Privacy Policy

Most of the app works without an account. In guest mode, your practice progress, achievements, curriculum progress, and preferences are stored only in your browser's local storage. We never see this data — it isn't sent to us at all.

Creating an account is optional. If you do, we store:

• Account credentials — your email and password, managed by our authentication provider (Supabase).
• Profile info — username, display name, bio, and your public/private setting.
• Practice data — progress, curriculum completion, spaced-repetition review state, and gamification data (XP, level, achievements), so it can sync across your devices.
• Social activity — follows, activity feed posts, comments, reactions, and challenge records, if you use those features.
• Uploaded files — any MIDI/Guitar Pro files you upload to Play Along.
• Support tickets — the subject, category, and messages of any ticket you open.

If you subscribe to the newsletter, we store only your email address. It's used solely to send the newsletter. Clicking the unsubscribe link in any newsletter email deletes your email from our list immediately — there's no separate request needed.

We don't use analytics cookies, advertising trackers, or any third-party tracking scripts. We don't sell or share your data with advertisers.

Depending on which features are enabled and which you use, a small number of service providers help run the app and process data on our behalf:

• Supabase — hosts our database, authentication, and file storage.
• Resend — delivers newsletter and account emails. Only the recipient email address and the message content are shared with it for that purpose.
• Stripe — processes card payments if you subscribe to a paid plan on the web. Your card details go directly to Stripe; we never see or store them.
• Google Play — processes payment and manages your subscription if you subscribe inside the Android app.
• Google / Firebase — in the Android app, delivers push notifications via a device token, and — if you connect Google Drive — stores the Play Along files you choose to save there.
• Sentry — receives crash and error diagnostics when error reporting is enabled, so we can fix problems.
• Our hosting provider — serves the site and, like any web host, processes the standard request logs (including IP address) needed to deliver it.

Public profile info, public activity, and the leaderboard are visible to other users of the app if you set your profile to public — that's a feature you control, not data shared with a third party.

Account data is kept for as long as your account exists. Newsletter subscriptions are hard-deleted (not just marked inactive) the moment you unsubscribe.

You can edit or delete most of your own content directly in the app — your profile, your public/private setting, your posts, comments, and uploaded files — and permanently delete your entire account and all of its data from the "Delete account" section of your profile page at any time. For a full data export, or any other GDPR data request, open a support ticket and we'll handle it.

The app isn't directed at children under 13, and we don't knowingly collect data from them.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

This app is operated by Alexandru-Florin Oltean (Str. 1 Decembrie 21A, bloc 12, ap. 12, Mediaș, jud. Sibiu, Romania), the data controller for the purposes of the GDPR. Questions about this policy or your data? Email social@note-noodle.com or open a support ticket.