Privacy practices
Written by the ChordCraft Lab team. It describes how the app actually behaves today, in plain language.
What we collect
- Account — your email address and password (stored hashed by our auth provider), plus an optional display name you choose.
- Learning progress — daily puzzle results, test history, stars, streaks, achievements, shop unlocks, favorites and practice preferences.
- Billing — subscription status and period end, plus identifiers that link your account to your Stripe customer record. Card numbers are never sent to or stored by us.
What we don't do
- We don't sell or rent your personal data.
- We don't use advertising or cross-site tracking pixels.
- We don't publish anything about you except the display name you set, which appears on the opt-in leaderboard.
- We don't email you marketing you didn't ask for.
Who processes your data
- Supabase — database, authentication and account storage.
- Stripe — subscription payments, invoices and the billing portal.
- Lovable — application hosting and delivery.
Your controls
- Export — download every row tied to your account as JSON from your account page.
- Delete — deleting your account removes your profile, progress, favorites, test history and unlocks, and cancels any active subscription first.
- Correct — change your display name, email address and password at any time from your account page.
- Leave the leaderboard — clear or change your display name; nothing else about your account is public.
Retention
We keep your account data for as long as your account exists. When you delete your account, the associated rows are removed from our database. Stripe retains payment and invoice records independently for its own legal and accounting obligations.
Questions
For a privacy or data request, contact the app owner through the address listed on the site. See also our security practices.
