Privacy Policy

1. Information We Collect

Information You Provide

• Account information: name, email address, and password when you register, or profile information from Google OAuth.
• Practice data: metronome settings, tempo preferences, time signature configurations, and practice session history.
• Audio uploads: audio files you upload for rhythm analysis and practice feedback.
• Payment information: billing details processed securely through Stripe. We do not store your full credit card number.
• Communications: messages you send to us via support or feedback channels.

Information Collected Automatically

• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Usage data (pages visited, features used, session duration)
• Referral source and search terms

2. How We Use Your Information

• Provide, operate, and maintain the Service
• Process your practice sessions and deliver rhythm analysis
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password resets, billing receipts)
• Improve the Service based on usage patterns and feedback
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We will never sell your personal data to third parties or use your audio uploads for purposes other than providing the Service to you.

3. Cookies & Tracking Technologies

We use the following types of cookies and similar technologies:

• Essential cookies: required for authentication, session management, and security.
• Preference cookies: remember your settings like theme preference and default tempo.
• Analytics cookies: help us understand how you use the Service so we can improve it.

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the Service.

4. Third-Party Services

We rely on trusted third-party providers to operate the Service:

Each provider operates under their own privacy policy. We encourage you to review their policies.

5. Data Storage & Security

Your data is stored on servers located in the United States and European Union. We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) and at rest
• Hashed and salted passwords (bcrypt)
• Rate limiting and brute-force protection
• Regular security audits and dependency updates

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Practice session data is retained to power your progress history and analytics. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law (e.g., billing records).

7. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data (“right to be forgotten”).
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing of your data for certain purposes.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@rythviz.app. We will respond within 30 days.

8. Data Deletion

You can delete your account at any time from your account settings. Upon deletion:

• Your profile and practice data will be permanently removed within 30 days
• Audio uploads will be deleted immediately
• Billing records may be retained as required by law for up to 7 years
• Anonymized, aggregated analytics data may be retained indefinitely

You can also request data deletion by emailing privacy@rythviz.app.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. For significant changes, we may also send an email notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@rythviz.app
• Website: rythviz.app