Privacy policy
Last updated: [date of launch]
- Your pieces, recordings and uploaded scores are private. Only you can see them.
- We don't sell your data, show ads or use advertising trackers.
- What you play on your piano stays in your browser until you save a piece.
- You can download your pieces or delete your account at any time.
Who we are
Pianotes is run by [name of the person or company], [address / country]. We are responsible for the personal data described here. You can reach us at [contact email].
What we collect
- Your account: your email address and, if you sign in with Google or another provider, your name as that provider shares it. Passwords are stored only as a secure hash.
- Your pieces: everything you save in My library: the notes you record or write, the scores you import (MusicXML, MIDI or Pianotes files), titles, markings and settings for each piece.
- Your preferences: settings such as speed, metronome and which hand's note names to show. These are kept in your browser's local storage.
- Technical data: our hosting provider keeps short-lived server logs (IP address, browser type, time of request) to keep the service secure and working.
We do not collect audio from a microphone. Pianotes reads your piano through MIDI: the notes you play, how hard, and the pedal. This is processed in your browser and is only sent to us when a piece is saved to your library.
Why we use it
- To give you an account and keep your library saved between visits and devices (performing our agreement with you).
- To keep the service secure, prevent abuse and fix problems (our legitimate interest in running a reliable service).
- To answer you when you contact us.
- To send you emails about your account, such as password resets. We only send news or tips if you have opted in, and you can unsubscribe at any time.
Your pieces are private
The pieces in My library, including scores you upload, are visible only to you. We don't publish them, share them with other users, or use them to train AI models. Our staff look at a piece only if you ask us to (for example to fix a problem) or if the law requires it.
The Starter library is the same for everyone. It contains public-domain music we provide. Opening or practicing a starter piece doesn't store anything about you; saving a copy puts that copy in your private library.
Who else handles your data
We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:
- Vercel, to serve the website.
- Clerk, to handle accounts and sign-in, and to send account emails (such as sign-in codes).
- Neon, to store your pieces in a database.
Some of these providers may store data outside your country, including outside the European Economic Area. Where that happens we rely on safeguards such as the European Commission's Standard Contractual Clauses.
We never sell or rent your personal data.
Cookies and local storage
We use only what is needed for the service to work: a login cookie that keeps you signed in, and local storage for your preferences and the last piece you opened. We don't use advertising or tracking cookies.
How long we keep it
- Your account and pieces: until you delete them or close your account.
- Deleted pieces: kept in a recoverable bin for 30 days, then removed for good.
- After you close your account, your data is deleted within 30 days, apart from backups, which are overwritten within a further [number] days.
- Server logs: up to [number] days.
Your rights
You can ask us for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for your data in a portable format. You can also download every piece yourself from the app (MusicXML, MIDI or Pianotes files) at any time. To use these rights, email [contact email]. If you think we've handled your data wrongly, you can complain to your local data protection authority.
Children
Pianotes is for anyone learning piano. Children under [16, or the age set in your country] may only create an account with permission from a parent or guardian, who can contact us to review or delete the child's data.
Security
Connections to Pianotes are encrypted (HTTPS), and access to stored data is limited to what is needed to run the service. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Changes to this policy
If we change this policy in a way that matters, we'll let you know by email or in the app before the change takes effect.