A brief policy, plainly written.

What we collect

• Account data. email, name, password hash, role, onboarding answers.
• Saved signup details. when you deliberately ask us to save your place, we store your email, the instrument you selected, and where the request began. We send the one private signup link you requested. This does not give us permission to send marketing emails.
• Learning data. lesson progress, quiz scores, practice time, compositions, practice notes.
• Journey analytics. learning milestones, selected instrument, experience level, coarse device class, and first-touch campaign or referring domain. We do not retain complete referring URLs or full user-agent strings for product analytics.
• Google Analytics. we use Google Analytics to see which pages help people. It sets a cookie that distinguishes a returning visitor from a new one, and records the pages visited. Google Analytics advertising features are switched off: we do not enable its advertising cookies, ad personalisation, or advertising identifier sharing. Never included: what you play, microphone audio, or anything you write. To opt out, use your browser’s cookie controls or any content blocker, nothing on the site changes and no feature is withheld.
• Optional Reddit measurement. On the Reddit signup route, adults aged 18 or older may choose to share a confirmed signup with Reddit. This is off unless you check the optional consent box and does not affect your lessons. The Reddit Pixel runs only on a brief confirmation page, using a random conversion ID, Reddit ad click ID when present, cookies, and browser/network information (which may include IP address) to measure the ad. We do not supply your email, phone number, account ID, lesson activity, or playing; automatic email and phone matching are disabled. A temporary receipt is kept in this tab for up to ten minutes and consumed once. Decline by leaving the box unchecked; you can clear Reddit cookies through your browser. We do not send your lesson completions to Reddit.
• Billing data. a Stripe customer ID and subscription metadata. Stripe handles your card directly, keeping it safely out of our systems.
• Referral data. when you sign up through a personal invite, the inviter can see your account name, signup date and whether their free-month reward is ready or applied. They cannot see your email, billing details or learning activity.
• Technical data. IP, user agent, basic device info, used to keep your account secure.

How we use it

To provide, improve, and secure the service; understand where learners stop progressing; improve teaching and onboarding; bill you; and send transactional emails (signup-resume links you request, verification, billing, password reset, support). Marketing emails only if you opt in.

Only the optional live tuner uses your microphone, after you start it and allow access. Pitch analysis stays on your device; the audio is not recorded or uploaded. Lessons and practice tools do not capture your performance.

Your rights

You can update your profile or request account deletion in account settings. To request access to or an export of your data, or ask about deletion and retention, use the contact page. A self-service data export is not currently available.

Third parties

We use Stripe (billing), Resend (email), a database provider, and, when configured, PostHog for a copy of product events. Arco's own database remains the source for the administrative learning funnel. For adult visitors who explicitly opt in, Reddit also receives signup measurement under its Business Tools terms and privacy policy. Each provider processes data under its own terms.