Privacy Policy & Student Data Practices

• We collect the minimum needed to run classes: an email, a display name, a role, and learning progress.
• We do not sell data, show ads, or build advertising profiles — ever.
• Prompts sent to our AI contain musical content only (keys, chords, tempo, the text of the request). Student identity (name, email, account ID) is never attached to AI requests.
• Our AI provider (Anthropic) does not use our API data to train its models.
• Schools own their students' records. We delete student data at the school's request.

Account data. Email address, a display name, a role (student, teacher, or admin), and an optional grade band (elementary / middle / high). We do not collect birthdates, addresses, or phone numbers.

Class data. Class membership (which class a student joined via a class code or roster), assignments given, and work submitted.

Learning data. Progress, points/XP, badges, game results, and the musical projects a student creates (notes, tracks, chords — the student's creative work).

Technical data. Standard server logs (for security and reliability). We do not use third-party advertising or cross-site tracking.

When a student asks Conductor to generate or explain music, the request sent to our AI provider contains the musical context of the session — the key, tempo, genre, chord and note data, and the text the student typed. It does notinclude the student's name, email, account identifier, or class information.

We use Anthropic's commercial API, which contractually does not use customer API data to train its models. Students are instructed not to include personal information in prompts; prompts are about music.

AskConductor is designed for school use. For students under 13, we rely on the school or teacher to provide consent on behalf of parents, as permitted by COPPA for educational services. We collect only the information reasonably necessary for the student to participate, and we do not condition participation on disclosing more.

Parents and guardians may review their child's information, request deletion, or withdraw consent by contacting their school or emailing us directly.

Where AskConductor processes education records on behalf of a school, we act as a "school official" with a legitimate educational interest under FERPA. The school retains ownership and control of its students' records. We use those records solely to provide the service, we do not re-disclose them, and we delete them at the school's direction or at the end of our agreement with the school.

• No selling or renting of personal information.
• No advertising, ad profiling, or behavioral targeting.
• No use of student data to train AI models.
• No disclosure to third parties except the service providers below, or as required by law.

We use a small number of infrastructure providers to run the service, each bound to use data only to provide their service to us:

• Supabase — authentication and database hosting.
• Vercel and Railway — application hosting.
• Anthropic — AI music generation and explanation (musical content only, as described above).
• Google — optional "Sign in with Google" authentication.

Data is encrypted in transit (TLS) and at rest by our database provider. Access to student records in the application is controlled by role-based rules (students see their own data; teachers see their classes). We review our security practices regularly and limit production access.

We keep account and learning data while an account or school agreement is active. Schools, parents, or eligible students can request deletion at any time; we will delete the associated personal data within 30 days of a verified request, except where law requires retention.

Questions, review requests, or deletion requests: pianoman.hubbard@gmail.com. If you are a parent or guardian, you may also route requests through your school, and we will honor them.