Privacy Policy

Last updated: 2026-05-17

PianoHelper is a Suzuki-method piano practice helper for families. This policy describes what we collect and what we do with it.

Account holder

Only an adult parent or guardian creates an account in PianoHelper. By registering, you confirm you are at least 18 years old and that you are the parent or legal guardian of any child whose profile you add to your family. Children do not create their own accounts and do not log in; their profiles are entirely managed by the account holder.

Information we collect

• From the account holder: email address, display name, and password hash (passwords themselves are never stored).
• From Google sign-in (optional): email and display name from the Google ID token; we do not retain the access token.
• About each child profile the account holder creates: first name, display name, age, avatar choice, lesson notes the account holder enters (which may include teacher comments), practice assignments, scales, memorization goals, streaks and practice statistics. We do not collect contact information for children.
• Practice audio / MIDI: processed locally on the device for pitch and tempo analysis. Audio is never uploaded or stored on our servers.
• Sheet-music photos: when you use the sheet-music scan feature, the photo you take is uploaded to our server so we can recognize the piece. The image bytes are stored only as long as our processor needs them and are deleted within 24 hours; we retain only the extracted note data needed to compare against our reference score. The photo is not shared with anyone outside our processing pipeline.
• Diagnostic data: crash reports and request correlation IDs via Sentry, used to fix bugs. No practice content or personal identifiers beyond the authenticated user's email are attached to crash reports.

Children under 13 (COPPA)

PianoHelper is designed to be operated by a parent or guardian on behalf of their child. The account holder provides verifiable parental consent for any data about a child under 13 simply by creating that child's profile inside their own authenticated account. We collect only the minimum data needed for the app to function — first name, age, and practice progress. We do not collect contact information from children, do not enable children to publicly post content, and do not use child data for advertising or profiling. Parents can review, edit, or delete any child profile at any time from the in-app settings, and can permanently delete the entire family record (including all child profiles) via Account → Delete.

How we use the information

• To let the same family sign in from any device and see the same kids, lesson notes, and practice progress.
• To diagnose crashes and performance regressions.
• We do not sell personal information and do not share it with advertising networks.

Data retention and deletion

You can download a copy of everything we hold about your family — the account, every child profile, lesson note, assignment, practice session and score, with time-limited links to any stored photos or screenshots — as one JSON file from Settings → Account → Export my data.

You can request permanent deletion of your account and all family-scoped data (including every child profile, lesson note, assignment, scale, and memorization goal) from the in-app Account settings, or by emailing privacy@diyhelper.org. Authenticated in-app deletion is processed immediately; all such requests are completed within 30 days. We retain a minimal record of the deletion request (request ID, timestamp, originating IP) for audit purposes only.

Security

Authentication tokens are stored on-device in the OS's secure keystore (Android Keystore / iOS Keychain). Passwords are stored server-side only as bcrypt hashes. Traffic between the app and the API uses HTTPS.

Contact

Questions: privacy@diyhelper.org.