Privacy policy

What you give us directly: your name, email, and password when you register; your profile photo, instrument, skill level, and goals if you fill those in; messages you send to friends or groups inside the app; and, when you pay by Zelle, the sender name and reference code you type in so we can match your transfer. If you use the class registration form before creating an account, that's your name, email, phone number, instrument, skill level, and anything you add in the notes field.

What the app generates from your use of it: your class bookings, credit balance, practice/streak activity, quiz results, and notification preferences.

What Atom (our AI assistant) collects: the chat window itself always opens fresh, whether or not you're signed in. But if you are signed in, what you asked Atom is still saved to your account behind the scenes (readable anytime under Settings → Privacy & Data) for 30 days, then automatically deleted. If you're not signed in, nothing you say to Atom is stored on our servers at all; the conversation lives only in your browser and disappears the moment you reload. Either way, if you ask Atom to connect you with a real person, that handoff saves your contact info (name and email, or just your account if you're signed in) and the full conversation so an admin can read it and reply. If you rate one of Atom's replies (thumbs up or down), we keep that reply's text and your rating.

We never see or store your bank account or card numbers. Zelle payments move directly between your bank and ours; the reference code you submit is just how we confirm which transfer was yours. We also don't run ad-tracking pixels or sell any of your data to anyone, ever, including to Google, whose AI we use to power Atom (more on that below).

A handful of vendors process data on our behalf, strictly to run the app: Resend sends the emails the app triggers (verification codes, notifications), Cloudflare stores uploaded avatars and lesson video/PDF files, Neon hosts the database, Netlify hosts the app itself, and Sentry receives error reports when something breaks so we can fix it. Google's Gemini API is what actually generates Atom's replies: whatever you type to Atom is sent to Google to produce an answer, along with a few facts about your account (your name, whether you have curriculum access, your credit balance) so the reply can be personalized. How Google itself retains or uses that data beyond generating the reply is governed by Google's own API terms, not something we control past choosing to use their service. None of these vendors are permitted to use your data for their own purposes.

Other students can see what you'd expect from a social feature: your profile (name, username, photo) if you add each other as friends, and anything you send them directly. If someone buys a "family bundle" of class credits for other accounts (say, a parent buying for each of their kids), typing your email into that flow tells them whether an account exists at that address and the name on it. That check requires them to already be signed in and is rate-limited, specifically so it can't be used to mass-probe addresses. If they complete the purchase, you get notified that credits were added to your account. Admins can see registration, payment, and booking details needed to run classes and verify payments, plus the contents of any conversation you escalate to a real person through Atom.

Two cookies are strictly necessary and always on: the sign-in session that keeps you logged in, and, only if you check "remember this device" at login, a second cookie that skips the 2FA code step on that browser for 7 days. Nothing else is set without asking first: the cookie banner offers an analytics category for future use, but as of this writing no analytics tool is wired up in the app at all, so that choice does nothing yet.

Your account, purchase and credit history, and everything else covered above stays for as long as your account exists. Nothing about it is automatically deleted just because you stop using the app. See the next section if you'd like it removed sooner.

Your ordinary back-and-forth with Atom is the one exception: it's automatically deleted 30 days after it's saved, no request needed. Anonymous (not signed-in) visitors' chats are never written to our servers in the first place, so there's nothing to retain for them at all. This doesn't apply to a conversation you've escalated to a real person: that becomes a support record like any other, kept the same way the rest of your account is.

Update your name, photo, learning preferences, and notification settings anytime from Settings, and see your own Atom conversation history (until it ages out on its own) under Settings → Privacy & Data. To correct, export, or fully delete your account and everything tied to it sooner than that, message us directly through the app or contact us the same way you would for a billing question. This is a small, hands-on operation, so full account deletion is handled by a real person rather than a self-service button, and we'll confirm once it's done.

If what we collect or who we share it with changes, we'll update this page and the date at the top. Material changes get an announcement too, the same way policy or pricing changes do.

Message us directly through the app and we'll answer honestly, not with fine print.