Last updated: 13/10/2026
Your music and markings. Imported PDFs, annotations, renamed pieces and setlists are stored in Partbook’s private storage on your device. They are not sent to me unless you use a Consort (see below). Sharing a piece through the iOS share sheet is your choice.
Device identifier. Partbook creates a random identifier, not linked to your name or an Apple ID, and keeps it in your device’s Keychain, so it survives reinstalling the app. It is used to recognise a device that has redeemed a hire code or joined a Consort.
Hire codes. Redeeming a code sends the code and your device identifier to my backend, which issues a time-limited licence and download link. The same details are sent periodically to check the hire is still valid.
Screenshot counts on hired pieces. Partbook counts screenshots taken while a hired piece is open and locks it past a limit. Only the number is stored, on your device.
Consorts. A Consort lets an ensemble share music. To create one you sign in with Apple; I receive your email address (possibly Apple’s private relay address) and an account ID, and your uploaded PDFs and setlists are stored on my server. Members join with an invite code, using only their device identifier; no account or email is needed. Members download what the owner shares to their own device.
Subscriptions. Partbook Patron is an auto-renewing subscription handled entirely by Apple. I do not receive your payment details or Apple ID, only whether a subscription is active on your device.
Apple Music. If you use the playback controls, Partbook asks for access to Apple Music only to play, pause and skip your music. Nothing from it is stored or sent.
Emailing support. If you email me, I receive your address and whatever you send, and use it only to reply.
What Partbook does not do. No advertising, no tracking across other apps, no analytics, no sale of your information, and no access to contacts, location, camera or microphone.
Security and retention. Requests use HTTPS. Local content stays until you delete it or the app. Deleting the app removes your local library; the Keychain identifier is designed to persist.
Deleting your data. Email partbook@ahilton.com and I will delete your Consort account and uploaded music, and any hire redemption records linked to your device identifier.
Children. Partbook is not directed at children under 13 and does not knowingly collect their information.
Changes. If this policy changes in a way that affects data collection, I’ll update this page and its date.
Contact. partbook@ahilton.com