Privacy Policy

Information We Collect

We collect only the information needed to provide and improve our educational services. This information is used solely to operate Jazz Piano Master. We do not sell your personal data to third parties. Guest mode uses an anonymous account identifier so progress and service limits work, but it does not require your name or email address.

We may collect the following types of information:

• Account information: Email address and display name, obtained when you sign in with Apple or Google. We never receive your Apple or Google password.
• Profile information you provide: Skill level, instruments, bio, and social links that you choose to add to your profile.
• Practice data: Lesson progress, study session history, achievements, certificates, favorites, and course completion status.
• AI coaching interactions: Messages you send to the AI coach feature and your daily AI usage counts.
• Audio submitted for transcription: If you use a transcription feature, the audio you submit is transmitted to our AI provider for processing and is not stored on our servers afterward.
• Purchase information: Subscription status, product IDs, purchase dates, and the transaction platform (iOS or Android), processed through RevenueCat.
• Contact-form messages: If you contact us through the app, the message you send together with basic device metadata (app version, platform, and operating system version).
• Diagnostics: Device model, operating system version, app version, and error traces, collected through our crash and error monitoring (Sentry) to keep the app stable.
• Product-usage data: In-app events such as screens viewed, lessons and courses opened, feature and paywall interactions, AI-coach usage counts, and subscription events, collected through our first-party product analytics (PostHog) to understand how the app is used and improve it. These are associated with your user ID, or with an anonymous device-generated ID in guest mode. No advertising identifier is collected by our product analytics.

How We Use Your Information

Your information is used to:

• Provide and personalize your learning experience
• Track your progress across lessons, courses, and achievements
• Deliver AI coaching responses through our third-party AI providers
• Process and manage your subscription and purchases
• Monitor and fix app crashes and errors (via Sentry)
• Understand how features are used, and measure and improve the app (first-party product analytics via PostHog)
• Enforce usage limits (e.g., 30 AI messages per day)
• Send you notifications (if enabled)
• Improve our educational content and app features
• Comply with legal obligations

AI Features and Data Processing

Jazz Piano Master uses artificial intelligence features powered by the following third-party AI providers. We name each provider so you know exactly where your AI coaching content is sent, and we obtain your explicit consent in the app before any message is transmitted.

• OpenAI - AI coaching chat and audio transcription (Whisper). Privacy Policy
• Anthropic (Claude) - AI coaching responses. Privacy Policy
• xAI (Grok) - AI coaching responses. Privacy Policy

When you use the AI coaching feature:

• You are asked for explicit consent before the first message leaves your device. You can decline and continue using the rest of the app.
• The messages you send are transmitted to one of the AI providers listed above for processing.
• Each provider may process your messages according to its own privacy policy and terms of service.
• AI-generated responses are computer-generated and may not always be accurate.
• We do not permanently store your AI chat messages on our servers; only message count and token usage metadata is retained for rate-limiting purposes.
• The AI coach is limited to 30 messages per user per day.
• Audio you submit for transcription is transmitted to OpenAI and is not stored on our servers after processing.

Device Permissions

Jazz Piano Master is designed to be privacy-minimal. The app does not access your device's microphone, camera, precise location, or contacts. On Android, microphone and camera access is blocked at the operating-system level.

• Notifications: If you enable practice reminders, the app uses local notifications. You can turn these off at any time in your device settings.
• No background recording: The app never records audio or video in the background.
• No location tracking: The app does not request or collect GPS or precise location data.

Data Security

We implement industry-standard security measures to protect your personal information:

• Authentication tokens are stored in secure device storage (expo-secure-store), not in plain-text storage
• All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
• Data at rest in our database is encrypted using AES-256 or equivalent
• Our database uses Row-Level Security (RLS) policies to ensure users can only access their own data
• All AI API keys are stored server-side only and are never included in the mobile app bundle

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the app at your own risk.

Data Retention

We retain your personal data for specific periods depending on the type of data and the purpose for which it was collected. When data is no longer needed, it is securely deleted or anonymized.

• Account data (name, email, profile information): Retained for the duration of your active account. Deleted within 30 days of an account deletion request, except where retention is required by law.
• Practice progress and study sessions: Retained for the duration of your active account. Deleted upon account deletion.
• AI chat messages: Not permanently stored on our servers. Message count and token usage metadata is retained for up to 12 months for rate-limiting purposes, then automatically purged.
• Audio transcription data: Audio files are transmitted to OpenAI for processing and are not stored on our servers after transcription is complete.
• Purchase and subscription records: We retain an event and transaction ledger needed to deliver paid access, restore purchases, investigate disputes, prevent fraud, and meet accounting obligations. This ledger does not store your name or email address. When you delete your account, your account profile is deleted, while the minimum pseudonymous user and transaction identifiers in the purchase ledger may be retained for up to seven years where legally or operationally required. Apple, Google, and RevenueCat also retain their authoritative transaction records under their own legal obligations.
• Error and crash reports (Sentry): Device information, user ID, and email sent to Sentry are retained for 90 days, after which they are automatically deleted.
• Product-usage events (PostHog): In-app usage events are retained on a rolling basis for up to 12 months for product-improvement analysis, after which they are aged out.
• Achievements and certificates: Retained for the duration of your active account and deleted when you delete your account.
• Locally stored data: Data stored on your device (via local storage) remains until you uninstall the app or clear app data.

Upon account deletion, we initiate the deletion process within 30 days. Some data may persist in encrypted backups for up to 90 days before being permanently purged.

Your Rights

Regardless of your location, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Opt-out of marketing communications
• Export your data in a portable format
• Withdraw consent at any time

Contact support@jazzpianomaster.com to exercise these rights. We will respond within 30 days.

European Economic Area (EEA) Users — GDPR

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the General Data Protection Regulation (GDPR) and equivalent local laws apply to our processing of your personal data.

Data Controller: CP Global Dynamics LLC, 425 N Doheny Dr, Apt 2, Beverly Hills, CA 90210, USA, contactable at support@jazzpianomaster.com.

EU and UK Representative (Article 27): An EU and UK representative is in the process of being appointed. Until then, and at any time, EU and UK data subjects may contact us directly at support@jazzpianomaster.com regarding the processing of their personal data.

Lawful Bases for Processing (Article 6 GDPR):

• Performance of a Contract (Article 6(1)(b)): Processing your account information, practice progress, and subscription data is necessary to provide the Jazz Piano Master service.
• Legitimate Interests (Article 6(1)(f)): We process device information and error reports through Sentry, and first-party product-usage events through PostHog, to maintain app stability, understand how the app is used, and improve the user experience. This analytics is not used for advertising or cross-app tracking. Our legitimate interest does not override your fundamental rights, and you may object to this processing by contacting us.
• Consent (Article 6(1)(a)): We transmit your AI coaching chat messages to our third-party AI providers (OpenAI, Anthropic, and xAI/Grok) only after you give explicit consent in the app. Creating an app account also signs you up for our weekly practice email, which is stated on the sign-up screen at the moment you create the account; you can withdraw at any time through the unsubscribe link in any message or the toggle in app settings, and we do not add anyone who has not created an account. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Your Additional Rights Under GDPR:

• Right of Access (Article 15): Request a copy of all personal data we hold about you.
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Right to Restriction (Article 18): Request restriction of processing in certain circumstances.
• Right to Data Portability (Article 20): Receive your data in a structured, commonly used, machine-readable format (JSON or CSV).
• Right to Object (Article 21): Object to processing based on legitimate interests.

We will respond to all GDPR rights requests within 30 days. If a request is complex, we may extend this by up to 60 additional days with notice.

Right to Lodge a Complaint: You may lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement. In the United Kingdom, you may complain to the Information Commissioner's Office (ICO).

Age of Consent: Where local law sets a minimum age for consenting to online services that is higher than 13 (up to 16 in parts of the European Union), a parent or guardian must provide consent for users below that local age before they use consent-based features.

International Transfers: Your personal data is processed in the United States. Transfers to our AI providers OpenAI and Anthropic, which are not certified under the EU-U.S. Data Privacy Framework, are carried out under the European Commission's Standard Contractual Clauses. See the International Data Transfers section below for details.

California Residents — CCPA/CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights.

Categories of Personal Information Collected (preceding 12 months), and the purpose of collection:

• Identifiers: Display name, email address, unique user ID, device identifiers, and website browser identifiers. Purpose: to create and secure your account, provide the service, and measure website advertising after consent.
• Internet or Network Activity: App usage data, AI coaching interaction history, diagnostic/error logs, marketing website page visits, and clicks on App Store or Google Play download buttons. Purpose: to operate the app, track your learning progress, maintain stability, and measure advertising after consent.
• Audio Information: Audio you submit for transcription, which is sent to our AI provider for processing and not stored afterward. We do not collect microphone or camera input. Purpose: to provide the transcription feature you request.
• Commercial Information: Subscription and purchase records. Purpose: to manage your subscription and comply with tax and accounting obligations.
• Inferences: Practice progress and skill-level assessments derived from your learning activity. Purpose: to personalize lessons and award achievements.

We collect this information from you directly and from your interactions with the app and marketing website. We disclose it to service providers for the purposes described in the Third-Party Services section below. After you opt in on the marketing website, browser identifiers and website activity are shared with Meta for advertising measurement and optimization, which may constitute “sharing” under California law.

Your Rights Under CCPA/CPRA:

• Right to Know / Access: Request disclosure of the categories and specific pieces of personal information collected, the sources, the purposes, and the third parties with whom we disclose it.
• Right to Delete: Request deletion of your personal information, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Data Portability: Receive the personal information you provided to us in a portable, machine-readable format.
• Right to Opt Out of Sale or Sharing: Use the Cookie Settings link in the marketing website footer and choose Decline, or enable Global Privacy Control (GPC) in a supported browser. We do not sell personal information.
• Right to Non-Discrimination: We will not deny you services, charge different prices, or provide a different quality of service because you exercised any of your rights.

How to Exercise Your Rights: Email support@jazzpianomaster.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days. You may designate an authorized agent with written authorization.

Third-Party Services and Data Sharing

We disclose specific categories of your personal data to the following third-party service providers and sub-processors. We disclose only the minimum data necessary for each service to perform its function, and only for the business purpose stated.

• Supabase, Inc. (Authentication and Database) — Receives: email, display name, profile data, lesson progress, study sessions, achievements, certificates, AI usage counts, purchase records, and contact-form messages. Privacy Policy
• OpenAI (AI Coaching Chat and Transcription) — Receives: AI coaching chat messages and audio submitted for transcription. Privacy Policy
• Anthropic (Claude) (AI Coaching Responses) — Receives: AI coaching chat messages. Privacy Policy
• xAI (Grok) (AI Coaching Responses) — Receives: AI coaching chat messages. Privacy Policy
• RevenueCat, Inc. (Subscription Management and Purchase Validation) — Receives: user ID, email address, display name, subscription status, product IDs, purchase dates, transaction platform. Privacy Policy
• Functional Software, Inc. (Sentry) (Crash and Error Diagnostics) — Receives: user ID, device model, OS version, app version, and error data. Your email address is stripped before diagnostic data is sent. Privacy Policy
• PostHog, Inc. (Product Analytics) — Receives: your user ID (or an anonymous, device-generated ID if you use guest mode), device platform, app version, and in-app product-usage events (such as screens viewed, lessons and courses opened, feature and paywall interactions, AI-coach usage counts, and subscription events). No advertising identifier (IDFA) is collected, and this data is never used for advertising or cross-app tracking. Privacy Policy
• Resend (Email Delivery) — Receives: your email address, the message category, and delivery metadata needed to send requested account, purchase, billing, support, and consented promotional messages. Creating an app account enables the weekly practice email by default, as disclosed on the sign-up screen; one tap in any message unsubscribes you. Privacy Policy
• Apple Inc. (Sign-In and In-App Purchases) — Receives: authentication tokens via Apple Sign-In and payment processing via the App Store. We never receive your payment card details. Privacy Policy
• Google LLC (Sign-In and In-App Purchases) — Receives: authentication tokens via Google Sign-In and payment processing via Google Play. We never receive your payment card details. Privacy Policy
• Meta Platforms, Inc. (Advertising Measurement — jazzpianomaster.com Website Only) — Receives: browser and device identifiers, IP address, pages visited, and website events such as clicks on App Store and Google Play download buttons, collected via a cookie-based pixel on our marketing website. In regions that require prior consent (such as the European Economic Area and the United Kingdom), the pixel runs only after you accept the cookie banner. Elsewhere (including the United States), it runs by default with a clear notice, and you can opt out at any time using the cookie banner (reachable from the “Cookie settings” link in the website footer); your opt-out is stored persistently, and the Global Privacy Control browser signal is always honored as an opt-out. Used to measure the performance of our ads. Privacy Policy
• Meta Platforms, Inc. (Advertising Measurement — Mobile App) — Receives: your device’s advertising identifier and app events such as install, first launch, and subscription purchase. On iOS nothing is collected or sent at all: the app does not ask for tracking permission and never has it, so the SDK stays initialized with advertiser-ID collection and event logging switched off permanently. On Android, where no equivalent system prompt exists, the advertising ID and these app events are collected from first launch and are disclosed in our Google Play Data Safety form. Used only to measure whether our advertising works, never to build a profile of you or to target ads inside the app. Privacy Policy

International Data Transfers

Jazz Piano Master is operated from the United States. If you access the app from the European Economic Area (EEA), United Kingdom, Switzerland, or any other region with data-transfer regulations, your personal data will be transferred to and processed in the United States.

We rely on the following mechanisms to ensure an adequate level of protection for these transfers:

• Standard Contractual Clauses (SCCs): We rely on the European Commission's Standard Contractual Clauses for transfers to our service providers. In particular, our AI providers OpenAI and Anthropic are not certified under the EU-U.S. Data Privacy Framework, so transfers of AI coaching content to them are made under SCCs together with appropriate supplementary measures.
• UK transfers: For users in the United Kingdom, transfers rely on the UK Addendum to the EU SCCs or the UK International Data Transfer Agreement, as applicable.
• Encryption: All data in transit is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256 or equivalent.

You may request a copy of the relevant safeguards by contacting us at support@jazzpianomaster.com.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by applicable law (GDPR Article 33).
• Notify affected users without undue delay if the breach is likely to result in a high risk to your rights and freedoms.
• Provide notification via email and/or in-app notification, including: the nature of the breach, likely consequences, and measures taken to address it.

If you believe your account has been compromised, contact us immediately at support@jazzpianomaster.com.

Automated Decision-Making and Profiling

Jazz Piano Master uses automated systems in the following limited ways:

• AI Usage Rate Limiting: We automatically enforce a daily limit of 30 AI coaching messages per user. This limit is applied uniformly and resets daily at midnight UTC.
• Progress Tracking: The app automatically tracks lesson completion, practice time, and skill progression to personalize your learning and award achievements. This does not produce legal or similarly significant effects.
• AI-Generated Content: Responses from the AI coaching feature are generated automatically by third-party AI models for educational purposes only.

No automated decision-making with legal or similarly significant effects is performed on your data. Contact us at support@jazzpianomaster.com to request human review of any automated processing.

Analytics, Tracking, and Cookies

• Local App Metrics: We track app open counts, install date, and feature interaction counts. This data is stored exclusively on your device and is not transmitted to our servers.
• Error Monitoring (Sentry): When the app encounters errors, diagnostic data is sent to Sentry, including device model, OS version, app version, error traces, and user ID/email. This occurs only in production, not during development.
• Product Analytics (PostHog): To understand how the app is used and to improve the learning experience, we collect first-party product-usage events (such as screens viewed, lessons and courses opened, feature and paywall interactions, and AI-coach usage). These events are associated with your user ID, or with an anonymous, device-generated ID if you use guest mode. This occurs only in production, not during development.
• AI Usage Metrics: We track the number of AI messages sent per day and tokens consumed. This is stored server-side for rate-limiting and cost monitoring.
• Meta Pixel (jazzpianomaster.com Website Only): Our marketing website uses a cookie-based Meta Pixel to measure page visits and clicks on App Store and Google Play download buttons, primarily to measure the performance of our ads, after you accept the cookie banner shown on the site. If you decline the cookie banner, the Pixel does not load. Meta may also use this data for its own advertising purposes (such as ad delivery optimization) as described in Meta's Privacy Policy.
• Meta SDK (Mobile App): The app includes Meta’s advertising-measurement SDK so we can tell which of our ads actually bring people to the app. On iOS it stays dormant permanently. The app does not ask for tracking permission, so no advertising identifier and no app events are ever sent from an iPhone or iPad, and measurement relies only on Apple’s privacy-preserving SKAdNetwork, which reports aggregate, non-identifying install counts. On Android there is no equivalent system prompt, so the advertising ID and those same app events are collected from first launch; you can limit this with “Delete advertising ID” in Android Settings › Privacy › Ads. We never send Meta your name, email, practice history, lesson progress, or anything you type to the AI coach.

Our product analytics (PostHog) is used solely as first-party analytics to operate and improve the app: it does not collect an advertising identifier (IDFA), and it is not used for cross-app tracking, ad targeting, or behavioral profiling across unaffiliated services. The app uses no cookies.

App Tracking Transparency (iOS). Jazz Piano Master does not ask for it. We removed the tracking prompt, and the app does not track you across apps or websites owned by other companies on iOS at all. Ad measurement on iPhone and iPad relies entirely on Apple’s privacy-preserving SKAdNetwork, which tells us only how many installs an advertisement produced, never who you are.

Our marketing website (jazzpianomaster.com) is separate from the app and uses the Meta Pixel described above, with your consent via the cookie banner, primarily to measure ad performance. You can withdraw consent at any time using the Cookie Settings link in the website footer, which reopens the consent banner and lets you decline — this also clears the first-party cookies (_fbp/_fbc) that Meta set on this site. The website also honors an enabled Global Privacy Control (GPC) signal by keeping the Meta Pixel disabled and clearing its first-party cookies. Clearing your browser's cookies for this site alone is not sufficient, since your choice is stored using your browser's local storage, not a cookie. You can also contact support@jazzpianomaster.com.

Do Not Track Signals

The Jazz Piano Master mobile app does not engage in behavioral profiling or targeted advertising, and shows no ads. It does use Meta’s advertising-measurement SDK to attribute installs to the ads we run — on Android from first launch, and never on iOS (see Analytics, Tracking, and Cookies above). Our marketing website's Meta Pixel is used with your consent for the same purpose. Our data collection practices otherwise remain the same regardless of any Do Not Track (DNT) signal. Global Privacy Control (GPC) is handled separately: when enabled, it prevents the marketing website from loading the Meta Pixel.

Children's Privacy

Jazz Piano Master is a general-audience educational app intended for users 13 years of age and older and is not directed to children under 13.

We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information and block the account as quickly as possible.

Where local law sets a higher minimum age for online consent (up to 16 in parts of the European Union), a parent or guardian must provide consent for users below that local age.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the app and on this page. Your continued use of Jazz Piano Master after such changes constitutes acceptance of the updated policy.