
Privacy Policy
Cardinal Music by Van Squared
Effective date: May 9, 2026
This Privacy Policy describes how Van Squared (“we”, “us”, or “our”) collects, uses, and protects your information when you use Cardinal Music (“the App”), a mobile application available on iOS and Android. By using Cardinal Music, you agree to the practices described in this policy.
1. Information We Collect
Account data
When you create an account, we collect and store the following in Firebase Firestore:
- Email address
- Display name
- Profile photo URL
- Account creation date
Authentication
Cardinal Music supports sign-in via Google Sign-In, Apple Sign-In, and email and password, all handled through Firebase Authentication. We do not store your raw password — Firebase manages credential security on our behalf.
User-generated content
Content you create in the app is stored in Firebase Firestore, including:
- Songs (chords and lyrics)
- Setlists
- Band memberships
Subscription data
Subscriptions and in-app purchase entitlements are managed by RevenueCat. Van Squared does not store your payment details. RevenueCat receives a user identifier and purchase receipt to verify entitlements. See RevenueCat’s Privacy Policy for details on how they handle that data.
2. How We Use Your Information
- To create and manage your Cardinal Music account.
- To store and sync your songs, setlists, and band data across devices.
- To verify your subscription status and unlock premium features.
- To respond to support requests.
- To comply with legal obligations.
We do not sell your personal data to third parties, and we do not use it to serve you targeted advertisements.
3. Third-Party Services
Cardinal Music uses the following third-party services, each governed by their own privacy policies:
- Firebase (Google) — authentication, database (Firestore), and cloud storage. Firebase Privacy Policy
- RevenueCat — subscription and entitlement management. RevenueCat Privacy Policy
4. Data Retention
We retain your account data and user-generated content for as long as your account is active. When you delete your account, all associated data — including your songs, setlists, bands, and account information — is permanently removed from our systems within 30 days.
5. Deleting Your Account
You can delete your Cardinal Music account at any time in two ways:
- In-app: Open Cardinal Music → Settings → Delete Account and confirm. Deletion is immediate and permanent.
- By email: Send a deletion request to vansquareddev@gmail.com and we will process it within 30 days.
For step-by-step instructions, see our account deletion page.
6. Children’s Privacy
Cardinal Music is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at vansquareddev@gmail.com and we will delete it promptly.
7. Security
We rely on Firebase’s industry-standard security infrastructure, including encrypted data transmission (TLS) and secure cloud storage, to protect your information. No system is 100% secure, but we take reasonable steps to safeguard your data.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Significant changes will be communicated via in-app notice or email. Continued use of Cardinal Music after changes take effect constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact Van Squared at:
Van Squaredvansquareddev@gmail.com