When You Visit Our Website

When you visit our website (whether or not you are logged in), we process limited technical information that your device and browser send to display the site and keep it secure. This may include server log data (for example, request and error logs) and the use of strictly necessary cookies or similar technologies required for core functions such as security and session management. We do not use analytics or advertising cookies at this time. If we introduce optional cookies in the future, we will ask for your consent through our cookie settings.

When You Register and Use Our Service

Registration with email and password. When you create an account directly with Qlavist, we process the information you provide to set up and secure your account (such as your email address and login credentials) and basic account identifiers. We also store this information as part of your account profile. We use this information to authenticate you, provide access to the Service, and manage your subscription.

Registration / sign-in with Google. When you choose to register or sign in using Google, you authorize Google to share limited account information with us for authentication and account creation/linking (typically your email address, name, and a unique identifier). We also store this information as part of your account profile. We do not request or receive your Google profile picture.

Legal basis and purpose. The processing described above is necessary for the performance of our contract with you. We use these data to establish and manage your user account, provide access to the Service, manage your subscription, and send you essential, non-promotional messages about your account and the Service (such as security notices and support communications). To deliver these messages, we use an email service provider acting on our behalf.

Age Verification

Our Service is not intended for users under 16 years of age at this time. During registration, we ask you to confirm that you meet this age requirement. We use this information only to enforce our eligibility rules and help protect children’s privacy. We do not collect or retain your date of birth for this purpose. Instead, we store an account-level indicator showing that the age check has been completed, so we do not ask you again.

Core Service Data Processing

We process certain information that is necessary to provide the Service, operate your account, and deliver the learning features you use. This processing is necessary to perform our contract with you.

• MIDI and instrument settings. When you connect a MIDI device, we process basic device details (such as device name and manufacturer) to support compatibility and provide a smoother setup experience in future sessions.

• Calibration and feedback data. If you use the calibration feature, we process and retain calibration outputs and related computed values so that feedback and exercises can be adapted to your instrument and settings. For performance and convenience, we may also store limited calibration-related settings locally on your device so you do not have to repeat setup steps.

• Practice and progress data. When you use exercises, we process and retain information about your practice and learning progress in order to provide the core learning functionality. This may include, for example, practice time, what you practiced (such as pieces/exercises and sections or measures), practice history, and performance scores we calculate (such as accuracy and dynamics-related scores) to help you track your progress over time. Real-time feedback is generated during your practice session, and certain computations may take place on your device. As Qlavist evolves, some features may require processing additional practice-related data on our systems; if so, we will describe those changes in this Privacy Policy before they apply.

• Subscription management (Stripe). If you subscribe to a paid plan, payments are processed by our payment provider, Stripe. We do not receive or store your payment card details. We retain limited subscription and billing administration data needed to manage your access (such as your Stripe customer reference, subscription reference, plan reference, subscription status, and relevant subscription dates).

• Operational and security data. To operate the Service reliably and keep it secure, we process and retain limited operational data generated when you access Qlavist. This may include account and session identifiers, basic connection and device information (such as IP address and browser/OS type), timestamps, and service logs (for example, authentication, error, and security logs). We use this data to maintain availability, troubleshoot issues, prevent abuse or fraud, and protect accounts and the Service.

• User feedback events. When you submit feedback in the Service (for example a rating or other feedback prompt), we store the feedback event and related context to help us improve Qlavist and troubleshoot issues. This may include the time of the feedback, the type of feedback event, the page or feature you were using (such as the URL), and the information you submit as part of the feedback. Feedback content may include personal data if you choose to include it. We process this information based on our legitimate interest in improving and securing the Service and handling user feedback.

Marketing and Promotional Communications

For sending promotional emails and marketing updates, we rely on your explicit consent. You will be asked separately to provide this consent, and you can manage or withdraw it at any time in your account settings.

How to Lodge a Complaint

If you believe we have not addressed your concern in a satisfactory manner, you have the right to lodge a complaint with a data protection supervisory authority. We encourage you to contact us first so we can try to resolve the issue.

If you are in Luxembourg, you can contact the Commission Nationale pour la Protection des Données (CNPD) and submit a complaint using their official complaint form: https://cnpd.public.lu/en/particuliers/faire-valoir/formulaire-plainte.html. cnpd.public.lu+1

If you are in the EU/EEA outside Luxembourg, you may also lodge a complaint with the supervisory authority where you live, work, or where you believe the issue occurred.

How We Use Cookies

We use these technologies for different purposes:

• Strictly Necessary Functionality (no consent required): We use cookies and client-side storage items that are essential to ensure the correct operation of our website and to provide the services you have requested. This includes maintaining your user session, enabling secure login, and supporting essential site navigation. Where needed for the Service to work during an active session, we use session cookies and/or sessionStorage to preserve essential in-session selections (such as your currently selected MIDI device, practice session settings, and session calibration data needed to generate real-time feedback) so your practice session continues to work across page navigation. It also includes technologies used by third-party services that are required to provide requested features, such as Stripe (when you make payments) for secure payment processing and fraud prevention. These strictly necessary technologies are used only to provide requested features (such as account login, security, and payments) and are not used for analytics or advertising.

• Security (strictly necessary; no consent required): We use security technologies from services such as Cloudflare Turnstile to protect our website and services from spam and malicious abuse. The data collected by these services is used to distinguish between a human user and automated bot activity. You can learn more about how Cloudflare handles data by visiting their privacy policy.

• Preferences / Functional (optional; based on your choice): If you choose to enable preference storage, we may use cookies and/or localStorage to remember certain settings for convenience so you do not have to re-enter them each time. To remember your choice about this optional preference storage on this device, we use a cookie named qlv_storage_optin that stores only whether preference storage is enabled or disabled. The preference storage is intended to remember settings across browser sessions on this device. This may include remembering interface and practice settings (such as tempo, looping, metronome, and selected targets), table display settings, whether you have completed onboarding prompts, and recent MIDI device and calibration information on this device.

• Analytics and Advertising (consent-based): At this time, we do not use analytics or advertising cookies or similar technologies. If we introduce optional analytics or advertising technologies in the future, we will ask for your consent through our cookie settings before they are used.

How to Manage Your Cookie Preferences

You have full control over your cookie preferences. Optional Preferences / Functional storage can be managed in the Qlavist exercise interface settings (when you are signed in). You can enable or disable preference storage at any time, and if you disable it, we will stop using optional localStorage for convenience features on that device. Changing this setting updates (or removes) the qlv_storage_optin cookie; you can also delete it via your browser settings.

You can also set your browser not to accept cookies. The website allaboutcookies.org provides detailed instructions on how to do this. However, please be aware that blocking strictly necessary cookies and client-side storage items may impact the core functionality of our website.