This privacy policy explains what personal data Tadadaa Ltd. collects when you use the Bow Quest app on iPhone, iPad, Android or Windows, or visit the tadadaa.com website, why we collect it, who can see it, how long we keep it, and what your rights are. It was last updated on 1 October 2026.
Who We Are
The controller of your personal data is Tadadaa Ltd. (business ID 2992931-5), Espoo, Finland. You can reach us about anything in this policy at info@tadadaa.com.
Data We Collect in the App
Your account. When you create an account in the app, you give us your name, email address, a nickname, your birthday and a password. Adults also choose whether they are a teacher or a pupil. For a child under 13, the app asks for the name and email address of a parent instead of the child's own. We store the password only in a scrambled form (a hash) that cannot be turned back into the password. We also record when the account was created and when its email address was confirmed.
Your practice. Bow Quest listens to your instrument through the microphone and works out the pitch and timing of the notes on your device. No audio is recorded, stored or sent anywhere. What we store are the results of each piece you play: the game, instrument and exercise, your points, how accurate your pitch and timing were note by note, the tempo, how long you played and when. We also store your progress, your settings, the avatar items you have chosen and the documents you have seen in the app, such as these terms.
Your contacts and homework. You can connect with other players by their exact nickname, and they must accept your request. We store your contacts, the players you have blocked, and the homework that teachers assign and approve.
Your device. To keep the app working with our server, the app sends an installation code, the type and version of your operating system and the version of the app.
Purchases. If you buy a subscription, the payment is handled by Apple (App Store), Google (Google Play) or, on Windows, Stripe. We do not see or store your card details. We store which subscription you have, until when it is valid and the payment service's own codes for your purchase. Stripe receives your email address and may ask for your billing address for tax purposes.
The app contains no advertising and no analytics or tracking tools from other companies, and it does not send crash reports.
Data We Collect on the Website
Server logs. When you visit the website, the web server writes the request into its log: the network address, the time, the page and the browser version. These logs are used to keep the service running and secure, and are deleted after 60 days.
Cookies. The website uses two cookies of its own, both needed for the site to work: a visitor cookie, which remembers that you have seen the cookie notice and is kept for up to two years, and a session cookie, which is removed after a day without visits. The website uses no third-party cookies, no advertising cookies and no analytics services of other companies.
Visitor statistics. We count the visits to our pages ourselves, without cookies. For each page view we store the time, the page, the site the visitor came from, the type of device (phone, tablet or computer) and a visitor code. The visitor code is computed from the network address and the browser with a secret that changes every day, so the same visitor is counted once a day and cannot be recognised from one day to the next. The network address itself is not stored. These statistics contain no personal information.
Account pages. When you confirm your email address, reset your password or ask us to remove your account on the website, we use your email address and nickname to find your account and send you the confirmation email.
Why We Use Your Data
- To provide the game: your account, practice results, progress, contacts and homework are needed for the app to work, to keep your progress on all your devices and to show it to your teacher. The legal basis is our agreement with you, the terms of use.
- To handle purchases: the legal basis is our agreement with you, and the accounting law requires us to keep the records of the payments.
- To send account emails: we send emails to confirm your email address, to reset your password, and to tell you when your password or email address has changed or your account is removed. We do not send newsletters or marketing emails.
- To keep the service secure and working: server logs, device information and limits on repeated requests protect the service from misuse. The legal basis is our legitimate interest in running a secure service.
- To understand how the website is used: the anonymous visitor statistics. The legal basis is our legitimate interest.
We do not sell your data, use it for advertising or make automated decisions about you.
Who Can See Your Data
Other players. Other players see only your nickname, never your name, email address or birthday. Your contacts can see the results of the pieces you play. Your teacher sees the homework they have assigned to you and your results.
Service providers. We use these companies to run the service, and they may use the data only for the tasks we give them:
- Google (Gmail) delivers the emails we send.
- Stripe handles the payments on Windows.
- Hetzner Online GmbH hosts our servers and databases in a data centre in the United States.
When you buy a subscription through the App Store or Google Play, Apple or Google handles the payment under its own privacy policy.
Our servers are located in the United States, and Google and Stripe may also process data outside the European Union, mainly in the United States. These transfers are protected by the standard contractual clauses approved by the European Commission or, for Google and Stripe, by the EU–US Data Privacy Framework.
We may also disclose data when the law requires it, for example to the authorities.
Children
Bow Quest is made for children who play the violin or viola, and their parents and teachers. When a child under 13 creates an account, the app asks for the name and email address of a parent. The confirmation email goes to the parent, and the child can connect with other players only after the parent has confirmed the email address. Children are shown to other players only by their nickname, and contacts are made only when both players accept them. Children aged 13 to 17 should read this policy and the terms of use together with a parent.
If you are a parent and want to see, change or remove your child's data, contact us at info@tadadaa.com.
How Long We Keep Your Data
We keep your account data and practice results for as long as you have an account. You can remove your account in the app or on the website. When you remove your account, we replace your name, nickname and email address with an anonymous code, delete your birthday, remove your contacts and disable the account, so the remaining data, such as practice results, can no longer be connected to you. Payment records are kept for as long as the accounting law requires, which in Finland is up to ten years.
Your Rights
Under the EU General Data Protection Regulation you have the right to:
- get a copy of the personal data we have about you;
- have incorrect data corrected;
- have your data removed;
- restrict or object to the use of your data, when we use it on the basis of our legitimate interest;
- get the data you have given us in a machine-readable form.
To use these rights, contact us at info@tadadaa.com. If you think we handle your data against the law, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or the data protection authority of your own country.
Security
We protect your data with technical and organisational measures: passwords are stored only as hashes, connections to the website are encrypted, and only the people who maintain the service can access the servers. No method of sending or storing data is completely secure, but we work to keep your data safe and will tell you as the law requires if a breach affects you.
Links to Other Sites
The website and the app link to other sites, such as the App Store and Google Play. Those sites are not operated by us and have their own privacy policies.
Changes to This Privacy Policy
When we change this policy, we publish the new version on this page. If the changes are important, the app asks you to read and accept the new version before you continue playing.
Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at info@tadadaa.com.