Privacy Policy

Information We Collect

We collect information you provide directly to us, including your name, email address, practice progress data, and AI chat interactions. This information is used solely to provide and improve our educational services. We do not sell your personal data to third parties.

We may collect the following types of information:

Account information: Name, email address, username, avatar, bio, location, skill level, and social links
Practice data: Lesson progress, study session duration, favorites, personal notes, and course completion status
AI coaching interactions: Messages you send to the AI coach feature and daily usage counts
Audio data: Audio recordings you submit for transcription analysis (transmitted to AI providers, not stored on our servers)
Purchase information: Subscription status, product IDs, purchase dates, and transaction platform (iOS/Android)
Device information: Device model, operating system version, app version (collected via error monitoring)
Camera and microphone data: Only when you explicitly grant permission for practice features

How We Use Your Information

Your information is used to:

Provide and personalize your learning experience
Track your progress across lessons, courses, and achievements
Deliver AI coaching responses through our third-party AI providers
Process and manage your subscription and purchases
Monitor and fix app crashes and errors (via Sentry)
Enforce usage limits (e.g., 30 AI messages per day)
Send you notifications (if enabled)
Improve our educational content and app features
Comply with legal obligations

AI Features and Data Processing

Jazz Piano Master uses artificial intelligence features powered by the following third-party AI providers:

OpenAI (GPT-4o) - AI coaching chat and audio transcription via Whisper
Anthropic (Claude) - AI coaching chat
xAI (Grok) - AI coaching chat
Google (Gemini) - AI coaching chat

When you use the AI coaching feature:

Messages you send are transmitted to these third-party providers for processing
These providers may process your messages according to their own privacy policies and terms of service
AI-generated responses are computer-generated and may not always be accurate
We do not permanently store your AI chat messages on our servers; only message count and token usage metadata is retained for rate-limiting purposes
Audio files submitted for transcription are transmitted to OpenAI and are not stored on our servers after processing

Important: Do not share sensitive personal information, financial details, passwords, or confidential data with the AI coaching feature. AI interactions are processed by third-party services subject to their own privacy policies.

Camera and Microphone Usage

Jazz Piano Master may request access to your device's camera and microphone for practice-related features such as recording your playing sessions, video feedback, and performance analysis. This access is:

Only activated when you explicitly grant permission
Used solely for practice and educational features within the app
Not used for surveillance or background recording
Revocable at any time through your device settings

Data Security

We implement industry-standard security measures to protect your personal information:

Authentication tokens are stored in secure device storage (expo-secure-store), not in plain-text storage
All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
Data at rest in our database is encrypted using AES-256 or equivalent
Our database uses Row-Level Security (RLS) policies to ensure users can only access their own data
All AI API keys are stored server-side only and are never included in the mobile app bundle

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the app at your own risk.

Data Retention

We retain your personal data for specific periods depending on the type of data and the purpose for which it was collected. When data is no longer needed, it is securely deleted or anonymized.

Account data (name, email, profile information): Retained for the duration of your active account. Deleted within 30 days of an account deletion request, except where retention is required by law.
Practice progress and study sessions: Retained for the duration of your active account. Deleted upon account deletion.
AI chat messages: Not permanently stored on our servers. Message count and token usage metadata is retained for up to 12 months for rate-limiting purposes, then automatically purged.
Audio transcription data: Audio files are transmitted to OpenAI for processing and are not stored on our servers after transcription is complete.
Purchase and subscription records: Retained for 7 years after the transaction date to comply with tax and financial record-keeping requirements.
Error and crash reports (Sentry): Device information, user ID, and email sent to Sentry are retained for 90 days, after which they are automatically deleted.
Achievements and certificates: Retained for the duration of your active account. Certificates with shareable credential IDs are retained for 12 months after account deletion to prevent broken shared links, then deleted.
Locally stored data: Data stored on your device (via local storage) remains until you uninstall the app or clear app data.

Upon account deletion, we initiate the deletion process within 30 days. Some data may persist in encrypted backups for up to 90 days before being permanently purged.

Your Rights

Regardless of your location, you have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Opt-out of marketing communications
Export your data in a portable format
Withdraw consent at any time

Contact support@jazzpianomaster.com to exercise these rights. We will respond within 30 days.

European Economic Area (EEA) Users — GDPR

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the General Data Protection Regulation (GDPR) and equivalent local laws apply to our processing of your personal data.

Data Controller: Vladan Mijatovic (individual developer), contactable at support@jazzpianomaster.com.

Lawful Bases for Processing (Article 6 GDPR):

Performance of a Contract (Article 6(1)(b)): Processing your account information, practice progress, and subscription data is necessary to provide the Jazz Piano Master service.
Legitimate Interests (Article 6(1)(f)): We process device information and error reports through Sentry to maintain app stability and improve the user experience. Our legitimate interest does not override your fundamental rights.
Consent (Article 6(1)(a)): We process camera/microphone data and AI coaching chat messages only with your explicit consent. You may withdraw consent at any time by disabling permissions or ceasing to use the AI feature. Withdrawal does not affect the lawfulness of prior processing.

Your Additional Rights Under GDPR:

Right of Access (Article 15): Request a copy of all personal data we hold about you.
Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
Right to Restriction (Article 18): Request restriction of processing in certain circumstances.
Right to Data Portability (Article 20): Receive your data in a structured, commonly used, machine-readable format (JSON or CSV).
Right to Object (Article 21): Object to processing based on legitimate interests.

We will respond to all GDPR rights requests within 30 days. If a request is complex, we may extend this by up to 60 additional days with notice.

Right to Lodge a Complaint: You may lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

California Residents — CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights.

Categories of Personal Information Collected (preceding 12 months):

Identifiers: Name, email address, unique user ID, device identifiers.
Internet or Network Activity: App usage data, AI coaching interaction history, error logs, device information.
Audio or Visual Information: Audio recordings submitted for transcription, camera/microphone data when you enable practice features.
Commercial Information: Subscription purchase records and transaction history.
Inferences: Practice progress tracking and skill-level assessments derived from your learning activity.

We do NOT sell your personal information. We do NOT share your personal information for cross-context behavioral advertising. Jazz Piano Master has never sold personal information and has no plans to do so.

Your Rights Under CCPA/CPRA:

Right to Know: Request disclosure of the categories and specific pieces of personal information collected, sources, purposes, and third parties with whom we share it.
Right to Delete: Request deletion of your personal information, subject to legal exceptions.
Right to Correct: Request correction of inaccurate personal information.
Right to Non-Discrimination: We will not deny you services, charge different prices, or provide different quality for exercising your rights.

How to Exercise Your Rights: Email support@jazzpianomaster.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days. You may designate an authorized agent with written authorization.

Third-Party Services and Data Sharing

We share specific categories of your personal data with the following third-party service providers. We share only the minimum data necessary for each service to perform its function.

Supabase, Inc. (Database and Authentication) — Receives: email, name, profile data, lesson progress, study sessions, achievements, certificates, AI usage counts, purchase records. Privacy Policy
OpenAI, L.L.C. (AI Chat and Transcription) — Receives: AI coaching chat messages and audio files for transcription. Privacy Policy
Anthropic, PBC (AI Chat) — Receives: AI coaching chat messages when Anthropic is selected. Privacy Policy
xAI Corp. (Grok) (AI Chat) — Receives: AI coaching chat messages when Grok is selected. Privacy Policy
Google LLC (Gemini) (AI Chat) — Receives: AI coaching chat messages when Gemini is selected. Privacy Policy
Functional Software, Inc. (Sentry) (Error Monitoring) — Receives: user ID, email, device model, OS version, app version, crash/error data. Privacy Policy
RevenueCat, Inc. (Payment Processing) — Receives: user ID, subscription status, product IDs, purchase dates, transaction platform. Privacy Policy
Apple Inc. (Authentication and Payments) — Receives: authentication tokens via Apple Sign-In, payment information via App Store. We never receive your payment card details. Privacy Policy
Google LLC (Authentication and Payments) — Receives: authentication tokens via Google Sign-In, payment information via Google Play. We never receive your payment card details. Privacy Policy

We require all third-party providers to process your data in accordance with applicable data protection laws. We do not sell your data to any of these providers.

International Data Transfers

Jazz Piano Master is operated from the United States. If you access the app from the European Economic Area (EEA), United Kingdom, Switzerland, or any other region with data transfer regulations, your personal data will be transferred to and processed in the United States.

We rely on the following mechanisms to ensure adequate protection:

Standard Contractual Clauses (SCCs): Our primary service providers incorporate EU Standard Contractual Clauses into their data processing agreements.
EU-U.S. Data Privacy Framework: Where applicable, our providers have certified compliance with the EU-U.S. Data Privacy Framework.
Encryption: All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256 or equivalent.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by applicable law (GDPR Article 33).
Notify affected users without undue delay if the breach is likely to result in a high risk to your rights and freedoms.
Provide notification via email and/or in-app notification, including: the nature of the breach, likely consequences, and measures taken to address it.

If you believe your account has been compromised, contact us immediately at support@jazzpianomaster.com.

Automated Decision-Making and Profiling

Jazz Piano Master uses automated systems in the following limited ways:

AI Usage Rate Limiting: We automatically enforce a daily limit of 30 AI coaching messages per user. This limit is applied uniformly and resets daily at midnight UTC.
Progress Tracking: The app automatically tracks lesson completion, practice time, and skill progression to personalize your learning and award achievements. This does not produce legal or similarly significant effects.
AI-Generated Content: Responses from the AI coaching feature are generated automatically by third-party AI models for educational purposes only.

No automated decision-making with legal or similarly significant effects is performed on your data. Contact us at support@jazzpianomaster.com to request human review of any automated processing.

Analytics, Tracking, and Cookies

Local App Metrics: We track app open counts, install date, and feature interaction counts. This data is stored exclusively on your device and is not transmitted to our servers.
Error Monitoring (Sentry): When the app encounters errors, diagnostic data is sent to Sentry, including device model, OS version, app version, error traces, and user ID/email. This occurs only in production, not during development.
AI Usage Metrics: We track the number of AI messages sent per day and tokens consumed. This is stored server-side for rate-limiting and cost monitoring.

Jazz Piano Master does not use cookies, advertising trackers, or third-party analytics SDKs for behavioral tracking or advertising. We do not participate in ad networks or cross-app tracking frameworks.

Do Not Track Signals

Jazz Piano Master does not track users across third-party websites or services. We do not engage in cross-site tracking, targeted advertising, or behavioral profiling across unaffiliated services. Our data collection practices remain the same regardless of any Do Not Track (DNT) signal.

Children's Privacy

Our service is intended for users 13 years and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete such information.

If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us at support@jazzpianomaster.com so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the app and on this page. Your continued use of Jazz Piano Master after such changes constitutes acceptance of the updated policy.