Privacy Policy — Sarasa

Effective date: 12 October 2026

App: Sarasa (Android) ("the App")

Provided by: Xcool Private Limited ("we", "us", "our")

Contact: sarasa.support@xcool.in

The App is a music-practice app for Indian classical music. It provides accompaniment, and a live pitch mirror that shows your sung note on screen. The App works without an account. Its practice features work offline. Apart from automatic problem reports (which you can switch off), it collects nothing unless you opt in to practice-data sharing.

The microphone

The pitch mirror analyses microphone audio on your device to estimate the pitch and sound features of what you sing. Audio is not recorded, stored, or transmitted, whether or not you opt in to practice-data sharing. Listening stops when you turn the feature off or close the App. The accompaniment features work without the microphone.

Practice-data sharing (optional, off by default)

On first launch the App asks once whether you want to help improve it. If you decline, nothing is collected; the App may ask again occasionally, and you can opt in later in Settings → My data → "Share practice data". Opting in includes confirming by checkbox that you are 18 or older, or a parent/guardian consenting on a learner's behalf, and that you accept our Terms of Use and this policy. We record the time of your consent. Where the GDPR applies, our legal basis for practice-data sharing is your consent.

If you opt in, the App shares data computed on your phone from your practice, not audio:

  • Pitch and performance data: detected pitches with metrics such as timing and confidence, notes reached, pitch accuracy, timing against the beat, loudness contours.
  • Sound features: summary measurements of tone quality (for example vibrato and brightness). Your voice cannot be reconstructed from them.
  • Practice context: app settings in use, whether earphones or the phone speaker were used, approximate room-noise level, app version, device model and Android version.
  • A device identifier (Google App Set ID, or a random ID we generate), not linked to any name, email, or account. It exists so your data can be deleted on request.

Turning "Share practice data" off stops collection immediately and deletes any practice data still waiting on your phone to be uploaded. Waiting practice data is stored encrypted on your phone and is deleted automatically if it has not been uploaded within 7 days.

Problem reports (automatic, can be switched off)

When the App crashes, freezes, is closed by the system because of a fault, or detects a known problem (for example the microphone stalling or the pitch display not following your voice), it prepares a problem report so we can find and fix the cause. Reports are sent to us automatically. You can switch this off at any time in Settings → "Send problem reports automatically"; the App then stops creating and sending reports and deletes any reports waiting on your phone.

A problem report contains:

  • Technical details of the problem: error messages, where in the App's code it happened, and how Android reported the App closing (including memory figures).
  • The App's recent activity log: the last few minutes of the App's own technical messages, which include pitch-engine readings as numbers (for example detected frequencies, confidence and loudness levels). No audio.
  • App state at the time: the screen in use, whether listening or accompaniment was on, the pitch-engine mode, and whether earphones were connected.
  • App version and build, device model, Android version and the device's total memory.
  • The device identifier described above, sent with each report so reports can be limited, grouped and deleted. It is not linked to any name, email or account.

Before a report is saved, the App removes credentials, request signatures, identifiers and any practice-data content from it. Reports never contain audio, recordings, contacts, location, or account details.

Reports are used only to diagnose and fix problems in the App, are stored separately from shared practice data, and are never used to train models. Where the GDPR applies, our legal basis for problem reports is our legitimate interest in keeping the App working reliably; you can object at any time by switching them off.

On your phone: the App keeps a rolling log of its most recent activity (about the last few minutes of use, at most 1,500 lines), replacing older lines as new ones are written. It stays on your phone until it is overwritten, you use "Delete All Data", or you uninstall the App. Prepared reports wait on your phone until they are sent, and are deleted once sent or after 14 days.

Sending a report yourself: Settings → "Send a problem report" sends a report, with the recent log, to us in the same way, after you confirm. This works even if automatic reports are switched off.

Purchases

Paid features are bought through Google Play. Google processes the payment under Google's own terms and privacy policy; we never receive your card or bank details, and we do not see your name or email address. To unlock what you bought, the App receives from Google Play the status of your purchases (which product, whether it is active, and a purchase reference) and checks it on your phone. We do not store your purchase history on our servers. Refunds and subscription cancellations are handled through Google Play.

What we do not collect

No personal details (name, email, phone number, address), no accounts, no payment card details, and no audio recordings.

Permissions

  • Microphone: on-device pitch detection, as described above.
  • Modify audio settings, foreground service, wake lock: uninterrupted playback during practice, including with the screen off.
  • Internet: problem reports and, if you opted in, practice-data upload.
  • Billing (Google Play): purchases of paid features.

Use of data

Shared practice data is used only to improve the App's pitch tracking and practice feedback, including training the models behind those features. Problem reports are used only to diagnose and fix problems. We do not sell either, or share them with third parties.

Retention and security

Shared data and problem reports are transmitted over an encrypted connection and stored on servers in India, hosted by a cloud provider acting only on our instructions. Shared practice data is kept only as long as needed for the purpose above, or until you delete it, whichever is first. Problem reports are deleted automatically after 90 days, or earlier if you delete your data. If you never opt in to practice-data sharing and switch off problem reports, no data about you exists on our servers.

Children

The App is a general-audience app and is not directed at children. Users under 18 may use the App only with the consent of a parent or guardian, who is responsible for that use (see our Terms of Use).

Practice-data sharing requires the 18+/guardian confirmation described above. A parent or guardian can turn sharing and problem reports off, and delete shared data, in Settings, or by emailing us.

Your rights and deletion

  • Settings → My data → "Share practice data": turns collection off immediately.
  • Settings → "Send problem reports automatically": turns problem reports off immediately.
  • Settings → My data → My data → "Delete All Data": removes queued data and problem reports on the phone and erases the server records, including problem reports, linked to your device identifier.
  • Email sarasa.support@xcool.in for any privacy request or grievance, including deletion or a summary of the data associated with your device identifier. We respond to grievances within 90 days.

Deleting your data removes it from our datasets, and no later training or retraining will include it. Models trained before your deletion are not withdrawn.

We honour the rights under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR: consent as the basis for practice-data sharing, purpose limitation, withdrawal of consent as easily as it was given, and the rights of access, correction, erasure, restriction, portability and objection. You may also complain to the Data Protection Board of India or, in the EU or UK, to your data-protection supervisory authority.

Changes

Material changes will update the effective date above and, where appropriate, be notified in the App. Any new kind of data collection will be described in this policy and notified in the App before it starts, and any new collection beyond problem reports will require your explicit consent.

Contact