Privacy Policy
Last Updated: September 2026
Introduction
This Privacy Policy describes how Piano Tree ('we', 'our', or 'us') collects, uses, and protects your personal information when you use our mobile application and web services. We are committed to protecting your privacy and being transparent about our data practices. This policy applies to all users of Piano Tree, whether you access our services through our iOS app or web platform.
Information We Collect
We collect the following types of information:
Account Data
When you create an account, we collect:
- Email address (required for account creation)
- Password (stored in hashed form, never in plain text)
- Basic profile information you choose to provide (such as display name)
Usage Data
To improve your experience and our services, we collect:
- Pieces you practice and your progress on each piece
- Practice statistics and performance scores
- App settings and preferences
- Features you use and how you interact with the app
Device and Log Data
For security and debugging purposes, our servers automatically collect:
- IP address
- Device type and operating system
- Browser type (for web users)
- Standard server logs and error reports
Audio Recordings
Piano Tree does not record, store, or process any audio recordings. We do not collect audio data from your practice sessions. The app only processes MIDI input or microphone input for real-time note detection during practice, but this data is not recorded or stored.
User Uploaded Content
Premium users may upload their own sheet music files, including PDF, image, and MusicXML files, for practice and score-processing features (such as converting uploaded PDFs and images into playable notation). These files are private and only accessible to the account that uploaded them. We process these files to provide the sheet music display, playback, and processing functionality you request. As described in the 'How We Share Your Information' section below, we may use trusted service providers to help process uploaded files on our behalf; these providers receive your content only as necessary to provide the requested functionality. We do not sell your uploaded content or use it for advertising or marketing purposes.
Cookies and Authentication
We use authentication cookies provided by Supabase to maintain your login session. These cookies are essential for the app to function and are not used for tracking or advertising purposes.
Location Data
When you use Piano Tree, we derive and store approximate location information from your IP address using a geolocation service. This includes:
- Country, region, and city
- Timezone and UTC offset
- Local currency and language preferences
- Continent and whether your location is within the European Union
This data is used to provide localized experiences (such as displaying the correct currency), to comply with regional regulations (such as GDPR for EU users), and to improve our services. We do not use this data for precise tracking or advertising purposes.
How We Process Your Data
We use Supabase as our backend service provider for:
- User authentication and account management
- Database storage of your account and usage data
Supabase processes your data on our behalf in accordance with their privacy policy and our instructions. Your data is stored securely and is not used by Supabase for their own purposes beyond providing services to us.
Payment Information
Piano Tree uses Stripe Checkout and RevenueCat for subscription payments. All payment processing, including credit card information, is handled entirely by Stripe and RevenueCat on separate, secure platforms. Piano Tree never sees, processes, or stores your payment details. Stripe's and RevenueCat's privacy policies govern how your payment information is handled. We only receive confirmation of successful payments and subscription status from these services.
We use RevenueCat to manage in-app purchases and subscription entitlements. RevenueCat processes purchase history, entitlement status, and platform identifiers to determine your subscription status. RevenueCat does not receive your payment method details.
How We Use Your Information
We use the information we collect to:
- Provide and maintain our piano learning services
- Personalize your learning experience and track your progress
- Improve our app features and user experience
- Respond to your support requests and inquiries
- Provide localized content, currency, and language settings based on your approximate location
- Determine applicable regional regulations (such as GDPR for EU-based users)
- Ensure security and prevent fraud or abuse
- Comply with legal obligations
How We Share Your Information
We do not sell your personal information. We may share your data only in the following circumstances:
- With trusted service providers who help us operate our services — including cloud infrastructure and hosting providers (such as Supabase), payment processors (such as Stripe and RevenueCat), analytics providers where applicable, and document or score-processing providers (which may process uploaded PDFs, images, or MusicXML files to provide practice and score-processing features) — each of whom is contractually obligated to protect your data and may access it only as necessary to provide the requested service
- If required by law or to respond to legal process
- To protect our rights, privacy, safety, or property, or that of our users
- In connection with a business transfer (merger, acquisition, etc.), with notice to users
We do not share your data with third-party advertisers or analytics companies.
Data Storage and Security
We take data security seriously:
- All data is stored securely using industry-standard encryption
- Passwords are hashed using secure algorithms and never stored in plain text
- We use Supabase's secure infrastructure for data storage
- Access to your data is restricted to authorized personnel only
- We regularly review and update our security practices
While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain certain information for legal or legitimate business purposes.
Your Rights and Choices
Under GDPR, CCPA, and other applicable privacy laws, you have the right to:
- Access your personal data and receive a copy of the information we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your personal data
- Object to or restrict processing of your data
- Data portability (receive your data in a structured, commonly used format)
- Withdraw consent where processing is based on consent
To exercise these rights, please contact us using the information provided in the 'Contact Us' section below.
Deleting Your Account
You can delete your account at any time directly from the app. Go to Settings and tap the 'Delete Account' button. Alternatively, you can contact us via email at [email protected]. When you delete your account:
- All your personal data will be permanently deleted within 30 days
- Your practice history and progress will be removed
- You will lose access to all premium features and content
Some information may be retained for legal or legitimate business purposes (such as transaction records) but will be anonymized where possible.
Children's Privacy
Piano Tree is designed for general audiences and is not specifically directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the 'Last Updated' date. We encourage you to review this policy periodically.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: [email protected]
We will respond to your inquiry within a reasonable timeframe, typically within 30 days.
Your Consent
By using Piano Tree, you consent to this Privacy Policy and agree to our collection and use of your information as described herein.