Privacy Policy — Hyper Flow Piano

Last updated: March 2026

This policy explains what data Hyper Flow Piano collects, why we collect it, and your rights under UK GDPR. We have designed the app to collect as little data as possible.

1. Who We Are

Hyper Flow Piano is an independent app for learning piano scales and chords. For data-related enquiries, please contact us at gavin@hyperflowpiano.com.

2. What We Collect

We collect only two things:

• Your email address — used solely to identify your account via a login link. We do not use it for marketing.
• Your practice scores — which scales and exercises you have completed, your scores, and direction of play (e.g. ascending, contrary motion). This is stored against your email address in our database.

We do not collect your name, date of birth, location, payment details, or any behavioural or tracking data beyond practice scores.

3. Why We Collect It

We use this data to:

• Log you in securely without a password
• Save your progress so it persists between sessions
• Display your scores and achievements within the app

The legal basis for processing this data is the performance of the service you have signed up for (Article 6(1)(b) UK GDPR).

4. Cookies and Analytics

We use Firebase and Google Analytics 4 (GA4) to understand how the app is used in aggregate (e.g. which features are most visited). These services use cookies. Where required by law, we will ask for your consent before placing non-essential cookies.

You can instruct your browser to refuse cookies at any time. This will not affect your ability to use the app, though some analytics data will no longer be collected.

5. Who We Share Data With

We do not sell, rent, or share your personal data with third parties for their own purposes. Your data is stored using Google Firebase (Firestore and Firebase Authentication), which acts as our data processor. Google processes this data on our behalf under their standard data processing terms.

Firebase data is stored in data centres within the EU/EEA by default. For more information, see Google's Privacy Policy.

6. How Long We Keep Your Data

We retain your email address and practice scores for as long as your account is active. If you request deletion of your account, we will remove your data from our systems within 30 days.

7. Children

If you are under 13, please ensure a parent or guardian has given their consent before creating an account. If you are a parent and believe your child has registered without consent, please contact us at gavin@hyperflowpiano.com and we will delete the account promptly.

8. Your Rights Under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your account and all associated data
• Portability — receive a copy of your data in a structured, machine-readable format
• Object to processing in certain circumstances

To exercise any of these rights, contact us at gavin@hyperflowpiano.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

Your data is stored securely using Google Firebase, which implements industry-standard security measures. Access to your data is restricted to authenticated sessions only. We do not store passwords — login is handled via a one-time email link.

10. Changes to This Policy

If we make material changes to this policy, we will update the date at the top and, where appropriate, notify you by email.

11. Contact

For any questions about this policy or your data, please contact: gavin@hyperflowpiano.com