Your privacy matters.

The short version

We save your account details, practice results and rewards so you can continue learning. We use your results to suggest what to practise next. Optional sing-back analyses microphone sound on your device; we do not store or upload audio recordings. We do not sell your personal information or show ads.

A parent or guardian should supervise younger learners. We do not offer separate child accounts. Read the privacy notice for families below.

Who is responsible

Saxon Fullwood trading as LearnTonic

152 The Beeches, Upton Upon Severn, Worcestershire, WR8 0QQ, United Kingdom

Contact: support@learntonic.app.

Information used by Tonic

• Account details: your name, email, sign-in provider, verification status and account identifier. Firebase handles Google and password sign-in. Tonic does not store your password in its learning database.
• Learning activity: lesson and practice settings, answers and mistakes, scores, session times, XP, streaks and unfinished sessions. Games also save scores, best streaks, remaining hearts and unfinished runs to your account, alongside earlier island progress and note answers. Chord Voyage saves separate listening and playing scores. If you choose MIDI input, selected notes are sent to check your answer; Chord Voyage retains the result and run progress, rather than a recording of your performance. MIDI device names and other device messages are not stored. Echo also uses note timing to check Rhythm Echo answers and saves per-interval accuracy, ability use, chains and personal records. Chord Chase and Improv process note pitches, timing, duration and velocity to assess answers and musical missions. They save session scores, settings, Flow, skill summaries and up to three motif pitches so an unfinished session can resume. Complete note performances and raw MIDI messages are not retained in the session record. Raw MIDI messages and performance recordings are not retained.
• Your choices: learning goals, experience level, practice focus, owned rewards and equipped looks. Sound volume is stored on your device.
• Subscriptions: an account-linked billing identifier and membership status. RevenueCat and the payment provider handle purchases, receipts and subscription management. Tonic does not store full payment-card details. RevenueCat can retain a country from the purchase or infer a country from the connection IP address; the IP is then discarded by RevenueCat. This supports subscription reporting and is separate from our optional usage analytics.
• Service and support information: infrastructure providers may process connection and error records. If you contact support, the information you send is used to help with your request.

Teacher assignments are optional. When you join one, you choose a display name and explicitly agree to share attempts started through that assignment with its creator. They can see the display name, attempt count and best accuracy, including ended partial attempts; they cannot see your email or unrelated progress. Leaving removes those shared records, and deleting your account removes your assignments and memberships. Calendar reminders are downloaded locally and only run if you import them into your own calendar.

Sounds play on your device from recorded instrument samples and synthesis. Optional sing-back uses microphone audio only for live pitch analysis on your device; it is never recorded or uploaded. Offline lesson packs and answers are stored on this device, then submitted to your signed-in account when you reconnect. Firebase Analytics and advertising trackers are not enabled in this release.

Cookies and browser storage

We use browser storage to keep you signed in, remember your sound, instrument, notation, colour theme and motion preferences, and save practice recipes. Welcome setup stores your chosen instrument, experience, learning goal, learner age range and daily time on this device. No birthday is requested. The age range stays on this device and is not sent with your practice plan. Optional analytics is disabled for learners under 16; under-18 learners are directed to a parent-owned account. When you sign in, its focus, experience and daily time can be saved as your account practice plan; the instrument choice stays on the device. Existing account plans are not replaced by a pending guest plan. Offline practice stores downloaded lesson packs, instrument sounds and queued answers on this device. These functions use local storage, IndexedDB and browser caches where available; they are not advertising trackers. Clearing site data removes local settings and offline packs and may sign you out. Unsynced answers may be lost, so reconnect and finish syncing before clearing storage.

Your optional analytics choice is also saved in local storage for this browser until you change it or clear site data. Checkout and sign-in providers may use their own storage on their pages, as described in their privacy notices.

Optional website and app analytics

If you allow it below, we use Cloudflare Web Analytics to understand visits, page views, referral sources and page performance, and to improve the website. Cloudflare collects page and browser performance information through a small script. Its analytics does not use cookies or local storage to collect usage metrics, or fingerprint individual visitors. We do not send your account identifier, email, practice answers or payment details as analytics events.

Learn more about Cloudflare Web Analytics. These aggregate statistics are separate from the learning records stored in your account.

If you allow optional analytics, our private owner dashboard also records page and app-tab views, broad device categories, referral categories, approved campaign labels, approximate country, and steps such as starting a lesson, viewing Plus, opening checkout and confirming Plus access. It does not store IP addresses, precise location, email, account IDs, answers, microphone audio, complete referral URLs or raw error messages in these usage events. A random browser identifier is stored on your device and rotated after 30 days; a visit identifier resets after 30 minutes of inactivity. These identify browsers, not people, and do not follow you between devices. Usage events are retained for up to 90 days and removed when the tracker or dashboard next runs. Turning analytics off also requests deletion of events for this device’s current identifier; if you are offline, that request may not complete and ordinary retention still applies. Browsers sending Do Not Track are excluded from this first-party tracker.

The owner dashboard separately summarises existing account learning records, such as lesson completion and accuracy, to improve the service. Optional usage consent does not change the account records needed to save your progress. If subscription reporting is connected, it stores a limited 90-day feed of provider event IDs, purchase amounts, currency, store, environment and event times, without full receipts or customer identity. Payment providers retain their own records under their policies.

Analytics is off by default. Allowing it is optional and separate from accepting our terms. There is no automatic consent prompt. You can choose it in Settings → Privacy, or below. You can withdraw permission without losing access to learning. Your choice applies to this browser; make a separate choice on other devices or browsers.

Why information is used

To authenticate you, save your learning progress, provide recommendations, prevent duplicate rewards purchases, confirm Plus access, and respond to support requests. Personalised practice uses your goals and previous results; it does not make decisions about employment, education admission or credit.

Our legal bases are performing the service agreement for accounts, learning and subscriptions; legitimate interests for proportionate security and support; and legal obligations for required financial records; and consent for optional website analytics. Supervised learning is designed around local processing, data minimisation and the child’s interests. Where local law requires parental consent, it must be obtained before the relevant collection. Supervised practice does not upload children’s practice records or link them to an adult account. We do not treat accepting our terms as consent to marketing or tracking.

Providers and international processing

Google Firebase supplies authentication. OpenAI Sites and its hosting infrastructure, including Cloudflare, host the application and learning database. RevenueCat manages subscription information, and Stripe processes web payments. Android purchases made through Google Play are processed by Google Play.

Providers may process data outside your country, including in the United States. Contact us for information about the arrangements and safeguards applicable to your data. Provider information is available from Firebase, Cloudflare, RevenueCat and Stripe and Google Play. These links do not replace LearnTonic’s responsibility for your information.

Retention and deletion

Learning records remain associated with your account until deletion. The deletion flow removes your Tonic sessions, preferences, XP and rewards from the active learning database, then removes your Firebase sign-in account. A minimal account identifier and deletion timestamp remain to prevent late requests restoring deleted data and to support retries.

Deleting Tonic does not cancel subscriptions or automatically erase records held by billing providers. Receipts, transaction records, support messages, infrastructure logs and backups may have separate retention requirements. We keep support correspondence while resolving your request and for as long as needed for related complaints or legal claims. Financial records are retained for applicable accounting, tax and dispute requirements. Provider logs and backups follow their own retention schedules; account deletion does not instantly erase every backup. Contact us for a specific retention or erasure request. We will explain any information that must remain and why.

Your choices and rights

You can update practice preferences, manage subscriptions, and delete your Tonic account. Depending on your location, you may also have rights to access, correct, export, restrict or object to processing of your information, and to withdraw consent where used. Contact support for requests involving provider-held records or a legacy learning profile.

UK users can raise a concern with the Information Commissioner’s Office; other users can contact their local data-protection authority.

Age, accounts and younger listeners

LearnTonic presents a single interface and does not ask for your date of birth. We ask for an age range during setup and store it on this device to guide account ownership and optional analytics. Account holders must be at least 18 and legally an adult where they live. We do not offer separate child accounts or child profiles. A parent or guardian should supervise younger learners.

Account learning records are saved to the signed-in account. If a device or account is shared, its progress may be visible to other people using that account. Do not enter a child's name, email, school, address or other personal details in an account or teacher assignment. The current interface does not provide a separate supervised mode or a verifiable parental-consent process for online child profiles. Optional usage analytics remains off unless explicitly enabled; account creation and acceptance of the Terms do not enable it.

Local practice records saved by an earlier supervised version remain on the device and are not automatically uploaded or merged into an account. Clearing app or browser data removes those local records.

A parent may contact support@learntonic.app to review, correct or request deletion of information associated with their child, or to report an account created by a child. We may ask for proportionate proof of account ownership or parental authority.

Changes to this notice

Last updated 17 October 2026. Material changes will be explained before the relevant new use of data. No marketing consent is bundled into account creation.