Privacy Policy

Version 1 · updated 10/18/2026

Privacy is the most important promise we make to families. This policy explains what we collect, why, and how we protect it.

What we collect

Parent/Guardian: name, email address, sign-in details (passwords are stored only in protected, scrambled form), consent choices and help messages.
Children: a first name or nickname, age, chosen stage, stars, completed songs and practice progress. We do not ask children for email addresses, photos, location or contact details.
Family Song Maker: songs you choose to add (titles, notes, and any sheet files you upload).
Security records: scrambled (hashed) network addresses to stop abuse and repeated failed sign-ins.

Lessons need the microphone to hear which piano key is played. Your browser always asks your permission first.
Sound is analysed instantly on your device, inside the browser's memory, and turned into note names. The sound itself is never recorded, saved or sent to us or anyone else.
The microphone is used only while a lesson, check or game screen is open, and stops when you leave it. Your device shows its normal microphone indicator while it is on.
Risk: the microphone can pick up nearby voices or sounds while a lesson is open. These are analysed on the device for pitch only and immediately discarded.
Risk: other apps, browser extensions or a compromised device could misuse microphone access. Use a trusted, up-to-date browser, avoid unknown extensions, and supervise children.
You can switch microphone access off at any time in your browser or device settings; lessons will then not hear notes.

Tutor Joe, our help assistant, first uses ready-made answers. Only if none fits, and only if you agreed, your typed question is sent to a third-party AI service provider to draft a reply.
Reading notes from uploaded sheet music also uses that provider, only with your consent. Recordings are turned into notes on your device and are not uploaded.
Do not type children's personal details into Tutor Joe. We instruct the provider-based assistant not to keep or reveal personal data.

To run accounts, lessons, progress and support; to keep the service secure; and to meet legal duties. We do not sell personal information and we do not show adverts.

Only with service providers who host, secure, email or (with consent) power AI features for us, under confidentiality and data-protection terms. We may disclose information if the law requires it.

Encrypted connections, access controls, row-level database rules, hashed codes, two-step sign-in and two-person approval for sensitive admin actions.
Staff access is limited to what each role needs, and admin actions are recorded in an audit trail.

While your account is open. When you delete your account, your and your children's information and uploads are permanently removed, except limited security and audit records kept to prevent abuse.

You can ask to see, correct, download or delete your information, and you can withdraw consent at any time, through Grownies → Help.

Children's accounts can only be created by a Parent/Guardian, who gives consent on their behalf.