Privacy Policy – InplayStream

1. Who we are

This Privacy Policy explains how InplayStream (“InplayStream,” “we,” “us,” or “our”), collects, uses, and shares information when you:

• visit our website at https://inplaystream.app,
• use our web application for online music lessons and related tools, and
• interact with our support or communication channels

(collectively, the “Services”).

This Privacy Policy describes how we handle personal information in connection with the Services. If you do not agree with the practices described in this Privacy Policy, you should not use the Services.

2. Scope and roles

Depending on how you use InplayStream:

• We generally act as an independent business, controller, or service provider for account data, billing, platform operations, security, support, and product improvement.
• When a school, studio, teacher, or organization uses InplayStream to manage their own students or users, that organization may act as the primary controller or decision-maker for certain data, and we may act as its service provider or processor for certain functions.

Schools, studios, teachers, and organizations are responsible, where applicable, for providing lawful instructions, obtaining any notices or consents they are required to provide, and complying with laws that apply to their own use of the Services.

At the same time, InplayStream may also have direct legal obligations as an operator or service provider under applicable privacy, consumer protection, or student-data laws, and nothing in this Privacy Policy is intended to limit obligations that apply directly to us.

We do not control how a teacher, school, or organization chooses to use personal data they export, download, or store outside of InplayStream.

3. Information we collect

We may collect:

1. Account and profile information

• Name
• Email address
• Password (hashed; we never store plain-text passwords)
• Role (e.g., teacher, student, parent)
• School or studio name (if provided)
• Country, time zone, instrument, or bio (if you choose to add them)

2. Lesson and usage information

• Session/room identifiers, class or lesson names
• Scheduling details and session duration
• In-lesson configuration (e.g., metronome settings, MIDI/keyboard options)
• Lesson notes, homework, achievements, and similar records created in the platform

3. Content you submit

• Chat messages, whiteboard content, uploaded files, and other lesson materials
• Information you send to the built-in AI assistant (questions, prompts, conversation history)
• Optional feedback or survey responses

4. Payment and billing information

• Subscription plan, billing history, discounts, and promotions
• Limited card details (e.g., last 4 digits, card brand, expiry month/year) via our payment provider
• Billing address, VAT/tax numbers (if applicable)

Full card numbers are processed by our third-party payment processor; we do not store full card numbers on our own servers.

5. Technical and device information

• IP address and approximate location
• Device type, operating system, browser type and version
• Log data (pages visited, actions, timestamps, performance data, crash logs)
• Cookies, local storage, and similar tracking technologies (see Section 7)

6. Support and communications

• Emails and messages sent to [email protected] or via contact forms
• Information shared during troubleshooting sessions
• Marketing preferences and opt-in/opt-out choices

4. How we collect information

We collect information:

1. Directly from you

When you create or update an account, start or join a lesson, send messages, upload content, use the AI assistant, contact support, or complete forms.

2. Automatically

Using cookies, local storage, server logs, and similar technologies that operate when you use the Services.

3. From third parties

• Payment providers (e.g., payment status, limited billing details)
• Email delivery providers (e.g., delivery/bounce status)
• Analytics or error-monitoring tools (if enabled)

We may combine information from these sources where allowed by law.

5. How we use your information

We use personal information for:

1. Providing and operating the Services

• Creating and managing accounts and profiles
• Authenticating logins and securing sessions
• Creating and joining lesson rooms
• Supporting lesson tools such as chat, whiteboard, MIDI/keyboard visuals, and metronome
• Processing payments and managing subscriptions

2. Communications

• Sending account-related emails (verification, password reset, receipts, subscription notices, system alerts)
• Answering support requests and resolving issues
• Sending important service announcements (security notices, major feature or policy changes)

3. Improvement and development

• Monitoring usage patterns and performance to improve reliability and user experience
• Debugging, error tracking, and protecting against abuse or attacks
• Developing new features such as achievements, lesson notes, and better teaching tools

4. AI assistant

• Processing your prompts, lesson context, and related inputs to generate AI responses
• Operating, maintaining, securing, debugging, and improving AI-related features, including through our service providers and model providers where applicable and permitted by law

AI disclaimer: AI outputs may be inaccurate, incomplete, or inappropriate for your situation. You are responsible for reviewing AI outputs and deciding whether they are appropriate for your teaching, practice, students, or other use.

5. Safety, security, and legal compliance

• Detecting and preventing fraud, abuse, and security incidents
• Investigating and responding to misuse of the Services
• Complying with legal obligations, court orders, or lawful requests from authorities

6. Marketing (where allowed)

• Sending optional product updates, tips, and promotional emails if you have opted in or where allowed by law
• Allowing you to unsubscribe from marketing at any time

Where required by applicable law, including in the EEA or UK, we process personal information on one or more legal bases, including performance of a contract, legitimate interests such as security, fraud prevention, customer support, and service improvement, consent where required, and compliance with legal obligations. The legal basis that applies depends on the specific context and purpose of the processing.

6. How we share information

We do not sell your personal information.

We may share personal information with:

1. Service providers and processors

• Payment processors and subscription management providers
• Cloud hosting, infrastructure, database, storage, and content delivery providers
• Email and communications delivery providers
• Analytics, logging, security, fraud prevention, and error-monitoring providers
• AI model and inference providers supporting AI features

We share personal information with these categories of providers only as reasonably necessary to operate the Services, provide the features you request, secure the platform, communicate with you, process payments, and support or improve our Services. Where required by law, we require these providers to protect personal information and process it only for authorized purposes.

2. Other users you interact with

In a lesson room, participants may see each other’s names, chat messages, whiteboard content, lesson notes, and other shared materials, consistent with how the platform is designed.

3. Organizations using InplayStream

If your account is managed by a school, studio, or organization, certain administrators or teachers may access information associated with your participation in lessons, to the extent enabled by that organization’s configuration.

4. Business transfers

If we are involved in a merger, acquisition, financing, or sale of all or a portion of our assets, personal information may be transferred as part of that transaction, subject to confidentiality obligations.

5. Legal and safety

We may disclose information if we reasonably believe it is necessary to:

• comply with applicable law, regulation, legal process, or governmental request;
• enforce our Terms of Use and other agreements;
• protect the rights, property, or safety of InplayStream, our users, or the public.

7. Cookies and tracking technologies

We use cookies, local storage, and similar technologies to:

• keep you logged in,
• remember your preferences and settings,
• measure usage and performance, and
• (where enabled) help us understand how the Services are used.

You can adjust cookie settings in your browser. If you block required cookies, some features may not work properly.

Where local law requires cookie consent, we will request it via a banner or similar mechanism.

8. International data transfers

We are based in the United States, and we (and some of our service providers) may process information in the United States and other countries, which may have different data protection laws than your country.

When required (for example, for EEA/UK residents), we will rely on appropriate safeguards, such as standard contractual clauses or equivalent legal mechanisms, for international data transfers.

9. Data retention

We retain personal information for as long as reasonably necessary to:

• provide, maintain, secure, and improve the Services,
• support your account, subscription, and customer service needs,
• comply with legal, accounting, tax, reporting, audit, and recordkeeping obligations,
• investigate incidents, protect the Services, and prevent fraud, abuse, or misuse, and
• resolve disputes and enforce our agreements.

Retention periods vary depending on the type of information, the context in which it was collected, and our legal or operational needs. After that, we may delete, de-identify, anonymize, or aggregate data so it no longer identifies you, and we may use that information for analytics, security, product improvement, and other lawful business purposes.

If you request deletion of your account:

• we will delete or de-identify personal information we hold about you, subject to legal, contractual, operational, security, dispute-resolution, or technical limitations, including logs, backups, billing records, tax records, legal holds, safety records, and information needed to enforce our rights or comply with law;
• information you shared with others, including lesson materials, chat messages, whiteboard content, lesson notes, or shared files, may remain visible to those users or organizations as part of their own records; and
• deletion from active systems may not be immediate and residual copies may remain in backups or archived systems until they are overwritten or securely deleted in the ordinary course.

10. Security

We use reasonable technical and organizational measures to protect personal information, such as:

• HTTPS/TLS encryption in transit where appropriate
• Access controls and authentication for administrative systems
• Logical separation of environments and least-privilege access where practical
• Regular monitoring for unusual or abusive activity

However, no method of transmission or storage is perfectly secure. You use the Services at your own risk, and you are responsible for maintaining the security of your account credentials and devices.

11. Children’s privacy and students

InplayStream is a general-audience service used by teachers, adult learners, parents, schools, studios, and organizations, and it may be used with students, including minors, under appropriate parent, teacher, school, or organizational supervision.

• We do not knowingly permit children under 13 to create direct self-serve accounts unless the account is created, authorized, or managed by a parent, guardian, teacher, school, studio, or organization in a manner permitted by applicable law.
• If you are a teacher, school, studio, parent, guardian, or organization using InplayStream with minors, you represent that you are authorized to do so and that you are responsible for providing any notices and obtaining any consents, permissions, authorizations, or approvals required by applicable law for your use of the Services and for the collection, use, sharing, or disclosure of student or child information in that context.
• InplayStream may rely on those representations where permitted by law, but we may also require additional information, limit features, suspend access, refuse account creation, or delete information where we believe additional review is necessary or where we believe use may not be authorized.

If we learn that personal information from a child has been collected, used, or disclosed in a way that is not authorized by applicable law, we may investigate, restrict access, suspend features, delete information, or take other appropriate action. If you believe a child has created an account or provided personal information without appropriate authorization, contact us at [email protected].

12. Your rights and choices

Depending on your location and applicable law, you may have the right to:

• Access personal information we hold about you
• Correct inaccurate or incomplete information
• Delete certain personal information
• Restrict or object to certain processing
• Receive personal information in a portable format where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority or regulator where applicable

You can exercise many of these rights by logging into your account and adjusting your profile or settings. For other requests, contact us at [email protected]. We may need to verify your identity, confirm your authority to make a request, and may be unable to fulfill a request where we must retain data for legal, security, contractual, or legitimate business reasons.

If you are in the EEA, UK, or another jurisdiction that provides a right to complain to a data protection authority or regulator, you may also have the right to contact that authority directly.

You can unsubscribe from marketing emails at any time by using the “unsubscribe” link in the message or contacting us.

13. No legal, financial, or professional advice

Content provided through the Services, including AI-generated content, lesson materials, or any educational information, is for informational and educational purposes only and is not legal, financial, medical, or other professional advice. You are responsible for how you use that content and for complying with the laws that apply to you.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top. If we make material changes, we may also provide additional notice where appropriate, including by email, in-app notice, or other reasonable means.

The updated Privacy Policy will become effective as of the revised “Last updated” date, except where applicable law requires additional notice, consent, or choice before a change takes effect.

15. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, you may contact us at:

Email: [email protected]