Privacy Policy

1. Introduction

This Privacy Policy explains how Henry Reyes, based in the Dominican Republic ("we," "us," or "our"), collects, uses, and shares information when you use the Singing Lessons mobile application (the "App") on iOS and Android. By using the App, you agree to the practices described here. This policy should be read together with our Terms and Conditions.

The App does not require you to create an account, and we do not ask for your name, email address, or phone number to use it.

2. Information We Collect

We collect the following types of information:

• Voice recordings (provided by you): audio you record, or audio/video you upload, when you use the vocal analysis feature (see Section 3).
• Support messages (provided by you): if you email us, we receive your email address and whatever you include in your message.
• Device and app information (collected automatically): device model, operating system and version, app version, language, time zone, and approximate country or region derived from your IP address.
• Identifiers (collected automatically): random app-instance and analytics identifiers, a device identifier provided by your operating system for apps from the same developer (the iOS "identifierForVendor" or Android ID), and a push notification token if you allow notifications.
• Advertising identifier (collected by Google's ad software, only for users who see ads): on Android, your device's advertising ID (AAID); on iOS, the advertising identifier (IDFA) only if you allow tracking when the App asks. Google also receives your IP address, device information, and how you interact with ads (for example, whether an ad was shown, clicked, or watched to the end).
• Usage information (collected automatically): screens you view and actions you take in the App (for example, starting or completing an exercise, or viewing the paywall).
• Purchase information (from Apple or Google): which plan you bought, transaction dates, and subscription status, as reported by Apple or Google. We never receive your payment card details.

Information stored only on your device: your onboarding answers, progress, preferences, and real-time pitch detection data are stored and processed locally on your device and are not sent to us.

3. Microphone and Voice Recordings

The App asks for microphone permission to detect the pitch of your voice in real time during exercises. Real-time pitch detection happens entirely on your device; that audio is not recorded or sent anywhere.

If you choose to use vocal analysis, the App records (or you upload) a short clip of your singing. That clip is sent over an encrypted connection to our server, which forwards it to OpenAI, our AI service provider, to transcribe the audio. The transcription is then sent to OpenAI to generate your feedback.

We do not store your recordings on our servers. After your analysis is generated, the recording is discarded. Under OpenAI's API data policies, content sent through its API is not used to train its models and may be retained by OpenAI for up to 30 days solely for abuse and safety monitoring before it is deleted. A temporary copy of the clip may remain in your App's cache on your device until the operating system clears it or you delete the App.

You can deny or revoke microphone access at any time in your device settings. Pitch detection and vocal analysis will not work without it.

4. How We Use Information

We use the information described above to:

• Provide the App's features, including vocal analysis and access to lessons and exercises.
• Process and verify purchases and unlock Premium content.
• Send push notifications, such as practice reminders, if you allow them.
• Show ads to users who do not have an active subscription, including optional rewarded ads you can choose to watch to unlock a routine for a limited time, and measure how those ads perform. Users with an active subscription do not see ads.
• Understand how the App is used so we can fix bugs and improve lessons, features, and performance.
• Prevent fraud and abuse, including limiting how often a device can use the AI features.
• Respond to your support requests.
• Comply with legal obligations and enforce our Terms.

5. Service Providers We Use

We share information with the following service providers only as needed for them to perform services for us. Each processes data under its own privacy policy and our agreements with it:

• Apple (App Store) and Google (Google Play): payment processing and app distribution.
• RevenueCat: subscription and purchase management (anonymous app user ID, purchase history, device information).
• Google AdMob and Google's User Messaging Platform: ads for users without an active subscription, and the consent message shown in the EEA, UK, and Switzerland (advertising identifier, IP address, device information, and ad interactions). Learn how Google uses this information at https://policies.google.com/technologies/partner-sites.
• Google Firebase Analytics: app usage analytics.
• Mixpanel: app usage analytics.
• AppGlance: app usage analytics (iOS).
• OneSignal: push notifications (push token, device information, notification interactions).
• OpenAI: transcription and AI-generated vocal feedback.
• Cloudflare: hosting of our server, which forwards vocal analysis requests and checks usage limits (IP address and device identifier).
• Amazon Web Services (S3): delivery of lesson audio and other content (IP address in standard server logs).
• Deezer: artist images and song previews shown in the App (Deezer receives your IP address and the song or artist being looked up).

6. How We Share Information

We do not sell your personal information. The App shows ads from Google to users without an active subscription, and we request only non-personalized ads: they are not selected based on your activity in other companies' apps or websites. Google still uses the information described in Section 2 to deliver ads, limit how often you see the same ad, measure ad performance, and prevent fraud.

Besides the service providers listed above, we may disclose information if required by law or legal process; to protect the rights, safety, or property of our users, the public, or us; or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to the transferred information.

7. Data Retention

• Voice recordings: not stored by us; discarded after your analysis is generated (see Section 3 for OpenAI's retention).
• Usage-limit counters on our server: deleted automatically within 2 to 9 days.
• Analytics, advertising, notification, and purchase data: kept by the respective providers for as long as needed to provide their services, according to their retention settings and policies.
• Support emails: kept for as long as needed to handle your request and for our records.

8. Your Privacy Choices

• Ads and consent (EEA, UK, and Switzerland): when required, the App asks for your consent before showing ads. You can review or withdraw it at any time in the App under Settings > Privacy options.
• Tracking on iOS: the App asks before Google's ad software can access your advertising identifier (IDFA). You can change this at any time in your iPhone's Settings > Privacy & Security > Tracking.
• Advertising ID on Android: you can reset or delete your advertising ID in your device settings (usually Settings > Privacy > Ads, or Settings > Google > Ads).
• Avoiding ads altogether: users with an active subscription do not see ads.
• Microphone: allow or revoke access in your device settings.
• Push notifications: turn them off at any time in your device settings.
• Vocal analysis: optional. If you do not use it, no recordings leave your device.
• Subscriptions: manage or cancel in your App Store or Google Play account settings.
• Deleting the App removes the data stored locally on your device.

9. Children's Privacy

The App is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

10. Security

We use reasonable safeguards to protect information, including encrypted connections (HTTPS) for data sent from the App and signed requests to our server. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International Data Transfers

We are based in the Dominican Republic, and most of our service providers process information in the United States and other countries. These countries may have data protection laws different from those where you live. Where required, we rely on appropriate safeguards, such as the standard contractual clauses our providers offer.

12. Privacy Rights for Users in the Dominican Republic

We handle personal information in accordance with Dominican Republic Law No. 172-13 on the Protection of Personal Data. Under that law, you have the right to access the personal information we hold about you, and to request its rectification, update, or deletion, or to object to its processing, in the cases the law allows. You may also have the right to bring a habeas data action before the competent courts.

13. Privacy Rights for Users in the EEA, UK, and Switzerland

If data protection laws such as the GDPR apply to you, we process your information on these legal bases: to perform our contract with you (providing the App, vocal analysis, and purchases); our legitimate interests (improving the App, analytics, and preventing abuse); your consent (microphone access and push notifications, which you can withdraw at any time in your device settings, and advertising, which you can withdraw at any time in the App under Settings > Privacy options); and compliance with legal obligations.

You have the right to access, correct, delete, restrict, or object to the processing of your personal information, and the right to data portability. You also have the right to lodge a complaint with your local data protection authority.

14. Privacy Rights for U.S. State Residents

Depending on your state of residence (for example, California, Colorado, Connecticut, Virginia, or Utah), you may have the right to know what personal information we collect, access it, correct it, delete it, and opt out of its sale, sharing for targeted advertising, or profiling. We do not sell personal information. We request only non-personalized ads, so we do not use your personal information for targeted advertising based on your activity across other companies' apps or websites, and we do not engage in profiling that produces legal or similarly significant effects.

In the past 12 months, we have collected the categories of personal information described in Section 2: identifiers, internet or other electronic network activity (app usage), commercial information (purchase history), audio information (voice recordings), and approximate geolocation derived from IP address. We will not discriminate against you for exercising your rights.

15. How to Exercise Your Rights

To make a privacy request, email us at [email protected]. Because the App does not use accounts, we may ask for information that helps us locate your data, such as your purchase receipt or the details of a support conversation. We will respond within the time required by applicable law. You may also use an authorized agent where the law allows.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, if the changes are significant, notify you in the App. Your continued use of the App after changes take effect means you accept the updated policy.

17. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at [email protected].