Music Education Assistant Privacy Policy
Child-friendly summary
- We use your name, class and learning results to provide lessons.
- We do not collect location, camera, microphone or contacts data.
- We do not show in-app ads or sell your information. If you expressly allow it, we only measure which advertising contributed to a membership sale; student activity is not used for advertising profiles.
- You can delete your account in Settings. If you are under 13, ask a parent, guardian or authorised school adult for help.
Information we process
We may process account name, email, user ID and role; class membership, assignments, answers, activity results, progress, attendance and teacher notes; virtual stars, characters and inventory preferences; announcements and messages; notification/installation identifiers and device, app and security metadata. If “Remember me” is selected, credentials remain in the device’s secure store. We do not access biometric templates.
Why we use it
We use data to provide and secure accounts and classes, display educational progress, synchronise preferences, send necessary notifications and meet legal requests.
Advertising measurement and cookie choice
Google Ads conversion measurement is enabled on our public website only after an express choice to allow it. It helps us understand whether an advertisement contributed to opening Stripe Checkout or to a verified membership purchase. Purchase measurement may include a random Stripe Checkout transaction identifier, the actual transaction value and its ISO currency; it does not include a name, email, class code, learning activity, answer or progress result.
Personalised advertising and remarketing signals remain disabled. The Google tag is not loaded before permission is given. The preference is stored locally on the device and can be changed using Cookie choices at the bottom-left of the page. Withdrawing permission removes known first-party Google Ads measurement cookies.
Children
An account for a child under 13 must be created or expressly authorised by a parent, guardian or authorised adult at the child’s school. An adult-managed email should be used. Contact us if an account may have been created without the required authorisation.
Providers
Google Firebase/Google Cloud provides authentication, database, Functions and notification infrastructure; Apple delivers iOS notifications. If allowed, Google Ads provides only the advertising conversion measurement described above. Stripe processes web subscription payments, billing, tax calculation and fraud prevention. Full card details are submitted directly to Stripe and are not sent to our application servers. If separately and lawfully enabled, the optional weekly AI summary may send OpenAI API pseudonymous aggregated skill statistics without name, email, Firebase UID or class code. It is disabled by default.
We do not sell personal data or use personalised advertising, student profiling or cross-company tracking. Learning data is not shared for advertising beyond the consented conversion measurement described above. Providers may process data outside the UK subject to appropriate contractual and technical safeguards.
Retention, deletion and rights
Data is retained while needed to operate the account. Use Settings → Delete account, or email us if the account cannot be accessed. Where institutional education records must remain, a former teacher’s direct identifiers are removed or anonymised. Limited security, legal and backup records are removed after the relevant retention period.
Under applicable UK data protection law, you may request access, correction, deletion, restriction, objection or portability, and withdraw consent where applicable. You may complain to the UK Information Commissioner’s Office.
Security and changes
We use encrypted transport, Firebase Authentication, authorisation rules, server-side operations and secure device credential storage. We update this date and provide appropriate notice or renewed authorisation after material policy changes.