A brief policy, plainly written.

What we collect

• Account data. email, name, password hash, role, onboarding answers.
• Saved signup details. when you deliberately ask us to save your place, we store your email, the instrument you selected, and where the request began. We send the one private signup link you requested. This does not give us permission to send marketing emails.
• Learning data. lesson progress, quiz scores, practice time, compositions, practice notes.
• Journey analytics. learning milestones, selected instrument, experience level, coarse device class, and first-touch campaign or referring domain. We do not retain complete referring URLs or full user-agent strings for product analytics.
• Google Analytics. we use Google Analytics to see which pages help people. It sets a cookie that distinguishes a returning visitor from a new one, and records the pages visited. Advertising features are switched off: we do not allow advertising cookies, ad personalisation, or the sharing of advertising identifiers, and Arco runs no ads. Never included: what you play, microphone audio, or anything you write. To opt out, use your browser’s cookie controls or any content blocker, nothing on the site changes and no feature is withheld.
• Billing data. a Stripe customer ID and subscription metadata. Stripe handles your card directly, keeping it safely out of our systems.
• Referral data. when you sign up through a personal invite, the inviter can see your account name, signup date and whether their free-month reward is ready or applied. They cannot see your email, billing details or learning activity.
• Technical data. IP, user agent, basic device info, used to keep your account secure.

How we use it

To provide, improve, and secure the service; understand where learners stop progressing; improve teaching and onboarding; bill you; and send transactional emails (signup-resume links you request, verification, billing, password reset, support). Marketing emails only if you opt in.

Only the optional live tuner uses your microphone, after you start it and allow access. Pitch analysis stays on your device; the audio is not recorded or uploaded. Lessons and practice tools do not capture your performance.

Your rights

You can update your profile or request account deletion in account settings. To request access to or an export of your data, or ask about deletion and retention, use the contact page. A self-service data export is not currently available.

Third parties

We use Stripe (billing), Resend (email), a database provider, and, when configured, PostHog for a copy of product events. Arco's own database remains the source for the administrative learning funnel. Each provider processes data under its own terms.