Privacy policy

Your microphone

The practice and mic-test screens analyse audio from your microphone to detect the pitch you play. This happens entirely in your browser. Audio is never recorded, uploaded, or sent anywhere. Nothing about what you play or sing leaves your device.

Account data

When you create an account we store:

• your email address and a hashed password, or
• if you use “Continue with Google”: your email address and Google account identifier (not your Google password).

This is used to sign you in and to send account emails (confirmation, password reset).

Practice data

When you practise on the guided path (while signed in) we store your progress: your current level, unlocked levels, how many sessions you completed, and the result of each exercise (which scale degree, how many attempts it took). We also keep a usage log of derived events — for example the note name the app detected, how long you took to answer, hints shown, input loudness, and a coarse device label such as “iOS · Safari”. We use it to understand where learners get stuck and to improve the exercises.

We never record or store audio. Only these derived values are saved, and they are tied to your account. Free play without an account stores nothing. All of it is deleted with your account.

Analytics

Traffic stats (page views, referrers, country, device type) are collected via Vercel Web Analytics. These are aggregate and cookieless — no identifier is stored on your device.

Google Analytics runs only if you accept it in the cookie banner. It sets cookies and helps us understand feature usage. You can decline; the app works the same.

Cookies

• Essential: a session cookie that keeps you logged in, and small local values remembering your theme, language and cookie choice. These cannot be turned off without breaking sign-in.
• Analytics: set by Google Analytics only after you accept.

Who processes this data

• Supabase — authentication and database (hosted in the US)
• Vercel — hosting and cookieless traffic analytics
• Resend — delivery of account emails
• Google — sign-in (if you choose it) and Google Analytics (if you accept)
• Cloudflare — DNS for the domain

Deleting your data

Go to Account → “Delete account”. This permanently removes your account and email from our database. It cannot be undone. You can also email learnchopin@gmail.com and we will delete it for you.

If you are in the EU/UK you also have the right to access, correct, or export your data, and to object to processing — email us for any of these.

Changes

If this policy changes materially we will update the date above and, for account holders, note it on next sign-in.