ManifesTone is made by Bigsoft LLC ("we", "us"). This policy explains exactly what the app and its service collect, why, and who else sees it. We've written it to be read rather than to be impressive.
The short version. Your guitar audio never leaves your device. We collect your email address if you make an account, the song names you ask for rigs of, and whatever you tell us about your guitars. A photo you put on a guitar is yours — kept privately, shown to nobody else, and never read by an AI. We don't run advertising or analytics trackers, we don't sell anything to anybody, and we don't build a profile on you.
What we collect
| What | Why | Where it lives |
|---|---|---|
| Your email address | To create your account, send you sign-in codes, and carry your subscription across your devices | Our server |
| Song, artist and part you ask about, and the conversation with your tech | It's the request itself — we can't build a rig for a song without knowing the song | Our server, and sent to Anthropic to generate the rig |
| Count of rig builds used | To apply your plan's monthly allowance and stop abuse | Our server |
| A device identifier from Apple's App Attest | To confirm requests come from a genuine copy of the app, so we're not paying for bots. It identifies the app install, not you | Our server |
| A record of your purchases — Apple's transaction identifiers, which pack or membership it was, what it granted you, whether it was a real or a test purchase, and when. Plus your credit balance and, for a membership, its renewal date | To give you what you paid for exactly once (Apple re-sends transactions, and without a record a re-send would grant twice or not at all), to return credits if a purchase is refunded, and to answer you if you tell us something is missing | Our server |
| Your saved rigs | So your rigs follow you between devices. Every plan can save rigs — the free plan keeps three, a subscription lifts the limit | Our server |
| Your guitars — what you typed on the form: make, model, year, pickups, switch, tuning, serial and your own notes | So rigs are built for the guitar you're actually holding, and so the desktop plugin knows what you own too | Our server |
| A photo of a guitar, if you add one | So you can tell your guitars apart in a list. Optional, and it is never shown to anyone but you | Our server (private storage — see Guitar photos) |
Stays on your device
- Your guitar audio. All amp modeling and effects processing happens on your device. Audio is never recorded, never uploaded, and never sent anywhere.
- Your TONE3000 login. Held in the iOS Keychain and used directly from your device to search and download captures on your own TONE3000 account — those requests go straight to TONE3000 and never pass through us. One exception, stated plainly rather than tucked behind "never": when you first connect, your device sends that token to our server once, so we can ask TONE3000 which account it belongs to and set your ManifesTone account up against it. We keep the username and account id that come back. We do not store the token, and nothing else ever uses it.
- Your own Anthropic API key, if you choose to supply one. Held in the Keychain. It is passed through our server to Anthropic to authorize your request and is never stored by us.
- Your local rig history. Stored on the device unless you turn on cloud sync.
Song matching
If you tap the listen button to identify a song that's playing, the app uses Apple's ShazamKit. Your device listens through the microphone only while you've asked it to, turns what it hears into a short acoustic fingerprint, and sends that fingerprint — not the audio — to Apple to be matched against the Shazam catalog. We receive only the artist and title that come back, and only so we can build a rig for the song.
No recording is made, nothing is kept, and the microphone is not used for this at any other time. It's also entirely optional — you can always just type the song in.
Guitar photos
You can put a photo on a guitar in your arsenal. It's optional, and the app works perfectly well without one — it's there so you can tell your black Charvel from your other black Charvel in a list.
That photo is stored privately on our server, against your account. No public link is ever created for it, and there is no address anyone else could guess that would reach it — the app has to prove it's you before we hand the bytes back. It is not sent to Anthropic or to any other AI service, and nothing reads it. It is a picture, for you, and that is all it is.
Delete the guitar and the photo goes with it. Delete your account and every one of them is wiped.
One separate, deliberate exception, and we'd rather spell it out than let you find it: if you use “read it off the plate” to save yourself typing a serial number, that one photo is sent to Anthropic — because reading the characters off the metal is the whole point of the button. We keep the number it reads back and we do not store the picture. You never have to use it; the serial box is a normal text field you can type into.
We do not collect
- No advertising identifiers, ad networks or third-party analytics SDKs.
- No location, contacts or health data. We never browse your photo library — the only images we ever receive are the ones you pick or take yourself for a guitar, described above. No microphone recordings — the mic is used live, for your guitar and for song matching, and nothing it hears is stored or sent to us.
- No tracking of you across other apps or websites.
Who else sees your data
We use a small number of providers to make the app work. We share the minimum each one needs.
- Anthropic — receives the song you asked about and the rig conversation, in order to generate and adjust rigs, plus your guitar's specification so the rig suits the instrument. If you ask us to look a model up by name, that name goes too. If you use “read it off the plate”, that one photo of your serial goes as well — and nothing else you photograph ever does. It is not used to train their models on business API traffic.
- TONE3000 — your device talks to them directly, on your own account, to search and download captures.
- Resend — delivers your sign-in code emails. They see your email address.
- Cloudflare — runs our server infrastructure, so data passes through and is stored on their platform.
- Apple — handles purchases and subscriptions. We never see your payment details: no card number, no billing address, nothing you typed into Apple. What Apple does send us is a signed record of the purchase itself — its transaction identifiers, which product it was, and when a membership renews, expires or is refunded — and we keep that, because it is the only way to give you what you paid for and to put it right if you are refunded. If you use song matching, Apple also receives the acoustic fingerprint described above, to identify the track.
We do not sell personal information, and we do not share it for advertising.
Shared rigs
When your tech finishes building a rig, it keeps a copy of the recipe — the song you asked for, which captures were used, and the effect settings — for up to 90 days, so that the next person who asks for that song gets a faster, cheaper build instead of starting from scratch. The written summary of what it built is kept alongside it.
This record is not linked to your account. It holds no email address, no user or device identifier, and nothing that says the rig came from you. It is a recipe filed under a song title, and it is the reason recalling a rig is instant and doesn't cost you a build.
It contains the song text you typed, so please don't put anything personal in that box — it's a field for a song, an artist or a description of a sound.
How long we keep it
- Account details — until you delete your account.
- Rig conversations — the back-and-forth with your tech is held only for as long as that rig session is live, so you can keep tweaking, and is not kept afterwards.
- Shared rig recipes — up to 90 days, not linked to you (see above).
- Your saved rigs — until you delete them, or delete your account.
- Your guitars, and any photo on one — until you delete the guitar, or delete your account. A serial photo is not kept at all: it is read and discarded.
- Sign-in codes — stored hashed, expire in 10 minutes, and are destroyed once used.
- Usage counts — reset monthly.
- Purchase records — until you delete your account, which removes them along with everything else. We have to keep them while the account lives: they are what stops a re-sent transaction granting you the same pack twice, and what lets us return credits if Apple refunds you.
Your choices
Deleting your account
You can delete your account and everything attached to it at any time. Email support@manifestone.app from your account address, or use the delete option in the app's Settings, and we'll remove your account, your saved rigs, your guitars and their photos, your usage records and your purchase records.
Two things deletion cannot reach, so that you know rather than assume. Apple keeps its own record of what you bought — that is their receipt, not ours, and it is not something we can remove on your behalf. And a rig recipe you chose to share with the community stays in the shared library, because it was never stored against your name in the first place (see Shared rigs); there is nothing in it that points back to you.
Using it without an account
You don't need an account to try ManifesTone. Without one we hold no email address for you — only the anonymous device identifier used to apply the free allowance.
Access and correction
Depending on where you live you may have the right to see, correct, export or delete the data we hold, and to object to how we use it. Email us and we'll sort it. We won't treat you differently for asking.
Children
ManifesTone isn't directed at children under 13, and we don't knowingly collect their personal information. If you believe a child has given us data, email us and we'll delete it.
Security
Credentials on your device are stored in the iOS Keychain. Sign-in codes are stored hashed, never in plain text. Requests to our service are authenticated and encrypted in transit. No system is perfect, but we don't hold data we don't need — which is the most effective protection there is.
Changes
If we change this policy we'll update the date at the top, and for anything significant we'll tell you in the app or by email.
Contact
Bigsoft LLC — support@manifestone.app