Privacy Policy

Last updated: 20 April 2026

This policy explains what personal data PianoQuest collects and how we use it. Your privacy matters — we only collect what we need to run the service.

Who is the data controller?

PianoQuest is run by Daniel Forino, a sole trader based in the United Kingdom. You can contact us at forinodan@gmail.com.

What we collect

When you create an account:

Your name and email address
A hashed version of your password (we never see or store your actual password)

As you use the app (stored locally on your device, optionally synced):

Your progress, stats, streak, XP, completed lessons
Your favourite songs
Your practice settings and preferences
Recordings you make (stored on your device)

If you subscribe to Pro:

Your Stripe customer ID and subscription status
We never see or store your full payment card details — those are handled by Stripe

Automatic info:

Basic browser / device info (user agent string) for bug reports
Usage data (pages visited, features used) to improve the product
Cookies and localStorage to keep you logged in and remember your settings

How we use it

To provide the service (log you in, show your progress)
To process your subscription (via Stripe)
To send you important notices about your account
To respond to support requests
To improve the product and fix bugs

We do not sell your data to anyone. We do not show third-party ads.

Who we share it with

We only share data with the third-party services we use to operate:

Stripe — payment processing (privacy policy)
Resend — transactional email delivery (privacy policy)
Cloudflare — hosting and CDN (privacy policy)

Where your data lives

User account data is stored in Cloudflare's global KV store. Payments are processed in the EU/US by Stripe. Emails are sent via Resend in the US. By using the Service you consent to the transfer of your data to these jurisdictions.

How long we keep it

Account data: as long as your account is active, plus 30 days after deletion
Payment records: at least 6 years for UK tax purposes
Bug reports: 2 years, then deleted

Your rights (UK / EU GDPR)

You can:

Access the data we hold on you
Correct inaccurate data (via account settings or by emailing us)
Delete your account and data
Export your data
Object to or restrict processing
Complain to the UK Information Commissioner's Office (ico.org.uk)

To exercise any of these rights, email forinodan@gmail.com.

Children

PianoQuest is not directed at children under 13. We do not knowingly collect data from under-13s. If you believe a child has created an account, please email us and we will delete the data.

Cookies

We use only essential cookies and localStorage to run the app (login state, preferences, progress). We do not use third-party advertising cookies or tracking pixels.

Changes to this policy

If we make significant changes, we will notify you via email or in-app. Continued use of the Service after changes means you accept the updated policy.

Contact

Questions? Email forinodan@gmail.com.