Music Cue Manager

Privacy Policy

Effective date: 14 May 2026

Plain English summary

Music Cue Manager runs on your Mac and keeps your sessions, projects, and templates on your Mac. There are no accounts and no sign-up. We do not track you, do not run analytics, and do not share your data with advertisers or data brokers. When you buy credits, Apple handles the payment and we never see your card or Apple ID. Our backend stores only a random per-install ID and your credit ledger, so we can grant the credits you paid for and honour refunds.

About the app

Music Cue Manager is a desktop application for macOS 13 and later, distributed via the Mac App Store. It generates broadcast music cue sheets from Pro Tools sessions. The app is free to download. New users receive three free credits on first launch. Additional credits can be purchased as non-consumable credit packs via in-app purchase: 1 credit for NZD $40.00, 3 credits for NZD $119.99, or 10 credits for NZD $349.99.

There are no user accounts. No sign-up. We do not collect your email address.

What stays on your Mac

The following data is handled locally on your Mac and is never sent anywhere:

Your Pro Tools sessions, AAF files, and any imported audio metadata.
Your project files and cue sheet outputs.
Your custom Excel templates.
Application preferences (appearance, settings, recently-used folders).
A local Core Data database of previously-matched music tracks.
Your Excel files when exporting. The app communicates with Microsoft Excel locally via AppleScript.

What is sent to our backend

The app sends a small amount of data to our backend, hosted on Supabase:

A per-install random UUID, called appAccountToken, generated by the app on first launch and stored locally. It acts as a pseudonymous account ID. It is not linked to your real identity, Apple ID, email, name, or device identifiers.
A credit ledger. Each purchase adds a row. Each cue sheet export consumes a row. The ledger stores the credit amount, the action (purchase / consume / refund), a timestamp, and for purchases the Apple-signed transaction ID.
For purchase verification, the app sends Apple's signed StoreKit 2 JWS receipt to the backend. The backend verifies it against Apple's certificate chain and grants credits accordingly.

Our backend also briefly processes your IP address to rate-limit abuse. The IP is used only for this check and is not retained alongside your account records.

Music library lookups

To identify tracks, the app sends track names and catalogue codes to public music library search APIs: APM Music, Audio Network, BMG Production Music, Extreme Music, Beatbox Music, Megatrax (Slipstream), Universal Production Music, Warner Chappell, and Melodie.

These requests contain only the track name or catalogue code being searched. No user identity, no appAccountToken, no purchase information. These are the same public search APIs that the libraries' own websites use.

Payment processing

All in-app purchases are processed by Apple via StoreKit 2. The app and its backend never see your payment method, credit card, Apple ID, billing address, or any payment credentials.

Apple sends our backend a cryptographically signed receipt confirming the purchase. The backend grants credits based on that receipt.

What we do not do

No tracking across other apps or websites.
No analytics, telemetry, or usage statistics.
No advertising or advertising IDs.
No third-party SDKs for analytics or marketing.
No social login, email/password login, or any login.
No data sold or shared with advertisers or data brokers.
No reading of system-wide state, contacts, photos, location, calendar, or any sensitive APIs.

Data retention

Local data on your Mac persists until you delete the app or wipe its data.

Credit ledger rows on the backend are retained indefinitely. This is required to honour refunds: if Apple later refunds a purchase, the backend must be able to find the corresponding ledger row to claw the credits back.

The appAccountToken is retained as long as ledger rows reference it. Because the token is random and unlinked to identity, retaining it does not identify you.

Your rights and deletion

You can delete the app and its local data at any time using the standard macOS uninstall process.

Users in the EU, UK, or California (and anyone exercising rights under GDPR or CCPA) who want their backend ledger rows deleted can email support@musiccuemanager.com. Because the ledger holds pseudonymous records with no personal identifiers, you will need to provide your appAccountToken (visible in the app's Settings) so we can find the rows to delete.

Sub-processors

Supabase Inc. hosts our backend database (credit ledger, appAccountToken mapping) and Edge Functions. Servers are located in Asia Pacific (Sydney, Australia).
Apple Inc. processes all in-app purchases and provides receipt verification. Apple's privacy policy applies to payment data.
Music library APIs (listed above) receive only track names and catalogue codes for search.

Children's data

Music Cue Manager is intended for professional users and is not directed at children under 13. We do not knowingly collect data from children.

Contact

Questions about this policy? Email support@musiccuemanager.com.

Changes to this policy

If we change this policy, we will update the effective date at the top of this page. Material changes will be highlighted in the app's release notes.

Music Cue Manager runs on your Mac. No accounts, no tracking, and no data sold or shared.