Short version: Music Maestro collects only what's needed to run accounts and process payments. We don't sell your data, don't run ads, and don't share your information with third parties except Stripe (payments) and Supabase (database).
Who we are
Music Maestro is an interactive music theory learning app. The service is operated by an individual developer. Questions: use the feedback link at the bottom of the app.
What data we collect
If you create an account (optional):
- Email address and password (stored securely in Supabase Auth)
- Display name (if you provide one)
- Whether your account has paid access (yes/no)
- Your practice progress per module and concept (correct/wrong counts)
- Selected grade level and exam board
If you pay (Grade 2 & 3 access):
- Payment is processed entirely by Stripe — we never see or store your card details
- Stripe provides us with a customer ID to match your payment to your account
- Stripe's Privacy Policy: stripe.com/privacy
Without an account (guest mode):
- Game progress and scores are stored only in your browser's localStorage — on your device, never sent anywhere
How we use your data
- To authenticate you and sync your progress across devices
- To verify that your account has paid access
- We do not use your data for advertising, analytics, or profiling
- We do not sell or share your data with third parties (except Stripe for payment processing)
Children's privacy
Music Maestro is designed for use by children under parental supervision. We recommend that a parent or guardian creates the account on behalf of a child. We do not knowingly collect personal information directly from children under 13 without parental consent.
Data storage
Account data is stored on Supabase servers (hosted on AWS in the United States). Row-level security ensures users can only access their own data.
Your rights
- Access: You can view your data at any time via your account
- Deletion: Email us to delete your account and all associated data
- Portability: Contact us to request a copy of your data
Cookies & tracking
We do not use advertising cookies or third-party tracking scripts. Supabase uses a session token stored in localStorage to keep you signed in.
Third-party scripts loaded
- Supabase JS SDK (cdn.jsdelivr.net) — authentication and database
- Tone.js (cdnjs.cloudflare.com) — piano audio
- Tonal.js & abcjs (cdn.jsdelivr.net) — music theory and notation
- Salamander piano samples (tonejs.github.io) — audio files
- Google Fonts (fonts.googleapis.com) — Nunito typeface
CDN providers may log standard request metadata (IP address, timestamp) as part of normal CDN operation.
Last updated: April 2026