Privacy Policy

The short version

• What you play stays on your phone. The microphone sound, your recordings and the notes from your MIDI keyboard are processed on your device and are never uploaded.
• An account is optional. If you create one, we keep your email address so you can sign in and get your subscription on another phone.
• We measure how the app is used, to improve it. You can turn this off at any time in Settings, under "Share usage data".
• If you give a key to someone, you send the link yourself. We never see who you send it to.
• The app shows no ads and does not track you across other companies' apps or websites. Our website uses analytics and advertising measurement (see "Our website").
• You can delete your account from the app, in Settings, under Account.

What stays on your phone

• Sound from the microphone. Maestria listens to your piano to recognise the notes you play. This happens on your phone. The sound is not sent to us or to anyone else.
• Your recordings. Each evening keeps one take so you can listen back. Takes are stored in the app's private storage on your phone, and you can delete them in Settings. They are not backed up to our servers.
• MIDI. The notes sent by a digital piano over USB, MIDI or Bluetooth stay on your phone. We only count connections and errors (see "Usage data" below), never the notes or the name you gave your keyboard.
• Your practice profile, such as the span of your hand, stays on your phone.

On Android 11 and earlier, the system asks for the location permission before the app can look for Bluetooth MIDI keyboards. Maestria uses this permission only to find your keyboard and never reads your location.

What we collect, and why

When you set up Maestria. The answers you give at the start (the piece you choose, your level, your instrument, the time you can give each evening, what makes the piece feel hard) are used to build your plan. They are stored with your purchase record at RevenueCat and in our database at Supabase, under a random identifier, and are also used, in aggregate, to understand who Maestria helps.

Your subscription. Purchases are made and paid through Apple or Google. We never see your card. RevenueCat tells the app whether your subscription is active and keeps the history of your purchases (product, price, currency, trial).

Your account (optional). If you create an account, we keep your email address and send you a 6-digit code to sign in. Your account lets your subscription follow you to another phone.

Messages and answers you send us. When you write to us from the app, we keep your message, your email address if you are not signed in, and technical details that help us answer (app version, operating system, phone model, the piece you are working on). From time to time we may email you a short question about your experience (for example, how disappointed you would be without Maestria, or why you stopped). Answering is optional, and every such email has a one-click unsubscribe link.

Usage data. To understand what works and what does not, the app records events such as the steps of the onboarding, the evenings you complete, the number of attempts, how you felt about an evening, searches that found nothing, whether a MIDI keyboard connected, the steps of giving and opening a key, and where you heard about Maestria if you tell us. These events are linked to a random identifier, not to your name or email. They are sent to PostHog. You can turn this off at any time in Settings, under "Share usage data". When it is off, the app stops sending usage events and crash reports, and we stop sending your evenings to our server. The milestones that earn keys are still sent, because keys cannot work without them (see "Keys").

Keys. If you subscribe, the app tells our server when you reach a milestone on your piece (your first level, a new tempo, playing it by heart), so that it can give you keys. A key is a link that offers a month of Maestria to someone you choose. You send it yourself, with your phone's share menu, and we never see who you send it to. When someone opens your key, we keep the key with its state and dates, the type of phone it was opened on, the piece that person chose on our website, and the random identifier of the person who claimed it, so that the month can be given and the key can come back to you. You are told only that a key came back, never who opened it. To find out whether keys help, a random 10% of subscribers receive no keys for their first 90 days.

Notifications. If you have given a key and allow notifications, the app sends our server a notification token, so that we can tell you when a key comes back. The token is stored with your random identifier and passed to Expo, which delivers the notification through Apple or Google (Firebase Cloud Messaging). You can turn notifications off at any time in your phone's settings.

Crash reports and diagnostics. When the app crashes or meets an unexpected error, it sends the error and technical details (app version, operating system, phone model, language, time zone) so we can fix it. This follows the same "Share usage data" setting.

No location. We do not collect your location. Our analytics provider does not keep your IP address and does not derive a location from it.

The teacher's voice. The teacher's sentences are spoken by a synthetic voice made by ElevenLabs. Only the text of the teacher's sentence (for example, "Bar 7, beat 3 came a little late.") is sent to create the audio. It contains nothing about you.

Our website

When you visit www.maestria.app, we measure visits and the results of our advertising with Google Analytics, PostHog and the TikTok pixel, with your consent where the law requires it. If you buy an offer on the website, the payment is made through Stripe, which receives your payment details and email address; we receive your email address, the offer you bought and the answers you gave on the website, and we tell TikTok and Google that a purchase happened, identified by a random code (never your email). If you leave your email address on the website, we use it only to write to you about Maestria. When you open a key on our website, the page sends us the key's code, the type of phone you use and the piece you choose, so that your phone's store can offer you the month. On Android, the link to Google Play carries the key's code, so that the app can find your key once it is installed.

How we use information

We use the information above to:

• provide Maestria: build and adjust your plan, give access to your subscription, restore it on another phone;
• give you keys to share, give the offered month to the person who opens one, and tell you when a key comes back;
• answer your messages and support requests;
• send the emails you need (sign-in codes) and a small number of questions about your experience, which you can stop at any time;
• understand how Maestria is used and improve it;
• keep the service secure and prevent abuse;
• meet our legal obligations, such as keeping purchase records.

For people in the European Economic Area, the United Kingdom and similar jurisdictions, our legal bases are: the performance of our contract with you (providing the app and your subscription), our legitimate interests (improving Maestria, security, and the questions we send, which you can always refuse or stop), your consent where the law requires it, and our legal obligations.

Who helps us

We do not sell or rent your information. We share it only with the service providers that run Maestria for us, under contracts that limit their use of it to providing their service:

• Supabase: database, sign-in and server functions (United States).
• RevenueCat: subscription management (United States).
• PostHog: product analytics and crash reports (United States).
• Resend: delivery of our emails (United States).
• Expo: delivery of notifications (United States), through Apple Push Notification service and Google's Firebase Cloud Messaging.
• ElevenLabs: the teacher's synthetic voice; receives only the text of the teacher's sentences.
• Apple and Google: app distribution and payments, under their own privacy policies.
• Cloudflare: hosting of www.maestria.app and its server functions, DNS and content delivery (United States). Cloudflare receives your IP address and the details your browser sends with each request, to deliver the pages and to tell our website which country you are in. We do not use Cloudflare's analytics.
• Stripe: payments made on the website (United States).
• Google Analytics and TikTok: measurement of visits and advertising on the website only, never in the app.

We may also disclose information if the law requires it, or as part of a merger or sale of the business, in which case this policy would continue to apply to your information.

International transfers

Our providers are mostly located in the United States. When your information leaves the European Economic Area or the United Kingdom, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-U.S. Data Privacy Framework.

How long we keep information

• Your account, plan and messages: until you delete your account, or until you ask us to delete them.
• Your keys, the milestones that earned them and your notification token: until you delete your account, or until you ask us to delete them.
• Usage events and crash reports: for as long as they are useful to improve Maestria, and no longer than our analytics provider's retention period.
• Purchase records: as long as the law requires us to keep accounting records.

When you delete your account (in the app: Settings, Account, Delete my account), we immediately delete your email address, your plan, your messages and answers, the keys you were given to share, the milestones that earned them, your notification token, and the rest of your data from our database. A key you received from someone else is detached from you. If you subscribe without an account, write to us and we will delete your keys and notification token. Purchase records are kept, detached from your account, where the law requires it. Deleting your account does not delete the usage events held by PostHog or the purchase history held by RevenueCat: they are linked only to a random identifier, never to your email address, and are kept for the purposes described above. If you also want them deleted, write to contact@maestria.app and we will do it, as the law allows you to ask. You can also request deletion on the web at www.maestria.app/delete-account.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your information, to object to or restrict certain processing, and to withdraw your consent. You can:

• turn analytics off in Settings, under "Share usage data";
• turn notifications off in your phone's settings;
• delete your recordings in Settings;
• delete your account in Settings, under Account;
• unsubscribe from our emails with the link at the bottom of each one;
• write to us at contact@maestria.app for anything else. We answer within one month.

If you are in the European Union, you can also complain to your data protection authority (in France, the CNIL, www.cnil.fr).

California residents. We do not sell personal information. On our website, the TikTok pixel may count as "sharing" for advertising under California law; you can opt out with the Your privacy choices link at the bottom of every page of our website or by writing to us. We do not use sensitive personal information. You may ask us what we collect and ask us to delete it, as described above, without being treated differently.

Children

Maestria is meant for adults and is not directed to children under 13 (or under 16 in the European Union). We do not knowingly collect information from children. If you think a child has given us information, write to us and we will delete it.

Security

Information is encrypted in transit between the app and our providers. Access to our systems is limited to what is needed to run Maestria. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you, as the law requires.

Changes

If we change this policy, we will update the date at the top and, for significant changes, tell you in the app or by email.

Contact

Obsidian Group, which owns Maestria

1235 rue du Bœuf Couronné, 97355 Macouria, France

contact@maestria.app