Privacy Policy
Last updated:
This is a translation. If there is any discrepancy, the Portuguese version prevails.
Your privacy matters to us. Maestro Piano was designed to work with as little personal data as possible: there are no accounts, no ads and no analytics or tracking tools. In line with the General Data Protection Regulation (GDPR) and Portuguese Law no. 58/2019, this policy explains what data is processed, why, and what your rights are.
1. Data controller
, tax number (NIF) , registered office at .
Privacy contact: .
2. What data we process
| Data | Where it is kept | What for |
|---|---|---|
| Name or nickname, age group, daily goal, experience level | Only on your device | To tailor the lessons, speed and look of the app |
| Progress (stars, XP, achievements, streak), settings, imported MIDI songs and recordings of your playing | Only on your device | To keep your progress between sessions |
| Microphone sound (only if you turn the feature on) | Processed in real time on the device; never recorded or sent | To recognise the notes you play on an acoustic piano |
| Random anonymous app ID, subscription status, purchased packs and purchase history | RevenueCat (our subscription management provider) and the store where you bought | To activate and keep Premium and packs, restore purchases and provide support |
| Payment data and email (web purchases only) | Stripe, through RevenueCat. We never see your card details | To process the payment and send the receipt |
| Anonymous usage statistics: a random installation ID, platform (iOS, Android or web), songs and practice modes used, stars earned and gift codes redeemed. Never name, email, age, location or contacts | Maestro Piano back-office server () | To learn which songs and features are most useful, improve the lessons and validate gift codes. You can turn this off in Account → Privacy and data |
| IP address and technical request data | Hosting server logs () | To deliver the web app and the song catalogue, and to keep the service secure |
For purchases made on the App Store or Google Play, payment is handled by Apple or Google under their own privacy policies. We only receive confirmation of the purchase, without name, email or payment data.
3. Legal bases
- Performance of a contract (Art. 6(1)(b) GDPR): running the app, the Premium subscription and purchased packs.
- Legal obligation (Art. 6(1)(c)): keeping billing records as required by tax law.
- Legitimate interest (Art. 6(1)(f)): service security, purchase fraud prevention and anonymous usage statistics to improve the app. You can object at any time by turning the option off in Account → Privacy and data.
- Consent (Art. 6(1)(a)): microphone access, which you can withdraw at any time in your device settings; consent from a parent or guardian for children under 13.
We do no marketing, build no advertising profiles, sell no data and make no automated decisions with legal effects.
4. Children
In Portugal, consent for digital services is only valid from the age of 13 (Art. 16 of Law no. 58/2019). That is why, when a child or junior profile is chosen, the app asks a parent or guardian to confirm their permission. The app does not collect contact details from children, and purchases are protected by App Store and Google Play parental controls.
5. Recipients and international transfers
- RevenueCat, Inc. (USA): subscription and purchase management, as a processor.
- Apple Inc. and Google LLC: app stores and mobile payments, as independent controllers.
- Stripe: payments in the web version.
- : hosting of the web version and the catalogue.
Transfers to the USA are covered by the EU-US Data Privacy Framework and/or by standard contractual clauses approved by the European Commission.
6. How long we keep data
- Data on your device: until you delete it (in the app, under Account → Privacy and data) or uninstall the app.
- Purchase and subscription records: while the subscription or packs are active and then for the legal retention periods for tax records (up to 10 years).
- Support emails: up to 3 years after the last contact.
- Technical server logs: up to 90 days.
- Anonymous usage statistics: up to 13 months, after which they are deleted automatically. When you turn the option off, the installation ID is deleted from the device.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, and you can withdraw consent at any time without affecting processing already carried out.
- In the app, under Account → Privacy and data: you can export all your data (JSON file), correct your profile or delete everything.
- By email, to , stating the customer ID shown under Account. We reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt, or with the authority of the country where you live.
8. Cookies and local storage
The app does not use advertising cookies. It uses the device's local storage (localStorage) to keep your progress, settings and the latest version of the song catalogue, which is strictly necessary for the service you asked for. It also keeps the random ID used for anonymous statistics, which you can delete at any time by turning the option off in Account → Privacy and data. During web payments, Stripe may use strictly necessary cookies for fraud prevention.
9. Security
Communications are encrypted (HTTPS/TLS). Progress data never leaves your device, back-office access is restricted to the team and password-protected, and payments are processed by PCI-DSS certified providers.
10. Changes
If this policy changes in a meaningful way, we will let you know in the app before the changes take effect.