Privacy Policy

Effective Date: March 6, 2026

Pocket Conservatory operates Tonic Notes, a music learning assistant. This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

When you create an account, we collect your name, email address, and authentication credentials. If you use phone sign-in, we collect your phone number.

When you use the recording feature, we collect audio recordings of your lessons, transcriptions with speaker attribution, AI-generated summaries, and timestamps indicating music vs. speech segments.

We also collect usage data (features used, session frequency), device information (device type, OS, app version), and diagnostic data.

2. How We Use Your Information

We use your data to provide core features (recording, transcription, summaries), identify speakers in recordings, sync your data across sessions, improve transcription accuracy and AI features using de-identified data, understand usage patterns, diagnose bugs, and communicate with you about the service.

3. How We Improve Our Technology

To make Tonic Notes better at understanding music lessons, we use de-identified data to improve our transcription, speaker recognition, and AI capabilities. Before any recording or transcript is used for improvement, we strip personal identifiers so the data cannot be traced back to you.

You may opt out at any time by contacting privacy@tonicnotes.com. Opting out will not affect your access to any features.

4. Third-Party Services

We use Firebase (Google) for authentication and cloud storage, Amplitude for usage analytics, and Sentry for error reporting and diagnostics. Sentry may record replays of app interactions (screen flows and taps, not audio) for a small percentage of sessions to help us fix bugs. Each service operates under its own privacy policy.

5. Data Storage and Security

Recordings are stored locally on your device and uploaded to secure cloud storage when connected to the internet. Account data and transcripts are stored on servers in the United States. We use encryption in transit and at rest. No system is completely secure — you are responsible for maintaining the security of your device and account.

6. Data Retention

We retain your data while your account is active. Deleted recordings and accounts are removed from active systems within 30 days. De-identified data used for service improvement is retained indefinitely as it is no longer associated with any individual.

7. Your Rights

You may request access to, correction of, or deletion of your personal data. You may opt out of having your de-identified data used for improvement. We do not sell your personal information. California residents have additional rights under CCPA/CPRA, and EEA residents have rights under GDPR. Contact privacy@tonicnotes.com to exercise any of these rights.

8. Recordings of Others

When you record, the voices and words of others in the room are captured. You are responsible for obtaining their consent. If someone wants a recording of their voice removed, contact privacy@tonicnotes.com.

9. Children's Privacy

Tonic Notes is not intended for children under 4. We do not knowingly collect personal information from children under 4. Users between 4 and 18 may use the service with parental consent.

10. Changes and Contact

We may update this policy from time to time. For questions, contact privacy@tonicnotes.com or support@tonicnotes.com.