Privacy Policy

What this policy covers

This policy covers the Virtunity website, the Virtunity structured-practice app and teacher tools, First Five Notes by Virtunity, and the American Music Appreciation and Start Band resources, including Find Your Sound. The products collect different information, so they are described separately below.

Start Band and Find Your Sound

Start Band does not require a student account and does not ask a student for a name, email, age, school, location, microphone, or camera. In-progress Find Your Sound choices and results are stored only in the browser tab's session storage. They contain musical preferences and instrument results, not student identity.

A director may optionally save program guidance in that browser's local storage, including local contact or purchasing notes. A complete configuration export may include those local fields. Share links remove director contact fields, practice contact instructions, purchase links, and local-store details before encoding the remaining program guidance.

Find Your Sound result links contain versioned, non-personal result state and expire after 30 days. Link checksums detect accidental changes; they are not encryption, authentication, or proof of identity. Start Band and Find Your Sound routes do not send Virtunity's lightweight website page-view events. A person who separately submits a website form is covered by the website-form practices below.

Virtunity accounts and practice data

Depending on how the app is used, Virtunity may collect:

• •Account and profile information, such as email address, name, role, school or studio name, and instrument
• •Teacher-student connections, invitations, assignments, and practice plans
• •Practice history, including session dates, duration, completed work, repetitions, notes, and other information entered during practice
• •A final-take recording when a student chooses to save one
• •Teacher lesson transcripts, recaps, and reviewed practice-plan drafts
• •Technical information needed to operate and troubleshoot the app, such as device type, app version, and diagnostic events

The microphone is used when a student chooses an audio-based tool or records a final take. Virtunity does not currently generate a complete performance score of pitch, rhythm, timing, tone, or articulation. A saved final take is uploaded so the student and their connected teacher can review it. We do not use saved student recordings to train software models.

Connected teacher access

A connected teacher can access information for students on that teacher's roster, including assignments, practice history, summary practice information, and whether a practice session has a saved recording. A teacher can play a student's assigned final take only after the student shares it with that teacher. Other saved recordings stay private to the student, although saving a take uploads it to Virtunity. Teacher access is restricted to students on that teacher's roster. Virtunity does not currently provide a parent or district-administrator dashboard.

Virtunity Practice account deletion

You can request deletion of your Virtunity Practice account inside the app. Deletion continues asynchronously after you confirm, and the app does not report completion until cleanup is verified.

For a student account, deletion removes the Virtunity profile, practice history, recordings, messages, and teacher relationships. It does not delete the teacher's account.

When a teacher deletes their Virtunity account, their account, private lesson notes, direct messages, student roster, and all access to student data are permanently deleted. Practice plans and assignments they created for students are kept so students do not lose their work, with the teacher's account identifiers removed and their name removed where it can be identified. Because this retained material is the teacher's own writing, it may still contain incidental references to them.

If the same sign-in is also used by First Five Notes, that identity and entitlement remain active. After cleanup, Virtunity keeps only an opaque operation ID, the time, and the result for 12 months. The receipt contains no name, email address, or deletion payload.

After verified cleanup, a person may create a new Virtunity account with the same sign-in. Deleted Virtunity data does not return.

First Five Notes

The core First Five Notes learning experience works without an account. Lesson progress is saved on the device. An individual sign-in can exist when an adult buys on our website so the purchase can be restored in the app. Accounts are created, and passwords reset, on the website.

If you use an individual purchase sign-in, we store:

• •The email address used for the individual website purchase or sign-in
• •An account ID (a Firebase user ID)
• •Website purchase records, used to restore access in the app

Some earlier school access used individual sign-ins. For those sign-ins, the email address, account ID, and entitlement may remain until the account is deleted or the school's access is migrated.

We use this only to run the account and restore your purchases in the app. We never sell it, never share it with advertisers or data brokers, and never use it for tracking. Firebase (sign-in), Stripe (checkout), and Resend (receipts) each process only what their job requires. The app has no ads and no third-party advertising or analytics SDK. It reports limited anonymous events such as app arrival, instrument opening, arcade opening, commerce actions, and error counts so we can operate and improve the lessons. On the web, it also sends anonymous progress counts. A count is sent the first time on a device that a lesson step, a Key step, or a Learn a song song is finished, and the first time a round of each arcade game is finished. A count is also sent the first time on a device that each step of a rhythm level is finished: tapping the beat, tapping the rhythm, and playing it. A count is also sent the first time on a device that a World Music Library song is played, and the first time it is heard to the end. The app also sends one arcade count per game on each day that game is played, and one count for each day the app is used. A count carries at most the instrument, the lesson, key, song, rhythm level, or game, and the step, plus two ranges worked out on the device: days used (1, 2-3, 4-7, or 8+) and visits (the same ranges). It has no name, account, school, program code, or device or session identifier, no exact counts or dates, and nothing about how the student played. The device keeps its own tally, and that tally stays on the device. We record only the date a count arrives, not the time. After 90 days we delete the individual counts and keep only daily totals. We look only at totals, and we hide any group smaller than 10. For these counts, the IP address is scrambled with a key that changes every day before our rate limit uses it, and our app does not store it. Like any website, our hosting provider keeps standard request logs, which include IP addresses, for a limited time. None of these events contain microphone audio or pitch data, and none of them identifies a student.

Website purchases keep working offline for up to 30 days between check-ins.

The adult account holder can delete an individual purchase account in the app (Parent Settings, behind the parental gate) or by emailing justin@virtunity.io. Deletion removes First 5 Notes access and its website purchases from our service. A sign-in used only for First 5 Notes is deleted entirely; a sign-in shared with a Virtunity account remains, and only its First 5 Notes data is removed. App Store purchases stay with Apple and are unaffected. We keep payment records only as required for legal, tax, or fraud-prevention purposes.

If microphone access is on, the app listens only to confirm the expected note. Sound is processed on the device and never recorded, stored, or sent anywhere. First Five Notes does not grade a complete musical performance.

First Five Notes is built for young beginners. Individual purchase accounts belong to adults, and a parental gate comes before every purchase, restore, deletion, and link out of the app.

If someone separately joins an update list or contacts support, the website-form practices below apply to that submission.

First 5 Notes Classroom

First 5 Notes Classroom uses one shared program credential for one band program at one school. The adult purchaser supplies program-contact and authorization information. We store:

• •The adult purchaser's name, work email, role, school, and band-program name
• •A generated program code, a shared program principal, and a slow salted hash of the shared passphrase rather than the passphrase itself
• •The access start, expiration, setup, rotation, and revocation status needed to operate the program credential
• •Stripe transaction identifiers and invoice-request records needed to fulfill the purchase, address refunds or disputes, and meet legal or accounting requirements
• •IP address and browser user-agent information processed to rate-limit setup, sign-in, checkout, and invoice requests and prevent abuse

No roster upload or individual student account is required for this shared credential. Students do not provide a name or email address. First Five Notes does not display advertising or create advertising profiles from Classroom use. We do not create individual student profiles, track individual students across devices, or create student-level practice analytics for this credential. Practice progress remains on each device. Microphone audio is processed in real time and is not recorded or uploaded. Limited aggregate website and security events may be processed as described in the Privacy Policy, but they are not associated with a named student.

Access ends at the stated annual expiration even if a device is offline. If an active program is revoked or fully refunded before that date, a device that is already offline may take up to 24 hours to receive the new revocation state. A partial refund does not automatically end access and may be reviewed by Virtunity support.

Card checkout is processed by Stripe. Virtunity receives purchase status and transaction identifiers, but not the full card number. A school purchase may instead be paid by an invoice through Stripe or by another payment method that Virtunity confirms before activation. We retain the invoice request and confirmed payment record for fulfillment, accounting, refunds, and disputes. Firebase provides parent sign-in, school-program sign-in, entitlement storage, and password-reset email. Resend may deliver transactional purchase and setup email. Upstash processes IP address and browser user-agent information used to rate-limit account, purchase, and school-program requests and prevent abuse. Supabase stores the limited website-analytics counts described in this policy.

An authorized school or program representative may ask us to review, correct, or delete the program-management information, rotate the shared passphrase, or revoke access by emailing hello@virtunity.io. We may verify the requester's authority and retain transaction or security records when legally or operationally required.

Free practice tools

Virtuner and our standalone metronome and drone work in the browser with no account and no sign-in. Settings and practice totals stay in that browser and are never sent to us.

If you turn the microphone on, the tuner listens only to work out the pitch you are playing. That happens on your device. Audio is never recorded, stored, or uploaded, and it never leaves the browser tab.

Virtuner reports anonymous usage counts so we know the tool is worth keeping:

• •Which of the tool's sections were opened, and whether the tuner, drone, or metronome was started
• •Whether microphone access was allowed, refused, or declined in favor of the reference tone
• •How long a visit lasted, recorded as a range rather than an exact time
• •Referrer, campaign parameters, and a temporary session identifier

These counts carry nothing that identifies a person or a device, and no audio or pitch information. There are no ads, no advertising trackers, and no third-party analytics software in any of the practice tools.

Website forms and analytics

The website may collect:

• •Information submitted through access, resource, curriculum, support, and feedback forms, including email, role, instrument, name, and the message provided
• •Basic engagement events, such as pages viewed, buttons selected, downloads, referrer, campaign parameters, a temporary session identifier, and a general device type (phone, computer or Chromebook)

On virtunity.io we use Vercel Web Analytics to count page visits in aggregate. It sets no cookies, records only the page path, and doesn't identify you. First 5 Notes and the Virtunity app don't use it.

Campaign parameters may be kept in browser session storage during a visit. We do not sell personal information or use student information for behavioral advertising.

How information is used

• •Provide accounts, assignments, practice tools, history, and connected-teacher features
• •Store and play a final take when the student chooses to save one
• •Draft a teacher-reviewed practice plan from lesson transcript and recap text
• •Respond to support requests and deliver requested access, resources, or product updates
• •Understand product use, troubleshoot problems, protect the service, and improve reliability
• •Comply with applicable law and enforce our terms

Service providers and disclosure

We use service providers that help us operate the products, including:

• •Google Firebase for authentication, app data, and saved recording storage
• •OpenAI for lesson and recap text, with names removed, used to draft teacher-reviewed practice plans
• •Stripe for First Five Notes website payment processing and legally required transaction records
• •Supabase for website forms, product feedback, and lightweight website analytics
• •Resend for account, transactional, product-update, and optional marketing email
• •Upstash for request rate limiting and abuse prevention
• •YouTube for embedded videos: the video player loads from youtube-nocookie.com only after a visitor presses play, and the American Music Appreciation course unit pages load video preview images from YouTube when they open
• •Google Fonts for the typefaces on the American Music Appreciation course pages, which the browser loads from Google when those pages open
• •Hosting, distribution, and infrastructure providers needed to deliver the website and apps

These providers process information for the services they perform. We may also disclose information when required by law, to protect users or the service, or as part of a business transaction with appropriate safeguards. We do not rent or sell student practice data or recordings.

Children and school use

First Five Notes is designed so its core learning experience can be used without creating an account or providing personally identifying account information.

New Virtunity Practice accounts are currently limited to people age 13 or older and require an explicit 13+ attestation. Virtunity does not currently offer a parent-consent or school/district authorization path for an under-13 account. Teachers should not assign Virtunity Practice to students under 13 and must follow their organization's approval and student-privacy requirements.

Parents and guardians may contact us to request access to, correction of, or deletion of a child's information. Schools should contact us before a broader deployment so the intended data flow, authorization, and retention requirements can be reviewed.

Retention and security

We retain information while it is needed to provide the service, meet legal or operational requirements, resolve disputes, and maintain security. Retention can differ by data type and backup cycle. We use access controls and encrypted transport and rely on our infrastructure providers' storage protections. No internet service can guarantee absolute security.

Your choices

You may unsubscribe from optional marketing email using the link in the message. You may also request access, correction, or deletion of personal information by emailing us. We may need to verify the request and may retain information when legally required or necessary for security and fraud prevention.

Changes

We may update this policy as the products and their data practices change. The “Last updated” date above identifies the current version. Material changes will be communicated through the website, app, or account email when appropriate.

Contact

For privacy questions or requests, email hello@virtunity.io.