Privacy Policy

• We use your data to run the app, keep your progress in your account, and understand how the app is used so we can improve it.
• We do not sell your data, do not show ads, and do not track you across other companies' apps or websites.
• The microphone is only used to listen to your instrument, live on your device. Your playing is not recorded by us or sent to us.
• You can delete your account and its data inside the app at any time: Profile › Account › Delete account.

The controller under the General Data Protection Regulation (GDPR) for the practiceOS app is:

Name

Mehdi Khosravani Bidzardi

Address

Beatrixgasse 27/2/23, 1030 Vienna, Austria

Email

bidzardie@gmail.com

Business details

GISA 39639981 · GLN 9110039286762 · Member of the Vienna Chamber of Commerce (WKO Wien)

We have not appointed a data protection officer, as we are not legally required to. Please send all privacy requests to the email address above.

The legal bases named below come from Art. 6(1) GDPR: (b) performing our contract with you, (c) a legal obligation, and (f) our legitimate interests. Where we rely on (f), you have the right to object (see section 9).

Account

Email address, user ID and sign-in method (email and password, Sign in with Apple, or Google Sign-In). To create and secure your account. Basis: (b).

Profile and setup

Your name, and if you add them your age and profile photo; your instrument, level, goals, focus areas, weekly practice volume, and whether you have a teacher. To shape your course and roadmap. Basis: (b).

Practice data

Practice blocks, session logs, durations, tempo records, quiz and ear training results, roadmap levels, points, and your practice streak. To keep your progress and show your history. Basis: (b).

Your content

Journal entries, exercises you build, and music scores you scan or import, along with your pen marks on them. To store them for you. Basis: (b).

Teacher mode

Only if you connect to a teacher using their code. See section 5. Basis: (b).

Purchases

Subscription status and purchase history, with an anonymous RevenueCat ID that is not linked to your name or email. To unlock what you paid for. We never see your card details: Apple handles payment. Basis: (b), and (c) for records we must keep by law.

Usage analytics

Screens and features used, events such as a finished level or a started trial, your answer to how you heard about us, device and app information, an app instance identifier, and approximate location derived from your IP address. To understand and improve the app. Analytics is not linked to your name or email and is not used for advertising. Basis: (f).

Demo videos

When a demo video plays, your IP address and device information reach our video provider, because that is how a video gets delivered. Basis: (b).

Feedback

Feature requests you send, stored with your user ID. Answers to the trial cancellation survey, stored anonymously with no link to your account. To improve the app. Basis: (f).

Support

Whatever you send us by email, including your email address and device details. To answer you. Basis: (b) or (f).

Account data is needed to provide the service: without it you cannot use the app. Profile details such as your photo and age are optional. We do not make decisions about you by automated means that have legal or similarly significant effects. Your answers only shape which exercises the app suggests.

Microphone

Used to tune your instrument and to recognise the notes and chords you play. The sound is analysed live on your device. It is not recorded by us, stored, or sent to our servers.

Camera

Used for your profile photo, scanning scores with the document scanner, and the AR Practice Room. Camera images in AR are processed on your device. Only a photo or score you choose to save is uploaded.

Play-along recordings

If you record yourself playing along, the recording uses Apple's screen recording and stays with you. We do not receive it unless you send it to us.

Reading scores

The suggested name for a scanned score comes from text recognition on your device.

Reminders and widget

Practice reminders are local notifications scheduled on your device. Widgets use a small summary stored on your device.

You can withdraw microphone, camera, photo and notification access at any time in your iPhone's Settings. Features that need them will then stop working, and the rest of the app will carry on.

Sharing with a teacher only happens if you enter their code, and you can disconnect at any time in the app. While connected, your teacher can see:

• your name, profile photo, instrument and level;
• the date you connected and when you last practised;
• how many assignments you have active and completed, and your progress on the assignments they set you.

Your teacher cannot see your journal, your own practice blocks, your exercise history or your email address. If you teach, your name, studio, bio, instrument and photo appear on your teacher card, which a student sees when entering your code. Your students' details are visible only to you.

We work with the service providers below, who process data on our behalf or, in Apple's case, as a provider of its own services. We do not sell personal data and do not share it for advertising.

Google Firebase

Google Ireland Limited, Ireland, with Google LLC, USA. Sign-in, database, file storage and analytics. firebase.google.com/support/privacy

Google Sign-In

Google, as above. Only if you choose to sign in with Google.

RevenueCat

RevenueCat, Inc., USA. Subscription management. revenuecat.com/privacy

Apple

Apple Distribution International Ltd., Ireland. App Store, payments, Sign in with Apple, and notification delivery. apple.com/legal/privacy

Bunny.net

BunnyWay d.o.o., Slovenia. Streaming of demo videos. bunny.net/privacy

We may also disclose data where the law requires it, for example to a court or public authority, or where it is necessary to establish or defend legal claims.

Some providers process data outside the European Economic Area, particularly in the USA. Where they do, the transfer relies on an adequacy decision of the European Commission, such as the EU–US Data Privacy Framework for certified companies, or on the Commission's Standard Contractual Clauses under Art. 46 GDPR. You can ask us for details using the email address above.

Account and practice data

Until you delete your account or the data itself.

After account deletion

When you delete your account in the app, your profile, practice data, your own content and scores, profile photo, connection to a teacher, and teaching data are deleted. Any remaining copies in provider systems are removed within 30 days.

Analytics

Kept for up to 14 months, then deleted automatically. It is not linked to your name or email, so it is not removed by deleting your account.

Feedback

Feature requests are kept for as long as useful to us. Email us and we will delete yours. Survey answers are anonymous, so they cannot be traced to you.

Teacher invite code

If you taught, a record linking your code to your user ID may remain after deletion. Email us and we will remove it.

Support emails

Up to 3 years, in case a question comes back or a claim arises.

Purchase records

Apple and RevenueCat keep these under their own terms. We keep records for as long as Austrian tax and commercial law requires, generally 7 years.

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have incorrect data corrected (Art. 16);
• have your data deleted (Art. 17);
• have processing restricted (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on our legitimate interests, including analytics (Art. 21).

To use any of these rights, email bidzardie@gmail.com. We reply within one month.

You also have the right to complain to a supervisory authority. In Austria that is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at. You can also contact the authority where you live or work.

practiceOS is not directed at children under 14. In Austria, young people can consent to online services themselves from the age of 14. Anyone younger needs the consent of a parent or guardian. If you believe a child has given us data without that consent, please contact us and we will delete it.

Data is encrypted in transit, and access rules limit each account to its own data, with the narrow teacher mode exception described above. No system is perfectly secure, but if a breach puts your rights at risk, we will notify you and the authority as the GDPR requires.

We update this policy when the app or the law changes, and the date at the top always shows the latest version. If a change significantly affects you, we will also tell you in the app.

Questions? Email bidzardie@gmail.com.