Privacy Policy

Last updated: February 28, 2026

Introduction

Virtuosic LLC ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Virtuosic website (virtuosic.org), web application (app.virtuosic.org), and mobile applications (collectively, the "Services"). By using our Services, you agree to the practices described in this policy.

Age Requirements

Virtuosic is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13 years of age. If you are under 13, please do not create an account or submit any personal information. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe a child under 13 has provided us with personal information, please contact us at privacy@virtuosic.org.

Information We Collect

Information you provide

  • Account information: Email address, display name, and password when you create an account
  • Profile information: Primary instrument, years of playing experience, and birth year (optional)
  • Practice data: Pitch measurements, practice session durations, practice notes, and achievements recorded during use of the app
  • Contact information: Name, email, and message content when you submit a contact form
  • Payment information: Processed securely by Stripe; we do not store your credit card details

Information collected automatically

  • Usage data: Pages visited, features used, session duration, and interaction patterns via Google Analytics
  • Device information: Browser type, operating system, device type, and screen resolution
  • Log data: IP address (anonymized), access timestamps, and referring URLs

Aggregated and anonymized data

We collect anonymized, aggregated pitch data to build and improve our instrument-specific intonation tendency database. This data cannot be used to identify individual users and is used to provide accurate pitch tendency guidance across 19 instruments.

Cookies and Tracking Technologies

We use the following cookies and tracking technologies:

  • Authentication cookie (auth_token): An HTTP-only, secure cookie used to maintain your login session on the website. This is a strictly necessary cookie and cannot be disabled.
  • Google Analytics (_ga, _ga_*): Used to understand how visitors interact with our website, including page views, traffic sources, and user engagement. Google Analytics data is processed by Google LLC in accordance with their privacy policy. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
  • Local storage: The web application stores your settings, practice data, and authentication tokens in browser local storage to enable offline functionality and a seamless experience.

How We Use Your Information

  • Provide, maintain, and improve our Services
  • Authenticate your identity and manage your account
  • Process subscriptions and payments
  • Sync your practice data and settings across devices
  • Send transactional emails (password resets, email verification, account updates)
  • Respond to your contact form submissions and support requests
  • Send newsletter updates if you have opted in (you can unsubscribe at any time)
  • Analyze usage patterns to improve features and user experience
  • Build and maintain our aggregated intonation tendency database
  • Prevent fraud, abuse, and unauthorized access

Third-Party Service Providers

We share your information with the following third-party processors, each of which has its own privacy policy:

  • Stripe (stripe.com) — Payment processing for subscriptions. Stripe receives your email and payment details to process transactions. See Stripe's Privacy Policy.
  • Resend (resend.com) — Transactional email delivery (password resets, verification emails, contact form responses, newsletter). Resend receives your email address. See Resend's Privacy Policy.
  • Google Analytics (analytics.google.com) — Website analytics. Google receives anonymized usage data. See Google's Privacy Policy.
  • Vercel (vercel.com) — Website and web app hosting. See Vercel's Privacy Policy.
  • Railway (railway.app) — Backend API hosting. See Railway's Privacy Policy.
  • Apple / Google — In-app purchase verification for iOS and Android subscriptions, if applicable.

Data Sharing

We do not sell your personal information. We may share your information in the following circumstances:

  • With your consent: When you opt in to share data with a Studio instructor via the Studio feature
  • Service providers: With the third-party processors listed above, solely to provide our Services
  • Aggregated data: Anonymized, aggregated pitch tendency data may be shared for research or educational purposes. This data cannot identify individual users.
  • Legal requirements: When required by law, regulation, or legal process
  • Safety: To protect the rights, safety, or property of Virtuosic, our users, or the public

Data Retention

  • Account data: Retained for as long as your account is active. You can delete your account at any time from the Account page.
  • Practice data: Retained for as long as your account is active. Anonymous pitch data older than 90 days may be periodically cleaned up.
  • Authentication tokens: Refresh tokens expire after 30 days and are periodically cleaned up.
  • Password reset tokens: Expire after 1 hour.
  • Email verification tokens: Expire after 24 hours.
  • Contact form submissions: Retained in our email system for support purposes.
  • Analytics data: Retained by Google Analytics per their standard retention policies.

Your Rights

You have the following rights regarding your personal information:

  • Access: View your data through the Account page or request a full export
  • Export: Download a complete copy of your data (GDPR data export) from the Account page
  • Deletion: Delete your account and all associated data from the Account page. Deletion is permanent and cannot be undone.
  • Correction: Update your profile information at any time through the app or Account page
  • Opt out of analytics: Install the Google Analytics Opt-out Add-on
  • Unsubscribe: Opt out of newsletter emails at any time using the unsubscribe link in any email

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know: You may request details about the personal information we have collected about you in the past 12 months
  • Right to delete: You may request deletion of your personal information, subject to certain exceptions
  • Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights
  • No sale of personal information: We do not sell personal information as defined by the CCPA

To exercise your CCPA rights, contact us at privacy@virtuosic.org or use the account deletion and data export features on the Account page.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS/TLS), hashed passwords (bcrypt), HTTP-only secure authentication cookies, and rate limiting. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

Our Services are hosted in the United States. If you access our Services from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Services after changes are posted constitutes acceptance of the updated policy.

Contact Us

For privacy concerns, questions, or to exercise your rights, contact us at: privacy@virtuosic.org

Virtuosic LLC
Omaha, Nebraska, United States