Privacy Notice

Information processed

• Account and access information, such as name, email address, role, school tenant, and subscription status.
• Practice responses, scores, progress, and written work.
• Short sight-singing audio and hybrid-exam media when an eligible user chooses those features.
• Limited technical and security logs needed to operate and protect the service.
• An age group and verification date. The date of birth entered in the neutral age screen is used once and is not retained.

Purposes and limits

Information is used to provide AP Music Theory practice, scoring, feedback, progress reporting, support, security, billing, legal compliance, export, and deletion. MIDI Mind does not sell student information, serve targeted advertising, build advertising profiles, or use student audio or school records to train general-purpose AI models.

Audio and media

Self-practice sight-singing audio is sent for immediate pitch analysis and is not intentionally persisted by MIDI Mind. Where a school-authorized persistent workflow is enabled, raw practice audio is isolated from derived analysis and deleted after processing, with a 60-minute exceptional-cleanup backstop. Hybrid-exam recordings and uploaded exam pages expire after 30 days. See the Retention and Deletion Notice.

Schools and children

Direct consumer microphone and hybrid-exam media features are unavailable to children under 13. School-managed under-13 collection remains disabled unless a separate institutional agreement, feature-specific authorization, complete required notice, and production enablement gate are all active. See the Children's Privacy Notice.

Service providers and disclosure

Information is disclosed only to service providers acting for MIDI Mind, to the relevant school or authorized user, or when required for safety or law. The current provider list and functions are published on the Subprocessors page.

Security, choices, and requests

MIDI Mind uses access controls, encryption in transit, provider-managed encryption at rest, private storage, logging, monitoring, and deletion automation. No system is risk-free. Users, parents, and schools may request access, correction, export, or deletion through the Privacy Requests page.

Applicable student-privacy commitments

School deployments are structured to support the Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA), the Illinois Student Online Personal Protection Act (SOPPA), and the California Student Online Personal Information Protection Act (SOPIPA), as applicable. A school agreement or data privacy addendum controls if it provides stronger protections.