Last Updated: November 12, 2026
GigPerfect is an independent supplementary music practice tool for students of all ages, including children under 13. It is not affiliated with school districts or teachers.
Core practice tools need no sign-in, purchase, or sharing. Optional Chartboards, token purchases, and sharing user-created content with any other user require separate terms. Users under 18 need a parent or legal guardian's consent or supervision for these optional features, not for core practice. School network approval is not parental consent.
Summary: GigPerfect is a music practice application that collects only the minimum data
necessary to provide educational services. We do not sell student data, use it for advertising, or share it with
third parties except trusted service providers. Students and parents maintain control over their information.
Anonymous access: Users
can use many features anonymously (metronome, tuner,
practice workspace, streaks and recording).
⚠️Please note when used anonymously, all
recordings and
progress (streak) data is stored locally in your device's web browser and cannot be recovered if your
browser data is cleared.
1. Data We Collect
Required Information (for account creation):
- Email address - For account authentication and login
- Display name - For identification within groups
- Profile picture - From Google OAuth (optional, can be hidden by user)
Optional Information (student-provided):
- Age range - For age-appropriate leaderboards (e.g., "13-17", never exact birthdate)
- Instrument - For instrument-specific features and leaderboards
- School name - For school-specific leaderboards
- City - For regional leaderboards
- Stage name (alias) - Public pseudonym for leaderboard features
Automatically Collected:
- Practice activity - Time spent using metronome, tuner, and practice tools
- Login timestamp - For security and practice streak tracking
- Last login IP address - For security and fraud prevention
2. How We Use Student Data
| Purpose |
Data Used |
| Account authentication and login |
Email and authentication identity (Passwordless email or Google SSO) |
| Group collaboration, events and competitions |
Name, email, group membership |
| Practice progress tracking and challenges (optional) |
Activity time, session data |
| Leaderboards, rewards and motivation (optional) |
Stage name, age range, instrument, streaks |
| Service personalization |
Theme preferences, customization choices |
| Security and fraud prevention |
Login history, IP addresses, failed login attempts |
| Discord profile linkage (optional) |
Community engagement and support |
3. How Long We Retain Data
- Active accounts: Data retained as long as account is active
- Inactive accounts: Personal data deleted after 60 days without logging in
- Deleted accounts: Personal data permanently deleted within 7 days
- **Shared** Practice recordings: Until student deletes them or account becomes inactive.
Note: Recordings are NEVER uploaded to our servers automatically. It is your
responsibility to "download" the file to your device, Save to Google Drive or Share with a group for data
protection of recordings.
- Audit logs: 1 year (for security and compliance)
- Login history: Last 30 days
We reserve the right to delete any content uploaded by users at
any time and for any reason without notice if we believe it violates our terms of service. This includes
disabling of accounts and blocking users from accessing the site if major violations occur.
4. Student Privacy Protections
- ✓ Profile pictures automatically hidden for users under 18
- ✓ Stage names (pseudonyms) used for public features
- ✓ Private groups default for classroom use
- ✓ Real names and emails never exposed on public leaderboards
- ✓ Students control what recordings they share with teachers
- ✓ No behavioral advertising or ad tracking for students
5. Data Sharing
We DO NOT:
- Sell or rent student data to any third party
- Share data with advertisers or marketing companies
- Use student data for behavioral advertising
- Build student profiles for non-educational purposes
We DO Share With (Service Providers Only):
| Provider |
Purpose |
Data Shared |
| Firebase (Google) |
Authentication, database |
Email, name, account data |
| ▶ Used only to create and manage user accounts.
Google acts as a processor and cannot use this data for advertising or profiling. |
| Cloudflare |
Security, file storage (R2) |
Recordings, IP (DDoS protection) |
| ▶ Recordings are encrypted at rest. Cloudflare
cannot
access or use content for any purpose other than storage. |
| Stripe |
Payment processing (optional) |
Email, payment data (tokenized) |
| ▶ Stripe receives data only when a user chooses to
make a purchase. Email is provided only when a purchase is initiated. |
We use a small number of third‑party service providers
(“subprocessors”) who process data strictly on our behalf. They do not sell, share, or use student data for
their own purposes. They access only the minimum data required to provide the service.
6. Compliance
- Independent use: No school-system integration or district account management; the status of records depends on their actual use, not merely on voluntary submission
- Children's privacy: Legal requirements for collecting children's personal information apply separately; feature-term acceptance does not by itself verify parental consent
- GDPR: Data protection rights for EU students (access, deletion, portability)
- CCPA: California students have right to know, delete, and opt-out (we don't sell data)
- Student Privacy Pledge: We commit to responsible student data practices
7. Parent & Student Rights
- Access: View all data associated with student account
- Correction: Update or correct inaccurate information
- Deletion: Request account and data deletion at any time
- Export: Request a copy of all student data in portable format
- Opt-Out: Disable optional features (Chartboards, recordings, demographics)
To exercise these rights, contact: [email protected] or delete account via Profile settings
8. Security Measures
- Encryption: HTTPS/TLS for data in transit; AES-256 for data at rest
- Authentication: Firebase Authentication with Passwordless (email) sign-in or Google SSO
- Access Controls: Role-based access; students see only their own data and groups they join
- Monitoring: Audit logs, security event tracking, automated alerts
- Vendor Security: All service providers are SOC 2 and/or ISO 27001 certified
