Legal
Privacy policy
grafer.app is run by Jonas Pettersson, Sweden. This page explains what the service stores about you, why, and what you can do about it. It is written to be read, not to be skimmed past.
What we store when you create an account
Your name, your email address and a salted hash of your password. We never store the password itself. Your account also records the plan you are on and, if you subscribe, the dates of your subscription. New accounts start with a free trial that requires no payment details.
What we store while you use grafer
- Projects. The scores, graphs and sketches you save are stored on our server so you can open them from any device. They belong to you. You can delete any project from the Projects page; if you want your whole account removed, write to us and we delete it with everything in it.
- Recordings and analyses. Material captured with the phone tools, such as a spectral analysis of a sound or a tapped rhythm, is stored as data in your account, not as audio files, unless you choose to save audio.
- Settings. Preferences such as the score style, the playback sound and the theme are kept in your browser's local storage, not on the server.
- Rehearsal and performance sessions. When you run a rehearsal, the session code, the parts and the live cues are stored for the duration of the session so that performers' devices can follow.
We use Brevo to send account email, such as password resets, and a short series of welcome messages after you sign up. Your email address is added to our Brevo contact list for that purpose. Every marketing message carries an unsubscribe link, and unsubscribing never affects your account. If you subscribe to updates from the footer of this site, only your email address is stored.
Payments
Subscriptions are handled by Stripe. Your card details go directly to Stripe and never pass through our server. We store Stripe's identifiers for your customer record and subscription so we can tell which plan you are on.
The assistant
grafer's assistant is powered by Anthropic's Claude models. When you use it, the relevant parts of your project and your question are sent to Anthropic's API to produce an answer. If you add your own Anthropic API key in Settings, it is stored encrypted on our server and used only for your requests. Anthropic's handling of API data is described in their privacy policy.
Analytics
The public pages of grafer.app and the app itself use Google Analytics to count visits and to understand which pages and features are used. Google Analytics sets cookies and processes technical data such as your approximate location, browser and device. We use it to improve the site, not to build profiles of individuals. You can block analytics with a browser extension or by disabling cookies for this site, and the app keeps working without it.
Cookies and local storage
grafer uses a sign-in token kept in your browser's local storage to keep you signed in, and local storage for your preferences. Apart from Google Analytics, there are no third-party cookies.
Where the data is
Accounts and projects are stored on a server we rent and operate for grafer.app. Brevo, Stripe, Google and Anthropic process data under their own terms, and some of them may transfer data outside the EU under the standard safeguards for such transfers.
How long we keep it
For as long as you have an account. When you ask us to delete it, your projects and personal data are removed from the live database within thirty days, and from backups when those backups expire. Invoices are kept for as long as Swedish bookkeeping law requires.
Your rights
You can ask for a copy of the data we hold about you, have it corrected, or have it deleted. You can object to marketing at any time. Write to hello@grafer.app and we will answer within a month. If you believe we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection, IMY.
Changes
If this policy changes in a way that matters to you, we will say so on this page and, for account holders, by email.
Last updated 2026-10-09.