Leaderboards, friends and battles

Last updated: 9 October 2026 (applies from version 1.7.0)

This is the section “Leaderboards, friends and battles” of our privacy policy. The full privacy policy (in Chinese, with English summaries) is at quietune.autoit.studio/privacy.html.

These features are optional and need no account or email. Only when you join a leaderboard, add a friend or start a battle does our server create a random, anonymous identity for this phone. Public leaderboards show only system-made handles and scores; the nickname you choose is visible only to you and your friends. Recordings are never uploaded. You can delete this data in the app at any time.

Anonymous device identity

The first time you join a leaderboard, add a friend or battle, our server creates a random device code and secret. The secret is kept in your phone's secure storage (the iPhone Keychain, this device only and not synced; on Android, encrypted with the Keystore and excluded from cloud backup). The server stores only a hash of the secret.
It is not an advertising identifier, nor the IDFA, IDFV or Android ID. It is not shared across apps and is not used for ads or tracking.
For this identity the server keeps: the device code, the hash of the secret, your system handle (three number codes), your custom nickname (if any), the dates it was created and last used (day only) and its status. It does not keep your name, email, phone number, age, location, phone model or full IP address.
If you reinstall the app, an iPhone usually keeps the same identity; on Android you get a new one.
Moving to a new phone: on the old phone, Settings → “Leaderboard & friends data” → “Move to a new phone” creates a transfer code (12 characters, valid for 30 days, single use). After you enter or scan it on the new phone, your handle, nickname, scores and friends move to the new phone and the old phone can no longer use them. If the new phone already had its own identity, that identity is deleted (also permanently after 30 days). The server keeps only a hash of the transfer code and its expiry, deleted 30 days after it is used, cancelled or expired.

Handles and nicknames

Every identity has a system-made handle such as “Calm Viola 482” (adjective + instrument + number). The server stores only the codes; the app shows the handle in your language. You can change it 3 times a day.
You can also choose a nickname (optional, up to 12 characters). Your nickname is visible only to you and your friends. Public leaderboards, battle invitations and everywhere else show only your handle.
Nicknames are filtered: offensive words, links, email addresses, usernames, phone numbers and other long strings of digits, and names that impersonate us or staff are not allowed. Please don't use your real name, school or contact details.

Friends

Friends can only be added with a friend code: 8 characters, single use, expires after 24 hours; it can be shared as a QR code or link. There is no search, no suggestions and no matching with strangers.
The server keeps the friend pairing of two devices, blocks, and a hash and expiry of each friend code (deleted 7 days after it is used or expires). You can remove or block a friend at any time.

Friend battles

Only friends you invite can join. Everyone takes turns playing the same song on their own phone, and each score is calculated on that phone; microphone audio never leaves your phone.
In a room you can only send preset phrases and emoji (stored as codes). There is no free-text chat, voice or images.
The server temporarily keeps the room code, song code and title, mode, members (handles), each round's score and hit counts, and phrase codes. A room is deleted 3 hours after its last activity. Battle scores never go on leaderboards and are not saved as practice records.

Leaderboards

Scores are uploaded only after you tap “Join” and while “Upload my scores” is on, and only for built-in songs at 100% speed. Imported songs, songs read from photos and battle scores are never uploaded.
What is uploaded: the score, each note's timing grade and how many milliseconds early or late it was, pitch grade and cents, instrument, playing time, how often pitch readings were taken, app version and platform. The server uses these to recalculate the score and check that it is plausible (to prevent cheating); scores that look implausible are reviewed by a person first. No recordings are uploaded.
Public leaderboards show only handles, scores and perfect counts; the friends leaderboard also shows your friends' nicknames.
Your best score on each leaderboard is kept; other scores are deleted after 90 days (except scores under review).

Reports and moderation

You can report a nickname (inappropriate, or containing personal information) or a suspicious score. The person you report is not told who reported them.
When the same nickname or score is reported by 3 different devices (2 for a top-10 score), it is hidden automatically and we review it within 24 hours. While your nickname is hidden, others see your handle; you can appeal once in the app and we reply within 7 days. Automatic hiding counts only reports from at least 2 different networks within 7 days. Reports from very new devices (created today or yesterday) count as half.
Actions we may take: restore, change a nickname back to the handle, hide a score, or block the device (if needed, also block a hashed network address for 24 hours). Every moderation action is logged. Reports and appeals are deleted 1 year after they are closed.

Security and activity logs

To prevent abuse we limit requests using a hash of your network address combined with a value that changes every day. Your IP address is not stored, and the hash cannot be traced back the next day. The same kind of hash is also stored with each score you upload and each report you send, and is deleted together with it.
Activity logs (such as uploads, reports, adding friends and deletions) contain only masked data: an 8-character code derived from the device code, the first character of a nickname, the first part of the IP address (IPv4: first three numbers; IPv6: first 48 bits), the app version and platform. They are kept for 1 year; battle logs for 90 days; the record of a “delete my data” request for 3 years, to show that we deleted your data as you asked.
Everything is sent encrypted (HTTPS). This data is used only to run these features and keep them safe. It is never shared or sold and never used for ads.

Keeping and deleting data

Delete in the app: Settings → “Leaderboard & friends data” → “Delete my scores and nickname”, or on any song's “Leaderboard” → “Mine”. This works even if the features have been switched off. Your handle, nickname, scores and friend list disappear from all leaderboards and friend lists at once and are permanently deleted from the server after 30 days; backups are kept for at most 14 more days, so everything is gone within 44 days.
If you no longer have the phone or the app, see Delete your data.
Identities not used for 18 months are deleted automatically (also permanently after 30 days).
Kept only on your phone: the identity secret, whether you joined the leaderboards and the upload switch, scores not yet uploaded (at most 5) and your own activity log. Uninstalling the app deletes them; the iPhone Keychain may keep the identity secret until you delete your data in the app.

Children

Public places (leaderboards) contain no text typed by users, only system handles and scores; nicknames are shown only to friends; battles involve only invited friends and preset phrases. We don't ask for or keep anyone's age, name or contact details. Parents or teachers who think a child's nickname or data needs attention can email info@autoit.studio and we will help delete it. Minors should get a parent’s or teacher’s (guardian’s) consent before using leaderboards, friends and battles.

Terms of use

Please follow the terms of use when you use these features.