Privacy policy

This policy explains how easyimprov (“we”, “us”) handles personal data when you use our website and app. It applies together with our terms of use.

1. What we collect

Your account

• Your email address and a password. Passwords are stored only as a secure hash by our authentication provider — we never see them in plain text.
• A display name, which you can change.
• If you sign in with Google: your name, email address and the basic profile details Google shares with us. We never get your Google password.
• Your plan and how many analyses you've used.
• If you subscribe to Pro: your subscription's status, billing period and the ids Paddle gives your customer record and subscription. We never see or store your card details.

Your tracks

• The audio files you upload, with their file name and size.
• What we derive from them: key, tempo, time signature, chords, and the suggestions built on top of those.

Technical data

• Cookies that keep you signed in. They are strictly necessary.
• How you found us: if you arrive from an ad or another website, we keep the campaign tags in the link (such as utm_source), the ad's click id and the name of the referring site in a cookie on our own domain for up to 30 days. If you create an account, we save them with it. This tells us which ads and links bring people who find easyimprov useful. We use no third-party analytics or advertising trackers.
• Server logs kept by our hosting providers (such as IP address, browser type and the time of a request), used for security and to fix problems.

Stored only on your device

• A copy of each track you upload is kept in your browser's own storage so it plays back instantly. That copy stays on your device, and clearing your browser data removes it.
• Your preferences, such as theme, volume and playback speed.

2. How we use it

• To create and secure your account, and sign you in.
• To analyse the tracks you upload and show you the results, on any device.
• To send emails you need — confirming your address, sign-in links and password resets.
• To apply your plan's limits and keep the service safe from abuse.
• To learn which ads and websites bring us new users and subscribers.

We do not sell your data, show you ads, or share your tracks with anyone. We do not use your audio to train machine-learning models.

3. Legal bases

Where data-protection laws such as Brazil's LGPD or the EU's GDPR apply, we process your data to perform our contract with you (running your account and analyses), on our legitimate interest in keeping the service secure and working, to meet legal obligations, and with your consent where the law requires it.

4. Who helps us run easyimprov

We rely on a small number of providers, who process data only on our instructions:

• Supabase — database, authentication and file storage, on servers in the United States.
• Google — only if you choose “Continue with Google”.
• Paddle — only if you subscribe to Pro. Paddle.com is our reseller and the Merchant of Record for our orders: it collects your payment and billing details (name, email, country, payment method) directly, under its own privacy notice, and tells us your subscription's status.
• Cloud providers that host our website and the service that listens to your tracks, and an email delivery provider.

Some of these providers are outside your country. When data crosses borders, we rely on the safeguards the applicable law provides for.

5. How long we keep it

We keep your account data and tracks for as long as your account exists. If you ask us to delete your account, we delete your data within 30 days, except where the law requires us to keep something for longer.

6. Your rights

You can ask to access, correct, export or delete your personal data, to restrict or object to how we use it, and to withdraw any consent you've given. Write to us at support@easyimprov.app and we'll answer within the time the law sets. You can also complain to your data-protection authority — in Brazil, the ANPD.

7. Security

Data travels encrypted (HTTPS). Your tracks sit in private storage protected by access rules that let only your account read them, and access on our side is limited to what running the service requires. No system is perfectly secure, but we work to keep yours safe and will tell you if something goes wrong that affects you.

8. Children

easyimprov is not meant for children under 13, and we don't knowingly collect their data. If you are under 18, please use easyimprov with a parent's or guardian's permission.

9. Changes to this policy

If we change this policy, we'll update the date at the top. For significant changes, we'll also let you know by email or in the app before they take effect.

10. Contact

Questions about your privacy? Reach us at support@easyimprov.app.