Privacy Policy

1. Introduction

Sound Step Music ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our music education platform.

2. Information We Collect

2.1 Personal Information

• Parent/Guardian Information: Name, email address, password (encrypted)
• Child Information: First name, age, current music skill level
• Payment Information: Processed securely through Stripe (we don't store credit card details)
• Communication Data: Messages sent through our contact forms or support system

2.2 Usage Information

• Learning Progress: Lesson completion, quiz scores, time spent on activities
• Platform Usage: Pages visited, features used, session duration
• Device Information: IP address, browser type, operating system
• Cookies and similar tracking technologies

3. How We Use Your Information

• Provide and improve our educational services
• Track and display learning progress and achievements
• Process payments and manage subscriptions
• Send important updates about your account or service changes
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve our platform
• Ensure platform security and prevent fraud

4. Children's Privacy (COPPA Compliance)

We are committed to protecting children's privacy. Our service is designed for children to use under parental supervision. We do not knowingly collect personal information directly from children under 13 without parental consent.

• Parents create accounts and add their children's profiles
• We only collect minimal information about children (first name, age, learning progress)
• Children cannot communicate with other users or share personal information
• Parents have full control over their children's data and can delete it at any time

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in these limited circumstances:

• Service Providers: Trusted third parties who assist in operating our platform (hosting, payment processing, analytics)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of our business
• With Your Consent: When you explicitly agree to share your information

6. Data Security

We implement industry-standard security measures to protect your information:

• SSL encryption for all data transmission
• Secure password hashing using Argon2
• Regular security audits and updates
• Limited access to personal information on a need-to-know basis
• Secure cloud hosting with MongoDB Atlas

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at privacy@soundstepmusic.com.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for login and basic functionality
• Analytics Cookies: Help us understand how you use our platform
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but some features may not work properly if disabled.

9. Data Retention

We retain your information only as long as necessary to provide our services and comply with legal obligations:

• Account information: Until you delete your account
• Learning progress: Until you delete your account or request removal
• Payment records: As required by law (typically 7 years)
• Support communications: 2 years after resolution

10. International Data Transfers

Our services are hosted in the United States. If you access our platform from outside the US, your information may be transferred to, stored, and processed in the US. We ensure appropriate safeguards are in place for international transfers.

11. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy on our website
• Sending email notifications for material changes
• Updating the "Last Updated" date at the top of this policy

12. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us: