We collect information you provide directly: email address, display name, and password when you create an account. We also collect usage data including drill scores, session history, and song content you create within the Service. Payment information (credit card details) is collected and processed securely by Stripe — we do not store your full card number. We collect device information (browser type, operating system) and UTM attribution parameters to understand how you found us.
We use your information to: provide and operate the Service; personalize your training sessions and adapt difficulty to your skill level; process payments and manage subscriptions; send transactional notifications (password resets, billing receipts, trial reminders); improve the product through aggregated, anonymized analytics; and communicate product updates (you can opt out anytime).
We use the following third-party services to operate the Songwriting School and the wider Main Act platform:
Authentication, Firestore database, and hosting. Google processes data under their Cloud Data Processing terms. Your data is stored in Google Cloud infrastructure.
Payment processing. Stripe handles all payment card data and is PCI DSS Level 1 certified. We receive only transaction confirmation and subscription status.
AI-powered features (lyric feedback, Ask Sensei, co-writing tools). Content you submit to AI features is sent to Anthropic for processing. Anthropic does not use your data to train their models.
Your data is stored on Firebase (Google Cloud) infrastructure. All data is encrypted in transit via TLS. Payment data is handled by Stripe under PCI DSS Level 1 compliance. We implement access controls and security best practices to protect your information, but no system is 100% secure.
You have the right to: access the personal data we hold about you; correct any inaccuracies in your data; delete your account and all associated data; export your data (songs, lyrics, progress); and opt out of marketing communications at any time. To exercise any of these rights, contact us at support@mainact.app.
We retain your data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days. Some anonymized, aggregated data may be retained for analytics purposes. Backup copies may persist in our systems for up to 90 days before being purged.
We use localStorage to save your app preferences, offline data, and session state. We do not use tracking cookies. Firebase Analytics collects anonymized usage data to help us improve the product. You can clear localStorage through your browser settings at any time.
The Songwriting School and the Main Act platform are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. This is in compliance with the Children's Online Privacy Protection Act (COPPA).
Your data is processed and stored in the United States. If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your data is contractual necessity (to provide the Service) and legitimate interest (to improve the product).
We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
Questions about this Privacy Policy? Contact us at support@mainact.app.