Privacy Policy

Who we are

Academia Auditiva (academiaauditiva.com) is an ear-training website for music students and teachers. Academia Auditiva is responsible for the personal data described in this policy.

For any question or request about your privacy, write to contato@academiaauditiva.com.

What we collect

We only collect what we need to run the site.

Your account

• Your first name, last name, email address and password when you sign up. Your email address is also your username. We never store your password itself, only a salted hash of it.
• A phone number, only if you choose to add one to your profile.
• If you turn on two-factor authentication: the key that links your authenticator app, and your recovery codes.
• If you sign in with Facebook: Meta sends us your Facebook account ID, name and email address. We keep the account ID, to link the two logins, and use the email address for your account.
• The language you use the site in, and whether you turned off the emails about your routines, so that we write those emails in your language, or don't send them.

Your practice

• Each answer you give in an exercise: the exercise and the filters you played it with (such as the key), your answer, the correct answer, whether you got it right, how long you took and when.
• Your totals and best score for each exercise, and the badges you earn.
• Your level, XP and practice streak, which we calculate from your answers and badges. To count your practice days in your own time zone, your browser sends us its time zone in a cookie (see below), which we read for the request rather than save in your profile. If you activate reminders, we separately save the time zone you choose for each device.
• Which guided tours you have finished or skipped, and when, so they don't start on their own again.

Classrooms and routines

• If a teacher invites you: your email address, the invitation and when you accepted it.
• The classrooms you join, the routines assigned to you and any adjustments your teacher makes to them for you.
• If you're a teacher: the classrooms and routines you create and the invitations you send.
• The notifications we show you on the site, about your routines and classrooms, and when you read them.

Optional study reminders

If you activate push reminders, we save this device's push endpoint and encryption keys, your chosen time and time zone, and the last reminder day. We use your exercise answers to skip reminders on days you have already studied. Delivery uses your browser's push provider (such as Apple, Google or Mozilla), with encrypted message content. You can turn reminders off for this device or all your devices in Manage account → Notifications, even without push support on the current device. Expired subscriptions are removed when the provider reports them; deleting your account removes all subscriptions. Your personal-data download includes these settings. Installing the app does not cache private pages or make exercises available offline.

Microphone

The singing exercises (Solfege Melody, Sing the Note, Sing the Interval and Sing the Melody) ask for permission to use your microphone. Your recording stays on your device: the notes you sing are detected in your browser, and the audio is never uploaded to or stored on our servers. No other exercise uses the microphone, and you can turn this permission off in your browser at any time.

Technical data

When you use the site, our servers record technical information about each request, such as the page requested, errors and response times, to keep the service working and secure. Our monitoring service, Azure Application Insights, also derives an approximate location (city or country) from your IP address, without keeping the address itself. To prevent abuse, we briefly use the IP address of visitors who aren't signed in to limit how many requests they can make.

We don't use analytics, advertising or tracking tools in your browser.

How we use it

We use your data to:

• create your account, sign you in and keep your account secure;
• run the exercises and show your scores, progress, reports and badges;
• let the teachers of the classrooms you join assign routines to you and follow your results in them;
• send emails about your account: address confirmation, password reset, email changes and classroom invitations;
• email you when a teacher assigns you a routine, unless you turn these emails off in Manage account, under Notifications;
• notify you on the site when a teacher assigns you a routine and the day before it's due if you haven't finished it, and, if you're a teacher, when a student joins one of your classrooms or finishes one of your routines;
• prevent abuse, fix errors and improve the site;
• meet our legal obligations.

We don't sell your data, we don't show ads and we don't send marketing emails.

Where the law requires a legal basis, such as the LGPD in Brazil or the GDPR in Europe, we rely on the performance of our contract with you (your account, the exercises and classrooms), our legitimate interests (keeping the site secure and working), your consent (microphone, Facebook sign-in and optional push reminders) and our legal obligations.

Who can see it

We don't sell or rent your personal data. We only share it in these cases:

• Your teachers. When you join a classroom, the teacher who manages it can see your username and email address and when you joined. While you're in one of their classrooms, they can also see your answers in the routines they assign to you: how many questions you answered, how many you got right, how long you took and when. They never see your practice outside their routines, nor your answers in other teachers' routines. They're also notified on the site when you join one of their classrooms and when you finish one of their routines.
• Administrators. A small number of Academia Auditiva administrators can access accounts to provide support and keep the site secure.
• Service providers. Microsoft Azure hosts the site, the database, files and monitoring, and an email delivery provider sends our emails. We only give them what they need to provide these services.
• Meta, only if you choose to sign in with Facebook. Meta's own privacy policy applies to that sign-in.
• Content delivery networks. Our pages load some open-source libraries from cdnjs (Cloudflare), jsDelivr and unpkg. As with any website, these services receive your IP address and browser information when your browser downloads those files.
• Authorities, when the law or a valid order requires it.

Cookies

We only use cookies that the site needs to work. There are no advertising, analytics or tracking cookies.

We also save two display choices in your browser's local storage: your light or dark theme (aa-theme) and whether exercise answers show as a keyboard or as buttons (aa-answer-layout). They never leave your device.

Storage and security

• Your data is stored in Microsoft Azure data centers in Canada (Canada Central region). If you live outside Canada, it is transferred to and stored in Canada.
• All connections use HTTPS, and stored data is encrypted.
• The database and file storage can't be reached from the internet, only by our application through a private network.
• Passwords are only stored as salted hashes, and you can protect your account with two-factor authentication.
• Access to data is limited to the people and services that need it.

No system is perfectly secure. If an incident puts your data at risk, we'll notify you and the authorities as required by law.

How long we keep it

• Your account and practice data: for as long as your account exists.
• When you delete your account, we immediately and permanently delete your profile, practice history, scores and badges, your classroom memberships and the invitations sent to your email address. If you're a teacher, we also delete the classrooms and routines you created, with their members, invitations, assignments and notifications.
• Deleted data may remain in encrypted database backups for up to 7 days, until those backups expire.
• Technical logs: 30 days.
• Notifications: 90 days, read or not. A notification about an assignment is deleted sooner if the teacher removes that assignment. When you delete your account, we also delete your notifications and those your teachers received about you.
• Invitations: teachers can cancel pending invitations at any time. Invitations are deleted with their classroom, or when the teacher or the invited person deletes their account.

Your rights

Depending on where you live (for example, under the LGPD in Brazil, PIPEDA and Quebec's Law 25 in Canada, or the GDPR in Europe), you have the right to access, correct and delete your data, to receive a copy of it, to withdraw your consent, and to object to or restrict some uses of it.

You can do most of this yourself in Manage account → Personal data:

• Download gives you a copy of your data in JSON format.
• Delete closes your account and permanently deletes your data.

You can also update your email address, phone number and password in Manage account. For anything else, such as correcting your name, write to contato@academiaauditiva.com. We'll answer within the time limits set by law.

If you're not satisfied with our answer, you can contact a data protection authority: the ANPD in Brazil, the Office of the Privacy Commissioner of Canada, the Commission d'accès à l'information du Québec, or the supervisory authority where you live in Europe.

Children

Children and teenagers can use Academia Auditiva with the permission of a parent or legal guardian, for example as students in a teacher's classroom. We only collect what's needed to run the exercises, and we don't show ads. A parent or guardian can write to us to access or delete a child's data.

Changes to this policy

We may update this policy when the site changes or when the law requires it. We'll update the date at the top of this page and, if the changes are significant, let you know on the site or by email.

Contact