Privacy & local data

Play stays yours.

iANDY Play is a live instrument by iANDY Studio. We do not add advertising tracking, login or developer analytics. Optional AI uses only the limited data described below.

Updated October 18, 2026 · Web experience and native app.

Local by design

The native app bundles instrument assets and processes synthesis, effects and artwork on your device, including offline first launch. Optional AI composition needs a connection; it is separate from the local audio engine. External website and support links use their usual connection.

Live Loop stays in the current session and does not record or export audio. A note sketch leaves the device only when you explicitly use Accompany or Vary.

Optional AI composition

Accompany and Vary are off until you choose Allow note data & enable AI. Each request sends a bounded sketch of note positions, timing and instrument settings through our Cloudflare-hosted service to OpenAI to create a response or variation. No microphone audio, imported audio, filenames, motion readings or contact information are sent. We request no stored API response; this does not mean zero retention. OpenAI's default abuse-monitoring retention is up to 30 days, subject to exceptions in its API data policies.

To prevent abuse, our Cloudflare-hosted database stores daily request counts under a day-specific hash of the network address, or a hash of an ephemeral session identifier when the address is unavailable. These identifiers are pseudonymous, not guaranteed anonymous. Our service does not persist your musical sketch or generated phrase. Records dated more than seven days ago are removed in bounded batches when later AI requests are handled; they may remain longer while the service is inactive. In the app, a variation exists only in your live session; it is not included in presets or share links.

Choose Turn off AI & withdraw consent in the AI panel to stop further requests. This does not change your local instrument or delete data already processed by the provider. If AI is unavailable, the instrument remains usable.

Optional sound and motion

Microphone: permission is requested only when you choose Capture. Input sampling stops at 20 seconds. You can decline and still use synthesis or import a local file. Imported and captured audio is session-only, processed on your device, never uploaded, and never included in saved presets or shared links.

Tilt: motion is used only after you enable it, to shape Orbit rhythm timbre, pitch and visuals. Sensor readings are transient: not stored, recorded into a loop, shared or uploaded. Motion and live playback stop when backgrounded and do not automatically resume.

What remains on this device

Appearance preferences, guidance choices, last-used instrument sounds and saved presets remain local. Remembered sounds do not restart audio or restore a recording. New presets contain settings only: no sampled audio, live-loop performance, recorded music or audio filenames. If browser storage is unavailable, new presets remain session-only.

Your language choice also uses a local preference and a same-site cookie across iANDY pages.

Use Clear sound to discard the current sample, or Clear loop to forget the phrase. Closing/reloading the session also discards transient content. Clear sound does not delete the original imported file.

To remove an installation's retained data, delete the native app using Delete App—not Offload—or clear this site's data in browser settings.

Sharing is your choice

Share creates a link containing validated settings, not audio or live notes. You choose whether to copy/send it and who receives it. The recipient decides when to play. Sound samples and motion readings are not part of the link.

Web hosting and TestFlight

The web host may process ordinary requests and service logs, such as IP address, browser information and requested asset paths, to deliver and secure the site. Ordinary asset requests do not contain notes; an explicit AI request contains the note sketch described above, never microphone samples. We do not add developer analytics or advertising tracking.

TestFlight is separate from the instrument. Apple automatically collects beta usage/crash information and shares it with the app provider; submitted feedback may also include comments, screenshots and tester information. We use this only to investigate beta issues and improve Play, not for advertising or third-party sharing. See Apple's TestFlight & Privacy.

Questions or support

Contact us with privacy or deletion questions using the address below. We receive the email and information you choose to send and use it to answer your request. You do not need to attach recordings or personal material.

andy@iandystudio.com

隐私与本地数据

尽管玩,声音仍属于你。

iANDY Play 是 iANDY STUDIO 制作的现场乐器。我们不加入广告追踪、登录或开发者统计。可选 AI 只使用下文说明的有限数据。

更新于 2026 年 10 月 18 日 · 网页体验与原生 App

在设备上完成

原生 App 自带乐器素材,合成、效果和画面都在设备上处理,首次启动也可离线使用。可选 AI 创作需要联网,与本地音频引擎相互独立。外部网站和帮助链接按通常方式联网。

现场循环只留在本次会话,不录制或导出音频。只有你明确使用「配伴奏」或「变奏」时,音符草稿才会离开设备。

AI 创作,由你选择

「配伴奏」与「变奏」默认关闭,直到你选择允许发送音符数据并启用 AI。每次请求只将有上限的音符位置、时间与乐器设置,通过 Cloudflare 托管服务发送给 OpenAI,生成回应或变奏。不发送麦克风音频、导入音频、文件名、动作传感器数据或联系信息。我们请求不储存 API 回应,但这不代表零留存。OpenAI 默认的滥用监控留存最长为 30 天,另有例外,见其 API 数据政策。

为防止滥用,Cloudflare 托管数据库会按天记录请求次数,使用网络地址的当日专属哈希;网络地址不可用时,使用临时会话标识的哈希。这些标识属于假名化数据,不能保证匿名。服务不持久保存你的音乐草稿或生成乐句。后续处理 AI 请求时,会分批移除日期超过七天的记录;服务无请求时,记录可能保留更久。App 内的变奏只存在于现场会话,不进入预设或分享链接。

在 AI 面板选择「关闭 AI 并撤回同意」,即可停止后续请求。这不会改变本地乐器,也不会删除服务提供方已经处理的数据。AI 不可用时,乐器仍可照常使用。

声音与动作权限,都是可选的

麦克风:只有点击录入时才申请权限,最长录入 20 秒。拒绝权限后,仍可使用合成器或导入本地文件。导入和录入的音频只在本次会话中使用,在设备上处理,不上传,也不会进入预设或分享链接。

倾斜控制:只有你启用后,才用设备动作改变 Orbit 的节奏音色、音高与画面。传感器读数是临时的,不储存、不记入循环、不分享或上传。进入后台后,动作控制和现场播放都会停止,不会自动恢复。

什么会留在设备上

外观偏好、引导选择、上次使用的乐器音色和已保存预设留在本地。记住音色不会自动发声,也不会恢复录音。新预设只包含设置,不含采样、现场循环演奏、音乐录音或音频文件名。浏览器储存不可用时,新预设只留在本次会话。

语言选择也会作为本地偏好与同站 Cookie,在 iANDY 各页面之间同步。

使用「清除声音」移除当前采样,或用「清空循环」移除乐句。关闭或重新载入会话,也会丢弃这些临时内容。「清除声音」不会删除原始导入文件。

要移除安装保留的数据,请彻底删除原生 App,而非仅卸载保留文稿;或在浏览器设置中清除此网站的数据。

分享,由你决定

分享会创建只含已验证设置的链接,不含音频或现场音符。是否复制、发送,以及发给谁,都由你选择;对方自行决定何时开始演奏。采样与动作数据不会进入链接。

网页托管与 TestFlight

网页托管方可能处理通常的网站请求和服务日志,例如 IP 地址、浏览器信息与请求的素材路径,用于提供和保护网站。普通素材请求不包含音符;明确发起的 AI 请求包含上文说明的音符草稿,但绝不包含麦克风采样。我们不加入开发者统计或广告追踪。

TestFlight 独立于乐器。Apple 会自动收集测试使用与崩溃信息,并分享给 App 提供方;你提交的反馈也可能包含文字、截图和测试者信息。我们只用它们排查测试问题、改进 Play,不用于广告或向第三方分享。详见 Apple 的 TestFlight 与隐私。

问题与帮助

隐私或删除数据的问题,可通过下方邮箱联系我们。我们会收到你主动发送的邮件与信息,并用于回应请求。无需附上录音或私人素材。

andy@iandystudio.com