1. Who we are
LoopScreen LLC operates Perpetuoso, including the Perpetuoso website at perpetuoso.app and the Perpetuoso practice app (together, the “Service”). We decide how and why the personal information described here is used. In laws that use the term, we are the “controller” or “business”.
This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and what choices and rights you have. It is part of our Terms of Service. When you create an account you agree to both, and you consent to the collection and use of information described here.
You can reach us at hello@perpetuoso.app.
2. Information we collect
We collect the following information.
| What | What it includes | Where it comes from | Why we use it |
|---|---|---|---|
| Account details | Your name, your email address, whether your email is verified, how you sign in (a password or Google), when your account was created and when you were last here, and, if you turn it on, two-step sign-in with an authenticator app. Your password is handled by Google’s Firebase Authentication service. We never see or store it. | You, or Google if you choose “Continue with Google”. | To create and secure your account, sign you in, and contact you about your account. |
| Sign-up and log-in security check | When you create an account or log in with your email and password, Google’s reCAPTCHA checks that the request comes from a person and not an automated program. To do that, Google looks at your IP address, your browser and device, and how you move through the page. We see only whether the request passed. | Your browser, through Google reCAPTCHA. | To keep automated programs from creating accounts and guessing passwords. |
| Set-up answers | Your experience, your goals, how long you want to practise each day, and whether you play with a microphone, a MIDI keyboard, or no recording. | You. | To choose your starting level and settings. |
| Practice and results | The pieces generated for you and your settings, what you played (the notes, timing and accuracy), grades, the bars you found difficult, your reading level and skill estimates, your practice history, starred pieces, how you graded yourself, and the reflections and practice directions you type. | You, and your device as you play. | To run and personalize practice, show your progress, and improve the Service. |
| Recordings | Microphone audio, or the notes and pedal movements from a MIDI keyboard together with the name of the keyboard’s connection, and the files we make from them. See Section 3. | Your microphone or MIDI keyboard. | To grade your playing, show it back to you, and improve the Service. |
| Device and technical information | Your browser and its version, your device type, the number of processor cores, a description of your graphics processor, the app version, how long processing took, and any errors. Some of this is sent with each take. For practice accounts, we also record the limited first-party activity metadata described below. | Your browser, automatically. | To keep the Service working, find and fix problems, tune performance, and keep it secure. |
| Network information | Your IP address is visible to our servers and providers whenever you connect. Our application logs record which page was requested and the result, but not your IP address, and our web server does not keep visit logs. To limit abuse of our email features, we keep a one-way scrambled version of the network address and email address for a short time. | Your connection, automatically. | Security and abuse prevention. |
| Messages and feedback | Emails you send us, and notes you send from inside the app, together with the page you were on and the app version. | You. | To answer you, to give support, and to improve the Service. |
| Invitation and access records | Invitation labels and dates, when a trial or pilot starts and ends, the email address a gift is addressed to, and who created an invitation. | You and our administrators. | To give and manage access. |
| Studio connections | If you join a teacher’s studio: the studio, the teacher, when you connected, your sharing choices and lesson time, your birth month, the name, email address and relationship of a parent or guardian who approves, and the notes your teacher writes about you. | You, your teacher, and your parent or guardian. | To provide the teaching features and to follow child-privacy rules. |
| Records of your agreement | Which version of the Terms and this policy you agreed to, when, and the exact wording you saw. | You. | To show what was agreed. |
| Payment information | When paid plans are available: your payment details go straight to our payment provider, Stripe. We keep a Stripe customer number, your plan, its status and the date it is paid to. We never receive or store your card number. | You, and Stripe. | To bill you and to manage your plan. |
| Website analytics | On our public pages only: the page, where you came from, your browser and approximate location, and whether you started an account or tried a free example. See Section 7. | Your browser, through Google Analytics. | To understand how people find and use our public site. |
For free and paid practice accounts, we also keep limited first-party activity metadata: workspace opens, recording and saving success or failure, durations, and the app build. Automatic activity reports do not include your feedback text, recording links, or identity details. We use saved recording results and non-recording practice outcomes to understand whether the service is useful. Private practice activity is not sent to Google Analytics. Business reports use fixed weekly totals, with small groups withheld, and are available only to specifically authorized operators. Automatic activity metadata older than 90 days is removed in batches as the workspace is used; saved practice outcomes follow the account retention rules below.
Information we do not collect
We do not ask for government ID numbers, your precise location, your contacts, your photos, or your health information. We do not collect biometric identifiers, and we do not make voiceprints.
Information from others
If you sign in with Google, Google tells us your name, your email address, and that your email is verified. A teacher who invites you may give us the name they use for you. A parent or guardian who approves a studio connection gives us their own name, email address and relationship to you. Stripe tells us the status of a plan when paid plans are available.
3. Your recordings, in detail
Your recordings are the most sensitive thing we handle, so here is exactly what happens.
How recording works
- You choose how to play. You can use a microphone, a MIDI keyboard, or no recording. Your browser asks your permission before it opens a microphone or a MIDI device.
- Your device listens. The transcription of your playing into notes and its grading run on your own device, not on our servers.
- The take is uploaded. When you finish a microphone take, it is sent to us as a compressed audio file, together with the results from your device. A take that is nearly silent is not sent. A MIDI take sends the notes and pedal movements, not audio. If your connection fails, the take waits in your browser and is sent later.
- We store it. Audio is stored in Google Cloud Storage in the United States. The results are stored with your account.
What we keep for each take
- The audio file. Kept for 183 days from the day of the take. After that it can no longer be played, and it is deleted from storage.
- The results. The grades, the notes we estimated you played, the details of the take (such as tempo), and the note probabilities from the listening model. These do not contain audio you can play back, but they describe your performance in detail. They are kept for as long as your account exists, which is how we can show your progress.
- Technical details. The browser, the number of processor cores and the description of your graphics processor are stored with the results.
Please know
- A recording is raw sound. It can capture more than your playing, including speech, other people and the room. Record when you are alone, or when everyone who can be heard has agreed.
- Uploading is automatic. There is no separate question after each take. If you do not want your audio uploaded, use a MIDI keyboard or choose not to record.
- We do not identify you by your voice. We analyze recordings to find the notes you play, not to identify who you are, and we do not create voiceprints.
- Who can hear them. A teacher you have connected with can listen to your recordings, and a small number of authorized people at Perpetuoso can reach them for the reasons in Section 6. No other user can, and there is no public page for them.
- Your device keeps a take until we have it. A finished take that has not been sent yet stays in your browser until we confirm that we have received it.
By recording with your microphone, you consent to us collecting, uploading, storing and using your recordings and the results made from them as this policy describes, including to improve Perpetuoso (Section 5). If you do not want that, use a MIDI keyboard or choose not to record.
4. How we use information
We use the information we collect to:
- provide the Service: create and secure your account, generate music for you, analyze and grade your playing, keep your history, connect you with a teacher you choose, and manage your plan;
- personalize it: choose pieces and a level that suit you and adjust them as you improve;
- communicate with you: send email verification, password resets, security alerts, notices about the Service and these documents, and replies to your messages. We do not send marketing email today. If we start, we will tell you and you will be able to opt out;
- keep the Service safe and fair: prevent abuse, enforce limits and our Terms, fix problems, and back up our systems;
- improve Perpetuoso in the ways described in Section 5;
- meet legal duties: follow the law, respond to lawful requests, and protect our rights and the rights of others; and
- create de-identified or aggregated information. We commit to keeping it in that form and not to try to re-identify the people in it.
5. Improving Perpetuoso
We use the information collected through Perpetuoso, including your practice information, your recordings, and the results made from them, to maintain, evaluate, test, debug and improve the Service and to develop new features for it. You consent to this when you agree to the Terms and this policy and when you record.
What that means in practice
- Running stored takes through newer versions of our listening and grading methods, to check that they are accurate and to find mistakes.
- Studying which pieces, levels and exercises help people improve, and tuning how we choose and compose music.
- Training, tuning and evaluating our own transcription, grading, difficulty and recommendation systems.
- Testing new features and finding and fixing bugs.
The limits we keep
- We use your information this way only to improve and develop Perpetuoso.
- We do not sell your recordings or your results. We do not share them with other companies for those companies’ own use, including to train their models.
- We do not use your recordings for advertising or to identify you by your voice.
- Only authorized people and systems can reach this information, and we prefer to use it in de-identified or aggregated form when that is enough.
- We will not publish your recording, or anything that identifies you, without asking you separately.
- When we make de-identified or aggregated information, we keep it that way and do not try to re-identify the people in it.
Your choices
You can stop providing recordings at any time by playing on a MIDI keyboard or by choosing not to record (Section 10). Improvements already made to our systems, and information that has already been de-identified or aggregated, cannot practically be taken back out.
7. Cookies, storage and analytics
We do not use advertising cookies, and we do not track you across other sites.
| What | Where | What it is for |
|---|---|---|
| Google Analytics cookies | Our public pages only: the home page, the teachers page, the pricing page, the free examples, and the log-in and sign-up pages. Never inside the practice app, your account, or the administration pages. | Counting visits and seeing which pages help. We send a cleaned page address, the site you came from, and which sign-up method or free example you used. Google’s advertising features and signals are switched off. |
| reCAPTCHA | The log-in and sign-up pages, where you use an email address and password. | Google may set or read its own cookies, and use details about your browser and device, to tell people from automated programs. We do not use it for anything else. |
| Sign-in state | The browser’s session storage for the open tab, not a cookie. It ends when you close the tab. Google may set its own cookies in its sign-in window if you use Google sign-in. | Keeping you signed in. |
| Your settings | Your browser’s local storage, kept separately for each account on the device. | Remembering your theme, sound and practice settings, the reader size, and how you prefer to play. |
| Takes waiting to upload | Your browser’s database storage. | Keeping a finished take safe until we confirm that we have it. |
| App files and the listening model | Your browser’s cache and our service worker. | Making the app load faster and work with a poor connection. |
| Invitation links | The browser’s session storage for the open tab, for up to a day. | Carrying an invitation through sign-up. |
Your choices
You can block or delete cookies and stored data in your browser settings, and the Service still works, though your settings may not be remembered. You can opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout. We do not currently respond to “Do Not Track” signals, because we do not track you across other sites. Since we do not sell or share personal information for advertising, there is nothing for a Global Privacy Control signal to opt you out of.
8. How long we keep information
We keep information only as long as we need it for the reasons above, and as the law requires.
| Information | How long we keep it |
|---|---|
| Audio recordings | 183 days from the take, then deleted. After that day the recording can no longer be played. Google’s storage service can recover a deleted file for up to 7 more days. |
| Account details, practice history, results, and the files made from your takes | As long as your account exists. |
| Reflections and feedback you write | As long as your account exists. |
| Studio connections, notes and parent or guardian approvals | Connections and notes while the connection lasts. A record of a parent or guardian’s approval is kept for as long as your account exists and then for up to six years, so that we can show that it was given. |
| Records of your agreement to these documents | As long as your account exists and then for up to six years, so that we can show what was agreed. |
| Security and administration logs | As long as needed for security and accountability. These hold actions, not your recordings. |
| Email and upload limit records | A short time, normally a few hours, for the scrambled network and email records, and about two days for upload counts. |
| Backups | Database backups for 30 days and disk snapshots for 14 days, each replaced as they expire. Information we have deleted can remain in them until then, and is not used. A few older copies made when we update the Service are replaced as updates are released. |
| Payment records | As long as tax and accounting law require. Stripe keeps its own records. |
| Website analytics | For the period set in our Google Analytics account. |
| De-identified and aggregated information | As long as it is useful to us. It does not identify you. |
If an account has been inactive for a long time, we may delete or de-identify it after trying to reach you by email. We may also keep information longer when the law requires it, or when we need it to deal with a legal claim or a security matter.
9. How we protect information
We protect information with measures that include:
- encrypted connections (HTTPS) between your browser and the Service;
- storage on Google Cloud, which encrypts stored data by default;
- sign-in through Google’s Firebase Authentication, with a long minimum password length and optional two-step sign-in, so that your password never reaches our own servers;
- keeping the Service running with limited permissions, and limiting who can reach our systems and requiring a secure tunnel to do so;
- a check by Google’s reCAPTCHA that email sign-ups and log-ins come from people and not automated programs;
- limits on uploads, on request sizes and on email sending, to prevent abuse; and
- regular backups.
No online service is perfectly secure, and we cannot promise that information will never be lost, misused or accessed without permission. Please use a strong, unique password and keep it private. If a breach affects your information, we will tell you and the authorities as the law requires.
10. Your choices
You can do these things yourself:
- change your name and password in your account;
- choose a MIDI keyboard, or choose not to record;
- leave a teacher’s studio;
- delete your browser’s stored data for Perpetuoso, and opt out of Google Analytics (Section 7); and
- stop using Perpetuoso at any time.
If you have a question or a concern about your information, write to hello@perpetuoso.app and we will do our best to help.
11. Notices for specific places
United States
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of anyone under 16. We do not use or disclose sensitive personal information to infer characteristics about you. The only sensitive item we handle is your sign-in credentials, which our sign-in provider holds.
European Economic Area, United Kingdom and Switzerland
If you are in the European Economic Area, the United Kingdom or Switzerland, these additional details apply to you. Perpetuoso is the controller. Our legal bases are:
- to carry out our agreement with you, to provide the Service, create your account and keep it running;
- our legitimate interests, in keeping the Service secure, preventing abuse, fixing problems, and improving and developing Perpetuoso, where we have weighed them against your rights and expectations.
- your consent, for uploading and keeping your recordings and using them to improve Perpetuoso, and for analytics cookies on our public pages; and
- a legal obligation, where the law requires us to keep or give out information.
If you are not happy with how we handle your information, please write to us, and you may also complain to your data protection authority. Your information is processed in the United States. Our providers use approved transfer mechanisms, such as the standard contractual clauses or the EU-US Data Privacy Framework, for transfers they make.
12. Children and teens
Perpetuoso is for people who are 13 or older. It is not aimed at children under 13, and we do not knowingly collect information from them.
If we learn that we hold information about a child under 13, we will pause the account and delete the information, unless we have a parent or guardian’s verifiable permission to keep it. A parent or guardian who thinks their child is using Perpetuoso should write to hello@perpetuoso.app so that we can act.
If you are under 18, a parent or guardian must have read these documents and agree to them for you. When someone aged 13 to 17 joins a teacher’s studio, we ask for a parent or guardian’s name, email address and relationship to the student, and for their approval, and we keep a record of it. We do not verify a parent or guardian’s identity beyond that approval.
13. Changes to this policy
We may update this policy. For a material change, we will tell you at least 30 days before it takes effect, by email to the address on your account or by a notice in the Service, and we will update the effective date at the top of this page. We may ask you to agree to the new version again, and you may not be able to use the Service until you do. Earlier versions are available if you ask.
14. Contact us
Write to hello@perpetuoso.app with any question or concern about this policy or about your information.