PennaNotensatz Open Penna

Privacy Policy

Penna Notensatz · As of October 2026 · Deutsche Fassung (the German version is authoritative)

1. In short

2. Controller

Michael Ketelaar, Bildungssoftware Ketelaar, Friedrich-Engels-Straße 12, 06886 Lutherstadt Wittenberg, Germany, e-mail: info@teach-apps.de. See also the legal notice (Impressum).

3. Visiting the pages and the app (hosting)

The app (penna.teach-apps.de) and this information page (teach-apps.de/penna) are served as static files from a server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (data centre in Nuremberg), under a data processing agreement,. The connection is encrypted with TLS.

When you visit, your browser transmits technically necessary data (including IP address, time, requested address, browser identifier). The web server (Caddy) keeps no access log for these pages. Only error events (for example for failed requests) are written to the server's system log; it may contain the IP address, user agent and requested URL, and is size-limited (at most 500 MB) with older entries being overwritten.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Serving the pages is not technically possible without this processing.

This information page loads no external resources: fonts, images and scripts come from the same server.

4. Fallback address at Vercel

As a backup, the same app is also hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (address under vercel.app). Only if you open that address does Vercel process technically necessary connection data (including your IP address) under its own privacy policy (vercel.com/legal/privacy-policy). The transfer to the USA relies on the EU-U.S. Data Privacy Framework adequacy decision. Legal basis: Art. 6(1)(f) GDPR.

5. Data on your device

The app stores content locally in your browser (IndexedDB, localStorage and cache): pieces, setlists, imported PDFs, recordings, handwriting samples (if you use personal learning), settings and display states. This data is not transmitted to us. You can delete it at any time (in the app settings or by clearing the site data in your browser). A service worker also keeps the app files in a cache for offline use.

Information in your device is accessed only as far as strictly necessary for the service you requested (Section 25(2) no. 2 TDDDG). No cookies are set for tracking or advertising.

6. Microphone, handwriting and audio recognition

The app accesses the microphone only when you start a recording and your browser allows it. Handwriting recognition and audio-to-notes recognition run locally on your device using models built into the app. Recordings do not leave the device unless you switch on cloud sync (Section 7).

Opening MusicXML, MuseScore and PDF files and converting a music PDF into a piece also happen locally on your device; the files are not uploaded anywhere for this.

7. Optional cloud sync

You can connect Penna to Apple iCloud (CloudKit, container iCloud.de.musichand), Dropbox or Microsoft OneDrive. This happens only at your explicit choice and with your sign-in at the respective provider (OAuth or Apple ID). Data goes directly from your device to your own account at the provider; we do not receive it and have no access. Depending on your settings, pieces, PDFs, setlists, audio tracks, ink (handwriting) and, if switched on, your personal handwriting samples are synced.

When connecting, your browser loads the provider's interface (for iCloud, the script from cdn.apple-cloudkit.com, only after you choose iCloud) and thereby sends, among other things, your IP address to the provider. The provider's privacy policy applies:

With Dropbox and Microsoft, data may be transferred to the USA, relying on an adequacy decision (Data Privacy Framework) or the provider's standard contractual clauses. Legal basis: your consent or performance of the function you chose (Art. 6(1)(a) or (b) GDPR). You can disconnect at any time in the settings; data already in your cloud account you delete there yourself. Access tokens are stored only on your device.

8. Optional: MuseScore sync with a folder

Penna can write selected pieces as MuseScore files (.mscz) into a folder and read changes back from there. This happens only at your choice, either in a local folder on your device (through your browser's file access, which you grant, or through the folder in the iPad app) or in the “MuseScore” folder inside the app folder of your Dropbox or OneDrive account (the information in Section 7 applies). Before overwriting a file, Penna stores backups in the subfolder “Penna-Sicherungen” of the same folder. We do not receive these files. If you choose a folder that iCloud Drive syncs, Apple processes the files under Apple's privacy policy.

9. Mac bridge and MIDI

Optionally you can connect the app to a bridge on your own Mac (address like my-mac.local) or to MIDI devices to play sounds there. This connection stays within your local network or on your device and does not pass through our servers.

10. Fonts and software

All fonts, sounds, notation and recognition models are built into the app and delivered from our server; no Google Fonts or other external font services are used.

11. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3)). Contact info@teach-apps.de. Since we store no accounts and none of your content, we can often only answer requests about server connection data.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection of Saxony-Anhalt (Landesbeauftragter für den Datenschutz Sachsen-Anhalt), Leiterstraße 9, 39104 Magdeburg, datenschutz.sachsen-anhalt.de.

12. No automated decision-making

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. Handwriting and audio recognition only serve to set notation for you.

13. Changes

We update this policy when the app or the law changes. The version published here applies. As of October 2026.