Privacy Policy

Last Updated: November 13, 2025

Overview

VoSci is committed to protecting your privacy while providing excellent music education. This Privacy Policy explains how we collect, use, and protect your information.

Our Privacy-First Approach:

  • ✅ No cookie banners – We don’t use tracking cookies
  • ✅ Session-only tracking for anonymous visitors
  • ✅ Minimal data collection – Only what’s necessary to provide our service
  • ✅ No selling of data – Your information is never sold to third parties
  • ✅ GDPR compliant – Respecting your privacy rights

Information We Collect

1. Account Information (Registered Users Only)

When you create an account with VoSci, we collect:

  • Email address (for login and communication)
  • Name (optional, for personalization)
  • Password (securely hashed, never stored in plain text)
  • Payment information (processed securely through Stripe – we never store credit card details)

Legal Basis: Contract performance – This information is necessary to provide you with our educational services.

2. Practice Activity Data (Registered Users)

To track your progress and provide personalized learning, we collect:

  • Practice time – Minutes spent on exercises
  • Practice categories – Type of activity (Ear Training, Sight Reading, Theory)
  • Pages visited – Which exercises and lessons you access
  • Progress metrics – Points earned, streaks, skill development
  • Session data – When you start and end practice sessions

Legal Basis: Contract performance – This tracking is essential for:

  • Providing your progress dashboard
  • Calculating your points and achievements
  • Generating personalized recommendations
  • Enabling teacher oversight (if applicable)

Important: You can view all your practice data in your dashboard. To delete your data, you must first cancel your VoSci Academy membership. Data deletion is only available after membership cancellation.

3. Anonymous Visitor Data (Non-Registered Users)

If you visit VoSci without creating an account (e.g., trying our Vocal Range Profile tool), we collect minimal session-only data:

  • Session ID – Temporary identifier valid only for your current browser session
  • Page views – Which pages you visit during your session
  • Feature usage – Interactions with tools like VRP (Vocal Range Profile)
  • Browser information – Basic technical data (browser type, device type)

Key Privacy Features:

  • ✅ No cookies – We don’t use tracking cookies for anonymous visitors
  • ✅ Session-only storage – All data automatically deletes when you close your browser tab
  • ✅ No cross-session tracking – We cannot track you across multiple visits
  • ✅ No persistent identifiers – Anonymous IDs are regenerated each session

Legal Basis: Legitimate interest – To understand how visitors use our platform and improve the user experience. This minimal tracking has negligible privacy impact due to its session-only nature.

Your Choice: If you prefer not to be tracked at all, simply do not interact with our platform. Once you close the browser tab, all anonymous data is automatically purged from your browser.

How We Use Your Information

For Registered Users

  1. Service Delivery

    • Track your practice progress
    • Calculate points, streaks, and achievements
    • Generate personalized practice recommendations
    • Enable teacher dashboards (if enrolled in a class)
    • Send important service updates via email

  2. Platform Improvement

    • Identify popular exercises and content
    • Optimize user experience based on usage patterns
    • Develop new features based on user needs
    • Analyze aggregate trends (never individual behavior for marketing)

  3. Communication

    • Send account-related emails (password resets, billing updates)
    • Optional: Practice reminders and achievement notifications (you can opt out)
    • Optional: Educational content and product updates (you can unsubscribe anytime)

For Anonymous Users

  • Understanding which features are most popular
  • Improving website performance and user experience
  • Identifying technical issues and bugs

We do NOT:

  • Sell or rent your data to third parties
  • Use your practice data for advertising
  • Track you for marketing purposes without your consent
  • Share your information except as required by law

Data Storage and Security

Where We Store Data

  • Primary Database: Cloudflare D1 (global edge network)
  • Analytics: Cloudflare Analytics Engine (90-day retention)
  • Authentication: Memberstack (SOC 2 compliant)
  • Payments: Stripe (PCI-DSS compliant)

All services are hosted in secure, GDPR-compliant infrastructure.

How Long We Keep Data

Data Type Retention Period
Account information While your account is active + 30 days after cancellation
Practice history While your account is active (deleted 90 days after account cancellation)
Anonymous session data Session duration only (auto-deletes when tab closes)
Analytics data 90 days (Cloudflare Analytics Engine)
Payment records 7 years (legal requirement for tax purposes)
Email communications While your account is active

Security Measures

  • 🔒 Encryption in transit – All data transmitted over HTTPS
  • 🔒 Encryption at rest – Database encryption enabled
  • 🔒 Secure authentication – Password hashing with bcrypt
  • 🔒 Regular security audits – Cloudflare’s enterprise security
  • 🔒 Access controls – Strict employee access policies

Your Privacy Rights (GDPR & CCPA)

You have the following rights regarding your personal data:

Right to Access

Request a copy of all data we hold about you.

Right to Rectification

Correct any inaccurate information in your account.

Right to Erasure (“Right to be Forgotten”)

Request deletion of your account and all associated data. Note: You must cancel your VoSci Academy membership before requesting data deletion. Practice tracking data is essential to provide our service, so it cannot be deleted while your membership is active.

Right to Data Portability

Receive your practice data in a machine-readable format (JSON/CSV).

Right to Restrict Processing

Request that we limit how we use your data.

Right to Object

Object to certain types of data processing (e.g., marketing emails).

Unsubscribe from optional communications at any time.

To exercise these rights: Use the support widget on our website.

We will respond within 30 days for GDPR requests and 45 days for CCPA requests.

Cookies and Tracking Technologies

What We Don’t Use

  • ❌ No third-party tracking cookies (e.g., Google Analytics, Facebook Pixel)
  • ❌ No advertising cookies
  • ❌ No cross-site tracking

What We Do Use

  • ✅ Essential session cookies – Required for login functionality (Memberstack)
  • ✅ sessionStorage – Temporary browser storage for anonymous users (auto-clears on tab close)
  • ✅ localStorage – Browser storage for logged-in users (practice cache, preferences)

Result: You never see a cookie banner on VoSci because we don’t use non-essential tracking cookies.

Third-Party Services

We use the following trusted services:

Service Purpose Privacy Policy
Memberstack User authentication Memberstack Privacy
Stripe Payment processing Stripe Privacy
Cloudflare Hosting & analytics Cloudflare Privacy
Postmark Transactional emails Postmark Privacy

These services have their own privacy policies and are chosen for their strong privacy standards.

Children’s Privacy (COPPA Compliance)

VoSci is designed for users 13 years and older.

If you are under 13, you may only use VoSci with parental supervision, and your parent/guardian must create and manage your account.

For Parents:

  • You control your child’s account and can request data deletion at any time
  • Teachers cannot access personal information beyond practice progress
  • We never knowingly collect data from children under 13 without parental consent

If we discover we have collected data from a child under 13 without parental consent, we will delete it immediately. Use our support widget if you have concerns.

International Data Transfers

VoSci is operated from the United States, but uses Cloudflare’s global network, which means your data may be processed in various countries.

For EU Users:

  • Cloudflare is GDPR-compliant with Standard Contractual Clauses
  • Your data is protected to EU standards regardless of where it’s processed
  • You retain all GDPR rights regardless of server location

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make significant changes:

  1. We’ll update the “Last Updated” date at the top
  2. We’ll notify you via email (if you’re a registered user)
  3. We’ll post a notice on our website for 30 days

Continued use of VoSci after changes means you accept the updated policy.

Contact Us

Privacy Questions or Requests:

Data Protection Officer (DPO):
For GDPR-related inquiries, use the support widget and select “Privacy Request” as your topic.

Mailing Address:
VoSci
566 S. McCaslin Blvd #270559
Louisville CO 80027

Your Trust Matters

At VoSci, we believe privacy is a fundamental right. We’re committed to:

  • 🎯 Transparency – Being clear about what we collect and why
  • 🔒 Security – Protecting your data with industry-leading practices
  • ⚖️ Fairness – Never using your data in ways you wouldn’t expect
  • 💪 Control – Giving you power over your information

Thank you for trusting us with your musical journey.

Document Version: 2.0
Effective Date: November 13, 2025
VoSci – Privacy-First Music Education