Privacy Policy — Music Theory Lessons

This privacy policy explains how Music Theory Lessons collects, uses, and protects information when you use the Music Theory Lessons Academy at musictheorylessons.net — including when you create an account, sign in with Google, access course content, or subscribe to the academy.

Who we are

Music Theory Lessons operates the Music Theory Lessons Academy, a comprehensive online learning platform for music theory at musictheorylessons.net. This policy describes our practices for that service.

Information we collect

We collect information in these ways:

Account information — email address, display name, and authentication identifiers when you create an account or sign in.
Google sign-in — if you choose "Continue with Google," we receive your name, email address, and profile picture from Google through our authentication provider. We use this information only to create and maintain your academy account. Google's own privacy policy governs how Google handles your data before it is shared with us.
Learning progress — course progress, lesson completions, quiz scores, and preferences you save in your account.
Subscription and billing — subscription status, plan type, and payment history. Payment card numbers are processed by Stripe; we do not store full card details on our servers.
Product usage — analytics events about how you use the platform (for example, which lessons you access or whether you completed a quiz). We do not store raw IP addresses in our application database for analytics.
Communications — if you contact us or subscribe to email updates, we keep the information you provide so we can respond.

How we use information

We use the information above to:

Provide, operate, and improve the Music Theory Lessons Academy
Authenticate you and keep your account secure
Save your learning progress and subscription entitlements
Process payments and manage billing
Send transactional emails such as sign-in links and billing receipts
Understand product usage and fix problems
Respond to support requests and comply with legal obligations

We do not sell your personal information.

Service providers

We use trusted third parties to run the service. They process data on our behalf:

Supabase — authentication and database hosting
Stripe — subscription billing and payment processing
Netlify — application hosting and content delivery
Cloudflare — security checks at sign-up and sign-in (Turnstile)
Resend — account, reminder and class summary emails
Anthropic or OpenAI — answers to questions asked of Melo, the AI tutor. We send the question, the page it was asked from and a summary of your recent lesson and quiz progress, never your name or email address.
Google — optional sign-in through Google OAuth
Wistia — video hosting for course lessons
Meta — the Meta Pixel, which tells Meta (Facebook and Instagram) which public pages were viewed and when actions such as creating an account, starting a trial or completing a purchase happen, so we can measure and improve our ads. We do not send your name, email address or learning data to Meta. Page views are never sent from the dashboard, lessons, classes or student games

Each provider has its own privacy practices. We share only the information needed for them to perform their services.

Cookies and local storage

We use session cookies and similar technologies to keep you signed in and to remember preferences such as your learning progress. The Meta Pixel sets an advertising cookie (_fbp) to measure our ads. You can control cookies through your browser settings, though some features may not work if essential cookies are disabled.

Data retention

We keep account and learning progress data while your account is active. If you delete your account or ask us to remove your data, we delete or anonymize personal information within a reasonable period, except where we must retain records for billing, security, or legal compliance.

Security

We use industry-standard safeguards including encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, but we work to protect your information.

Students, classes and schools

Teachers on the Educator plan can invite students to a class. When a student joins a class, we collect the same account information as for any member (name, email address and learning progress), and we share the following with that student's teacher only:

the student's name and email address as entered on their account
lesson progress, practice results, quiz attempts and scores
the skills the student misses most often, and when they were last active

Classmates never see each other's real names or email addresses. Class leaderboards are off unless the teacher turns them on, and they show only randomly assigned stage names.

Teachers can upload their own banner image for a class. Uploaded banners are stored as public images: anyone who has the image's link can view it, so teachers are asked not to upload photos of students or anything private. A banner is deleted from our storage when the teacher replaces or removes it.

We use student information only to provide the service to the student and their teacher. We do not sell it, use it for advertising, or build profiles of students for any purpose other than their learning in the course.

A teacher can remove a student from a class at any time, which ends the teacher's access to that student's results. A student, parent or guardian, teacher or school can ask us to delete a student's account and data by emailing us at the address below, and students can delete their own account from Preferences.

Children's privacy

You must be 13 or older to create an account. Students aged 13 to 17 (or under the age of majority where they live) may use the service with the permission of a parent or guardian, or as part of a class run by their school or teacher.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it.

Your choices and rights

Depending on where you live, you may have the right to:

Access, correct, or delete personal information we hold about you
Export your learning progress data
Withdraw consent where processing is based on consent
Object to or restrict certain processing
Disconnect Google sign-in by using a password-based account or deleting your account

To make a request, contact us using the details below. We may need to verify your identity before responding.

International users

The Music Theory Lessons Academy is operated from Canada. If you access the service from outside Canada, your information may be processed in Canada or in the countries where our service providers operate, which may have different data-protection laws than your jurisdiction.

Changes to this policy

We may update this privacy policy from time to time. When we make material changes, we will post the revised policy on this page and update the "Last updated" date. Continued use of the service after changes take effect means you accept the updated policy.

Contact us

Questions about this privacy policy or your personal information? Email us at info@musictheorylessons.net or reach us on our Facebook page.