Privacy Policy

Last updated: September 25, 2026

This Privacy Policy explains what information MiaoScore ("we", "us") collects when you use miaoscore.com, app.miaoscore.com, studio.miaoscore.com, and our mobile apps (together, "the Service"), and how we use it.

1. Information We Collect

Account information. When you sign up we collect your email address and display name. If you sign in with Google or Apple, the provider shares your name, email address, and profile identifier with us after your consent.

Practice and performance data. When you play with a connected MIDI keyboard or the on-screen keyboard, we record events such as notes played, timing, accuracy, and session duration, along with which scores you open, save, or purchase.

Content you upload. Creators may upload sheet-music files (PDF), audio previews, annotations, and profile information such as payout details.

Payment information. Purchases are processed by Lemon Squeezy as merchant of record. We receive the purchase record (items, amount, timestamp) but never see or store your full card number.

Technical data. We collect standard technical information — device type, browser/app version, approximate region derived from IP address, and error diagnostics — to operate and secure the Service.

2. How We Use It

• Provide the Service: authenticate you, sync your purchases and progress across devices, and render interactive scores.
• Deliver real-time performance feedback, practice statistics, streaks, and recommendations.
• Process purchases, deliver licensed content, and prevent fraud or license abuse.
• Send transactional emails (account confirmation, receipts, important service notices). We do not send marketing email without an explicit opt-in.
• Analyze aggregate, de-identified usage to improve the Service.

3. What We Do Not Do

• We do not sell your personal information.
• We do not record microphone audio of your acoustic piano; MIDI note events only.
• We do not use your scores, MIDI, or practice data to train machine-learning models.
• We do not knowingly collect data from children under 13 (see Section 7).

4. Third-Party Services

We share only the minimum data needed with the providers that run the Service:

• Supabase — authentication, database, and file storage (data stored in the Asia-Pacific region).
• Amazon Web Services — API compute and content delivery (Lambda, CloudFront, S3).
• Google / Apple — optional sign-in providers; they receive only what the OAuth sign-in flow requires.
• Lemon Squeezy — payment processing and merchant-of-record tax handling.

Each provider processes data under its own privacy policy. We may also disclose information where required by law or to protect the Service and its users.

5. Cookies and Storage

The Service uses cookies and browser storage only for authentication sessions and essential preferences — no advertising or cross-site tracking cookies. Analytics, if enabled, run in cookieless/consent-restricted mode.

6. Data Retention and Deletion

• Account and practice data are kept while your account is active.
• You may request deletion of your account at any time via support@miaoscore.com; we delete or anonymize personal data within 30 days except where retention is legally required (e.g., tax records for purchases) or needed for fraud prevention.
• Creator-published scores you purchased may remain accessible in aggregate, anonymized form for licensing records after account deletion.

7. Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has created an account, contact us and we will delete it.

8. Security

We use industry-standard measures — HTTPS/TLS in transit, encrypted storage, access-controlled infrastructure, and per-account data isolation — to protect your information. No method of transmission or storage is 100% secure; we will notify affected users of qualifying breaches as required by law.

9. International Users

The Service is operated from Vietnam with infrastructure in the Asia-Pacific region. By using the Service you consent to your information being processed in these locations, which may have different data-protection rules than your home jurisdiction.

10. Your Rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Email support@miaoscore.com to exercise them.

11. Changes

We may update this Policy; the "Last updated" date will change and material changes will be announced in the Service where reasonable.

12. Contact

Privacy questions or requests: support@miaoscore.com