Apple tells us the device no longer accepts it.
What we never collect
- A date of birth.
- Your location. The app has no location permission and asks for none.
- Contacts, calendars, photos you did not explicitly choose to record, or anything else on your device.
- Any advertising identifier. There is no advertising in CherryBerry.
- Any analytics, crash-reporting or attribution data. We have no analytics SDK, and the app is built with no third-party dependencies at all.
What stays on your device and is never uploaded
- Video of your practice. If you record video with a take, the video file is written to your device and stays there. It is never uploaded, your teacher never receives it, and we never see it. Only the sound is sent.
- The uncompressed master of every recording. What is uploaded is a compressed listening copy.
Who can see what
- A student's recordings, submissions and practice history are visible to that student's own teacher, and to nobody else.
- A teacher sees only their own students and their own pieces.
- Students cannot browse, search for or contact other students. A teacher's search for students is limited to schools they already share.
- A teacher cannot add anyone to their own class. Only a student can accept an invite, using a single-use code that expires after seven days.
- We do not sell your data, share it with advertisers, or give it to anyone else, ever.
Children
CherryBerry is designed to be used by children under a teacher's direction.
- We ask for an age range rather than a date of birth so that there is no birthday to leak.
- Where a student is under 14, sign-up requires a parent or guardian's email address before the account can be completed, and the step cannot be skipped.
- A child cannot create an account at all without an invite code from a real teacher. There is no way for a child to sign up into an empty app and be discoverable by strangers.
- We do not knowingly use a child's information for any purpose other than showing their work to their own teacher.
If you are a parent or guardian and want to see what we hold about your child, or want it deleted, write to james.chang@igoodworks.com and we will do it.
Purchases
Subscriptions are handled by Apple. We never see your card, your billing address or your Apple Account. We receive only Apple's confirmation of what was purchased and whether it is still active.
Where your data lives
Account records, pieces, assignments and feedback are stored in a Postgres database. Audio recordings and sheet music pages are stored in Cloudflare R2. Both are reached through a Cloudflare Worker. Everything travels over HTTPS.
Keeping it, and deleting it
You can delete an individual recording at any time from the app. Deleting your account removes your profile, your recordings, your practice history, your submissions and the feedback on them. Recordings you have deleted are gone; nobody, including your teacher, can retrieve them.
Changes
If this policy changes in a way that affects what we collect, we will say so in the app before the change takes effect.