Privacy Policy

Effective date: 19 July 2026

This policy explains what Opera One collects, why, and what you can do about it. The data controller is Opera One SRL, Corso Re Umberto 7, 10121 Torino, Italy. For privacy questions, write to support@operaone.app.

What we collect

Account

When you sign in with Apple we receive a stable Apple user identifier and, if you choose to share it, an email address (which may be Apple’s private relay address). We never receive your Apple ID password.

We also store the profile you provide: display name, voice type, goal, and experience level.

Purpose: to create and secure your account. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Practice activity

Practice sessions and their catalogue references, duration and timestamps; aggregate totals, streaks and activity days built from them.

Purpose: to show your history and progress, and to make the App work. Legal basis: performance of the contract.

Recordings

When you record a performance, the video — which contains your voice and image — is written to your device and saved to your photo library. It is not uploaded to our servers. It is yours; you can delete it from the Photos app like any other video.

The App asks for camera, microphone and photo library permission the first time you record. You can change or revoke these at any time in iOS Settings; without them, recording does not work, but the rest of the App does.

Legal basis: your consent, which the App records separately and which you can withdraw.

Subscription

Your subscription status, plan, renewal and expiry dates, and the transaction identifiers Apple sends us. We never receive your card details — payment is handled entirely by Apple.

Purpose: to give you the access you paid for. Legal basis: performance of the contract.

Consents

Each consent you give or withdraw, with the time, the app version, and the previous value. We keep this history because we must be able to demonstrate what you agreed to and when.

Legal basis: legal obligation (Art. 6(1)(c) GDPR).

Diagnostics

Basic usage events (for example which screen was opened) and crash information, to find faults and understand which parts of the App are used. We do not use this to build advertising profiles.

Legal basis: legitimate interest in keeping the App working (Art. 6(1)(f) GDPR).

Notifications

If you enable notifications, a device token and your notification preferences. You can disable notifications in iOS Settings or in the App at any time.

Legal basis: your consent.

What we do not do

• We do not sell your personal data.
• We do not use your data for advertising, and we do not share it with advertising networks.
• We do not upload your performance recordings.
• We do not train models on your voice. If that ever becomes possible, it will be a separate, clearly labelled, opt-in choice — off unless you turn it on — and you will be able to withdraw it without losing any other feature.

Optional processing, off by default

Some features need more than the basics. Each is a separate switch, each starts off, and turning one off never disables the rest of the App:

Consent	What it enables
Audio and video recording	Recording your performances
Voice profiling	Personalising repertoire suggestions to your voice
AI analysis	Personal feedback on your singing, when available
Improvement contribution	Contributing anonymised material to improve the service
Push notifications	Sending you notifications

At the date of this policy the App ships no AI analysis feature; the consent exists so that nothing can be processed before you have chosen.

Who else is involved

• Apple — sign-in, payments, subscription status, push delivery. Apple is an independent controller for its own purposes; see Apple’s privacy policy.
• Microsoft Azure — hosting of our servers and database, in the European Union.
• Service providers act as processors under contract and may only process your data on our instructions.

Your data is stored in the European Union. If a transfer outside the EEA ever becomes necessary, it will rely on an adequacy decision or on Standard Contractual Clauses.

How long we keep it

• Account and practice data: while your account exists.
• After deletion: removed within 30 days.
• Consent history: retained after deletion where we must be able to prove compliance.
• Recordings: we do not hold them; they live in your photo library until you delete them.
• Billing records: retained as long as tax and accounting law requires.

Your rights

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting what happened before.

Two of these are built into the App and do not require writing to us:

• Export — Profile → Settings → Privacy produces a downloadable archive of your data.
• Deletion — Profile → Settings → Privacy deletes your account. You confirm by typing a confirmation word, are signed out immediately, and the deletion completes within 30 days.

For anything else, write to support@operaone.app. You also have the right to complain to your data protection authority; in Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).

Children

Opera One is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, write to support@operaone.app and we will delete it.

Changes

If we change this policy materially we will give notice in the App or by email before the change takes effect, and update the date at the top.

Contact

Opera One SRL
Corso Re Umberto 7, 10121 Torino, Italy
support@operaone.app