Privacy Policy

1. Information We Collect

We collect the following categories of data:

• Email address — provided when you create an account or sign in with Google, used for authentication and communication
• Usage data — melody views, practice time, favorites, playback events, and search queries
• Device and technical data — IP address, browser or app type, operating system, and screen size
• Anonymous device identifier — a privacy-safe fingerprint used solely to enforce free-tier melody limits for users without an account
• Purchase and subscription data — subscription status, plan type, billing period, and payment provider reference (we do not store full payment card details)

2. How We Use Your Data

• To provide, maintain, and improve the Service
• To manage your account and subscription
• To track learning progress (melody views, practice time, streaks)
• To enforce access limits (anonymous: 5 melodies, registered: 10, subscriber: unlimited)
• To send transactional emails (welcome, trial reminders, subscription updates)
• For internal analytics and performance monitoring

3. Cookies and Local Storage

On the web, we use cookies to maintain your authentication session and store preferences. Our iOS app uses local storage for favorites and settings. We do not use third-party advertising or tracking cookies.

4. Third-Party Services

We share data with the following trusted providers, each of which processes data under its own privacy policy:

• Supabase — cloud database, authentication, and data storage (privacy policy)
• Paddle — payment processing and Merchant of Record for web subscriptions (privacy policy)
• Apple / App Store — in-app purchases and subscription management on iOS (privacy policy)
• Adapty — subscription analytics and paywall management on iOS (privacy policy)

We also query the Apple iTunes Search API to display album artwork — no user data is sent in those requests.

5. Advertising and Tracking

We do not use advertising SDKs, the Apple Identifier for Advertisers (IDFA), or App Tracking Transparency prompts. We do not sell, rent, or share your personal data with advertisers or data brokers.

6. Data Security

We implement industry-standard security measures including encrypted connections (TLS), secure authentication tokens, and restricted database access (row-level security). While no system is perfectly secure, we take reasonable steps to protect your information.

7. Data Retention and Deletion

We retain your personal data for as long as your account is active or as needed to provide the Service. You can request deletion of your account and all associated data at any time by contacting us at kirill@onestringsongs.com.

Upon receiving a deletion request, we will remove your account, usage history, favorites, practice data, and subscription records within 30 days. Anonymized, aggregated analytics data that cannot identify you may be retained.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Receive your data in a portable format

To exercise any of these rights, contact us at kirill@onestringsongs.com. We will respond within 30 days.

9. Children’s Privacy

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete it.

10. International Data Transfers

Your data may be processed and stored in countries outside your country of residence, including the United States and the European Union. We ensure appropriate safeguards are in place through our service providers' data processing agreements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice within the Service. Continued use after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or requests, contact us at: kirill@onestringsongs.com