Jazz Piano 50
Privacy Policy
How Jazz Piano 50 processes information for accounts, learning progress, and display.
1. Operator and scope
The operator and privacy contact for Jazz Piano 50 is Harang Kim, based in South Korea. Privacy and service enquiries: ryuharang@naver.com.
This policy covers on-device learning and account sync. App-store purchases and payment processing, and services opened through external links, are also subject to those services’ own policies.
2. Information and purposes
- Account: email, account ID, signup, login and email-verification information, and authentication sessions are used for authentication, account maintenance, and password recovery. For email-and-password signup, Supabase Auth manages password hashes; plain-text passwords are not stored in the learning database.
- Consent: the notice versions, choices, and timestamps submitted at signup are kept to document the request.
- Learning: completed lessons, the current lesson and page, exercise result/retry/revealed-answer status, attempt counts, selected answers, and keyboard note identifiers are used to resume learning and sync progress across devices.
- Preferences: settings such as sound and note-name labels are saved. Language choice stays on the device.
- Support: contact details, messages, and information you choose to email are used to answer and handle your request. Do not send passwords or full card numbers.
- Service connections: the authentication and database provider may process IP addresses, request times, errors, and authentication events for security and operations. The app does not include a separate advertising-tracking or behavioral-analytics SDK.
- Font display: the app loads DM Sans and Noto Sans KR through Google Fonts. Opening an app screen may request fonts from fonts.googleapis.com and fonts.gstatic.com even without signing in. Google receives the IP address and request details such as the URL, browser information (User-Agent), and any referrer sent by the browser. Account email, passwords, and learning progress are not included in these font requests.
Password security · Google Fonts privacy information · Google Fonts request behavior
Only if selected · Google or Apple sign-in
When you choose Google or Apple sign-in, you use that account to sign in to Jazz Piano 50. This section applies when you select social sign-in.
Email, provider type, provider account ID, and basic authentication information such as email verification are received through Supabase Auth to identify and sign in the account. If you choose Apple’s Hide My Email, a relay address may be provided instead of your real email. Your Google or Apple password is not given to this app or its operator.
Depending on the basic-profile permissions you grant, the authentication service may also receive a name or profile image. The app does not use that information for lessons or marketing. Access to mail contents, contacts, or files is not requested.
To revoke the Apple sign-in connection when an app account is deleted, an Apple authentication token is stored encrypted on the server. It is not stored in the device’s learning records. Verified, signed notifications from Apple are used to update email-forwarding status and handle revoked connections and account deletion.
The selected provider’s privacy notices and permission choices apply on its sign-in screen. If you do not choose social sign-in, no account information is received through that method; you may use an available email login or on-device learning without signing in. Deleting the app account does not delete your Google or Apple account.
3. Recording, advertising, and payments
The app does not record or upload your real piano performance through a microphone. On-screen keyboard answers are learning records, not audio recordings. Personal information is not sold or shared for advertising.
App purchases and payments made through the App Store are handled by Apple. The operator does not directly receive or store card numbers. If payment or analytics processing changes, this policy will be updated and any legally required notice or consent provided.
4. Device storage and cloud sync
Without signing in, progress stays in this device’s browser or app storage. Clearing storage or removing the app may erase local progress.
After sign-in, account learning records sync with Supabase. Sign in with the same Jazz Piano 50 account on another device to resume synced progress. Offline changes will not appear elsewhere until sync finishes after reconnection.
Authentication sessions and account-specific learning copies are stored on the device. Signing out clears the current login session but does not delete the account. Cached account progress may remain; clear app/site storage after using a shared device. The app does not use advertising-tracking cookies.
5. Service providers and international processing
Supabase provides authentication, storage, and sync. The processor is Supabase Pte. Ltd. (Singapore, privacy@supabase.io), with Supabase, Inc. (United States) potentially involved when support or operations require it. This project’s database and authentication data are stored in Singapore (ap-southeast-1).
Email, account ID, authentication data (password hashes for email signup and login sessions), and, only when social sign-in is chosen, provider type, provider account ID, and permitted basic authentication/profile information; Apple authentication tokens for revoking the sign-in connection and account-change notification information; consent versions and timestamps, lesson progress, exercise records, and app preferences. Connections may also generate security logs such as IP addresses.
Encrypted network transfer during signup, login, sync, recovery, deletion requests, and processing of Apple account-change notifications. The project database and authentication data are stored in Singapore (ap-southeast-1).
Account authentication, password recovery, learning-progress sync across devices, Apple connection revocation and account-change handling, and service security and operations.
Account and learning data are kept while the account exists and removed from the live service when the account is deleted. Residual backup and security-log data expire or are deleted under the retention schedule applicable to the Supabase service and configuration. Live deletion does not mean immediate deletion from every backup.
You may refuse. Cloud accounts and cross-device sync will then be unavailable, but you can study on this device without signing in.
International-processing consent does not waive your rights under applicable law. The selected storage region does not mean every support or operational activity takes place in that country.
Google Fonts requests are separate from Supabase account sync and may occur automatically when the app loads. Request information may be processed on Google infrastructure outside your country. See Google’s Privacy Policy and Fonts guidance for its processing information. The standalone legal page uses system fonts.
If you choose Google or Apple sign-in, that provider’s login service also processes authentication requests and connection information. Its privacy policy and sign-in notices apply to that processing. Supabase account sync and the provider’s sign-in service are separate processing activities.
Supabase operational and security logs may be processed in EU data centers separately from the selected database region. Support personnel in other regions may participate when necessary. See the provider’s data residency and transfers guidance for details.
Data residency and transfers · Korean PIPA Article 28-8 · Google Privacy Policy · Apple Privacy Policy
6. Retention and deletion
Account information, account-linked consent metadata, and learning records are kept while the account exists. Successful account deletion removes the live authentication account and its linked progress, plus that account’s session and learning copy on the requesting device.
When a verified notification reports an Apple sign-in revocation or Apple Account deletion, the Apple connection and stored authentication token are removed. An app account that used only Apple sign-in is deleted together with its learning records. If a separate sign-in method is linked, that method and the learning records are retained, and existing sessions are ended. An account-deletion request made in the app deletes the entire account regardless of its sign-in methods.
Deletion from the live service is separate from backup and security-log expiration. Residual information is removed under the retention schedule applicable to the provider’s service and configuration. The Supabase documents below explain backup recovery windows and log processing. Live deletion does not mean immediate deletion from every backup.
Support emails and request records are used while needed to respond, verify, and handle the request, and are deleted once no longer needed for those purposes. Records needed to meet a legal preservation duty or handle an ongoing dispute are retained only to the extent required for that basis and purpose. The app keeps no independent payment or transaction ledger; store purchase records are governed by the store’s policy.
7. Request account and data deletion
In the app, open Settings → Account → Delete account and confirm. This deletes the account and its cloud learning records. It cannot be undone. Signing out or removing the app does not delete your cloud account.
You can also request deletion without installing the app. Email ryuharang@naver.com, preferably from your registered address, with the subject “Jazz Piano 50 account deletion request” and the email of the account to delete. Do not send your password. We will verify ownership using only necessary information and inform you of the result.
Copies on other offline devices may not be erased remotely right away. Clear app/site storage on those devices too. Store-managed purchase records are not deleted with the app account. Account deletion does not cancel a purchase or request a refund.
8. Your rights
You or a legally authorized representative may email ryuharang@naver.com to request access or a copy, correction, deletion, restriction, or withdrawal of consent. Portability, objection, and other rights apply where provided by law. Identity checks are limited to what is necessary, and responses follow applicable legal deadlines.
To withdraw international-processing consent, contact the same address or delete your account. You may continue on-device learning without signing in after cloud sync stops. If a legal restriction prevents a request, we will explain the reason and legal basis.
Account registration is for people aged 14 or older. Minors must obtain any guardian consent required where they live; legally authorized representatives may exercise applicable rights. If we learn that account information from a child under 14 has been collected, we will verify the matter through the contact above and take the necessary deletion steps.
9. Protection and policy changes
Encrypted connections, account-based access controls, and server-side protection of service secrets limit access. Protect your device and avoid sharing login details.
Changes to data, purposes, providers, international processing, or retention will be announced in the app and here with an effective date. Separate consent will be requested when legally required.