Privacy
Last updated 21 October 2026
Paruto Music Academy is run by Paruto Music. We keep as little about you as we can, and we never sell it. This notice says exactly what we keep and why.
Learning without an account
You can use the whole Academy without signing in. Your progress (lessons, stars, practice days and settings) is then saved only in your browser, on your device. We don't see it. So the Academy works offline, this browser also keeps a copy of the app and the lessons you open. Those copies are the same for everyone, apart from your Light or Dark choice so they look right: nothing in them is about you.
Your microphone and keyboard
The tuner and singing lessons listen through your microphone only while you're using them, and the sound never leaves your device: it's analysed in your browser. MIDI keyboards work the same way. We never record or upload audio.
If you sign in
- You sign in with Paruto ID (id.paruto.com), the sign-in shared by Paruto apps. It tells us your email address, your name if you've given one, and an identifier for your Paruto ID. See Paruto ID's privacy notice.
- We keep your account (that email, name and identifier) and your progress, so it follows you to other devices. We keep a session cookie so you stay signed in for up to 60 days from your last visit.
- You can sign out at any time, and delete your account in Profile. Deleting it removes your account, sessions and saved progress at once. Backups that may still contain it are replaced within 30 days.
Children
Children don't have accounts. A grown-up adds them as learners on their device, and they learn in kids' mode, which has no email, chat, sharing, leagues, prices or feedback form. Changing who's learning, and adding, changing or removing learners from a child's profile, needs a grown-up's answer to a question a young child can't read.
- For each child we keep only a first name or nickname (letters only, no surname), an age band (4 to 6, 7 to 9 or 10 to 12) and a picture they pick, plus their lessons and practice. Never their full name, birth date, photo, email, school or location.
- This stays in your browser unless you're signed in and agree to keep your children's learning in your account too, so it carries on on your other devices. We record that you agreed, to which version of this notice, and when. You can stop at any time in Profile: their profiles and progress are then removed from your account at once, and stay on your device. Removing a child, or deleting your account, removes everything about them too.
- A child's progress is always kept in kids' mode: no XP, levels or streaks.
Feedback you send
When you send an idea, a request or a problem report from Profile, we keep what you wrote, which kind it is, the app version and whether a teen or an adult sent it. It isn't linked to your name, email or account. Your device remembers what it sent (and so does your account, if you sign in), so the app can tell you when it ships. To stop floods of messages, we also keep a scrambled code made from your internet address and the day: it changes every day and can't be turned back into the address. When you press Send, Cloudflare Turnstile checks that a person sent it rather than a bot: it looks at signals from your browser and device, doesn't use cookies to follow you, and usually asks nothing of you. We keep feedback while it helps us improve the Academy; to have something you sent deleted, email us its title.
Cookies and analytics
- Cookies we set: your session (if you sign in), your Light or Dark choice, and whether the sidebar is collapsed. No advertising or tracking cookies.
- Cloudflare Web Analytics counts page visits without cookies and without identifying you. It isn't loaded at all if your browser asks not to be tracked (Global Privacy Control or Do Not Track).
- We count a few moments (starting sign-in, creating an account, a first lesson saved) as plain totals, with nothing that identifies you. If something breaks in your browser, we log the error message and the page it happened on, without anything about you.
Who processes your data
Cloudflare hosts the Academy, stores accounts, progress and feedback (in its D1 database), and runs the Turnstile check on the feedback form. Paruto ID handles sign-in. Nobody else receives your data.
Your rights
You can see, correct or delete what we keep about you. Most of it is in Profile; for anything else, email support@paruto.com.