Privacy Policy

We collect information you provide when you create an account, join a class, contact us, or use MIDI Mind. This may include your name, email address, school or class association, and account preferences. Authentication is provided through Clerk and may include Google sign-in. MIDI Mind does not receive your Google password.

We collect practice activity needed to provide the service, including generated prompts, submitted responses, scores, rubric results, feedback, progress history, and teacher-assigned or class-linked activity.

When you use a recording feature, MIDI Mind may process a short audio recording for scoring and feedback. Raw audio is stored separately from derived pitch, rhythm, rubric, and progress information.

We also collect limited technical and operational information, such as browser and device information, IP address, session identifiers, security events, request logs, and error information. These records help us keep the service reliable, secure, and available.

Short recordings are used only for the educational service being provided, such as scoring, feedback, progress reporting, retention or deletion operations, and service troubleshooting. MIDI Mind does not use raw student audio for targeted advertising, unrelated profiling, or general-purpose model training.

For school-managed recording, raw audio is retained for up to 30 days by default. A school may instead select deletion after processing. Derived analysis, scores, and progress records are separate from raw audio and may remain after the recording is deleted unless a broader deletion request applies.

Stripe processes payments. MIDI Mind receives transaction and purchase information needed to provide access, but does not store full payment-card numbers on its own servers.

We use service providers to operate MIDI Mind, including Clerk for authentication, Supabase for application data, Vercel for hosting, Stripe for payments, Resend for email delivery, and Google when you choose Google sign-in. These providers process information for us under their own security and privacy terms.

MIDI Mind does not sell personal information and does not use personal information for targeted advertising. We share information only with service providers that help operate MIDI Mind, with a school or teacher when the account is school-managed, when you direct us to share it, or when disclosure is reasonably necessary for legal compliance, safety, security, or a business transfer.

We retain account, educational, transaction, and operational records for as long as reasonably necessary to provide the service, honor access commitments, maintain security and audit records, resolve disputes, and meet legal obligations. Retention may differ for school-managed accounts according to the school's settings and agreement.

You may request access, correction, export, or deletion of personal information by contacting us. Some records may be retained when required for security, legal, billing, or educational-record obligations.

Students may use MIDI Mind through a school, teacher, or other authorized educational program. Schools are responsible for providing required notices and obtaining permissions appropriate to their students and local requirements. Direct-to-consumer audio recording for children under 13 is disabled unless a dedicated parental consent process is provided.

You may update account information, choose whether to use optional recording features, and contact us about privacy rights that apply where you live. You may also stop using Google sign-in by using another available sign-in method and revoking MIDI Mind's access through your Google account settings.

We use administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.