Privacy Policy
Last updated: October 16, 2026
TabCam scans guitar tabs, reads them into text, and shares them. It runs as an Android app, an iOS app and a web app at tabcam.nu01.com. TabCam is made and run by Julio Faerman, an individual developer ("I", "me"). This policy says what TabCam does with your information.
In short: without signing in, everything you capture stays on your device. If you sign in with Google, your captures are stored in your own private cloud folder so they're on all your devices, and can be shared with the people you choose. There are no ads, no analytics and no tracking, and your data is never sold.
Using TabCam without signing in
You can scan, add photos, videos, files, text and links, and edit them without an account. All of it is stored only on your device (in the web app, only in the browser tab's memory, until you close it). Nothing you capture is sent to me.
What is collected when you sign in
| Data | Why |
|---|---|
| Your Google account's name, email address and profile photo, and Google's account ID, received from Google when you sign in | To show who is signed in (Profile tab), to give you your own cloud folder, to let people share captures with your email address, and to check whether you have TabCam Premium. Your name and photo are only shown in the app; they are not stored on my servers. |
| Your captures: scanned pages, photos, videos, files, text, links, and their titles, artist names, text tabs and settings | To sync them between your devices and back them up. |
| The email addresses of the people you share a capture with, and their role (can edit or read only) | So those people, and only they, can open the capture when they sign in with that address. No email is sent to them. |
| Your email address, linked to your account ID | To check your TabCam Premium status, and to transcribe your pages if you have it. |
| Transcriptions of your pages (TabCam Premium only) | To fill in the text tab of your captures. |
TabCam does not collect your location, contacts, phone number, device identifiers or browsing activity, and does not use advertising identifiers.
Camera, photos and files
TabCam asks for the camera to scan tabs, and opens your photo library or files only to add the items you pick. It doesn't read anything else from them.
Reading tabs
- On the phone: the Android and iOS apps read tabs on the device with Google's ML Kit text recognition. The images are not sent anywhere for this. Google's ML Kit may send Google anonymous metrics about how its features perform, as described in Google's ML Kit terms.
- Head gestures: while you record yourself playing along (Cam), TabCam can turn the tab when you nod. For this, it finds your face in the camera's picture on your device: in the Android and iOS apps with Google's ML Kit face detection, and on the web with Google's MediaPipe face landmarker, running in your browser. On the web, Cam downloads MediaPipe's code from jsDelivr and its face model from Google when it opens; the camera's picture is not sent with those downloads or anywhere else. Only the angle of your head is used. Nothing about your face is saved, sent anywhere or used to identify you. You can switch head gestures off in Cam.
- TabCam Premium: pages that sync to your cloud folder are also transcribed by TabCam's OCR service, running on Amazon Web Services (AWS Lambda). The page is read there and the text is saved next to it in your folder.
Where your data is stored, and who processes it
- Amazon Web Services hosts TabCam's cloud: your captures and transcriptions in a private Amazon S3 bucket, the sharing grants and the Premium account record in Amazon DynamoDB, sign-in credentials through Amazon Cognito, and the sharing and OCR services on AWS Lambda. Everything is in the AWS US East (N. Virginia) region, in the United States, encrypted at rest and sent only over HTTPS.
- Google provides sign-in. Google's privacy policy applies to your Google account: policies.google.com/privacy.
- Links you add, YouTube videos included, open outside TabCam: in a new browser tab, or on a phone in your browser or the app for them (such as YouTube). TabCam loads nothing from them; the site you open, and its own privacy policy, take it from there.
- rbacr, my access-control service at rbacr.nu01.com, is asked whether your verified email address has TabCam Premium. You can also redeem a Premium voucher on its page.
- Substack and Stripe: TabCam Premium is a subscription on Substack, paid through Stripe. You subscribe on Substack's site, under its own privacy policy, and TabCam never sees your payment details; only your subscriber email address and the subscription's status reach rbacr, to grant Premium.
If you're outside the United States, your data is transferred to and stored in the United States.
On your device
The phone apps keep your captures in the app's own storage. The web app keeps captures only in memory and remembers your sign-in (your name, email, photo address and Google's sign-in token) in the browser's local storage until you sign out. Signing out keeps your captures on the device; uninstalling the app removes them from it.
Sharing
- Share with people gives the people you add, by email address, access to that capture, to edit or read only. They see your email address as its owner. You can remove them at any time; they can also leave it.
- Links to a capture name it by an ID only. A link gives no access by itself: only the people it's shared with can open it.
- Sharing as a PDF, text or files goes through your device's share sheet, to the app and people you choose. What happens after that is up to them.
How long data is kept
- Your captures stay in your cloud folder until you delete them, or delete your account. Deleted or replaced files are kept for 30 more days, so a mistake can be undone, and then removed.
- Transcriptions are deleted with their pages.
- Sharing grants last until the owner removes them or the person leaves the share.
- The sharing and Premium records are backed up for up to 35 days.
- The cloud services' logs, used to fix problems, are deleted after 30 days. They record account IDs and what was done, not the content of your captures, and the OCR service's logs leave out email addresses.
Deleting your data
- Deleting a capture in the app deletes it from your cloud folder and your other devices. A small record that it was deleted (its ID and dates, no content) stays, so your other devices delete it too.
- Delete account, in the app's Profile tab, deletes your TabCam account and the data stored for it in the cloud: your captures, their transcriptions, your sharing grants and your Premium account record. Copies in the 30-day file history and 35-day backups expire on that schedule.
- You can also ask me to delete your data, or for a copy of it, by email (below).
- To remove TabCam's access to your Google account, visit myaccount.google.com/connections.
No ads, analytics or tracking
TabCam contains no advertising, no analytics or crash-reporting services, and no trackers. Your data is never sold or used for advertising, and is shared with nobody except the service providers above, the people you share with, or when required by law.
Security
All connections use HTTPS. Each signed-in user gets temporary credentials that reach only their own cloud folder, and a shared capture is opened with credentials for that capture alone. Stored data is encrypted at rest. No system is perfectly secure, but TabCam is built to keep your data to yourself and the people you choose.
Children
TabCam is not directed to children under 13, and I don't knowingly collect their personal information. If you believe a child has signed in, contact me and I'll delete the data.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, and to object to its use. Most of it you can see, change and delete in the app; for anything else, contact me.
Changes
If this policy changes, the new version will be posted on this page with a new date at the top.
Contact
Julio Faerman, the developer of TabCam: [CONTACT EMAIL TO BE ADDED]