Privacy policy

1. What we collect

• Account details: your first name, email address and password. Your password is stored encrypted by our sign-in provider, and we can never see it. If you choose “Continue with Google”, Google shares your name, email address and profile picture with us instead, and we never see your Google password.
• Your learning: your answers to the setup questions (experience, type of guitar, styles, goals, practice time and strumming hand), skill-check results, the lessons you finish, your practice minutes and your settings.
• Messages and feedback you send us.
• Email sign-ups: if you leave your name, email address and guitar level in our sign-up box, we keep them to send you guitar tips and news about lessons. Every email has an unsubscribe link, and you can ask us to delete your details at any time.
• Payments: paid plans are sold by Paddle.com, our reseller and Merchant of Record. Paddle collects your payment details and billing address directly, under Paddle’s privacy policy. We never see or store your full card or bank details. Paddle tells us your plan, its status and renewal dates, your country, and the email address you paid with, so we can switch your plan on and help with billing questions.
• Technical information: our hosting provider processes standard information such as your IP address and browser type to deliver the site and protect it from abuse.
• How you use the site: pages you visit, where you came from, and how you click and scroll. We use Google Analytics and Microsoft Clarity for this (see “Cookies and analytics” below). We don’t use advertising trackers.

2. How we use it

• To run your account and save your progress, so you can continue on any device.
• To build your daily practice plan and show your progress.
• To reply when you contact us.
• To improve the site and the lessons, for example by seeing which pages people use and where learners get stuck.
• To send account emails, such as confirming your email address, resetting your password, and telling you about important changes.
• To send guitar tips and lesson news to people who signed up for them.

We don’t sell your data, and we don’t use it for advertising. We’ll only send you marketing emails if you’ve agreed to receive them.

3. Who handles it for us

We use a few trusted providers to run Fretwork. They process your data only to provide their service to us:

• Supabase: accounts, sign-in and the database that stores your progress.
• Cloudflare: hosting the website and protecting it from attacks.
• Resend: sending account emails.
• Google (Google Analytics): counting visits and showing which pages people use.
• Microsoft (Clarity): recordings and heatmaps of how visitors click and scroll, so we can fix confusing pages. Clarity hides text you type and other sensitive content.
• Paddle.com: our reseller and Merchant of Record. Paddle takes payments, handles sales tax and VAT, and deals with refunds and billing support. Paddle receives your name, email address, country and payment details when you buy.

These providers may store and process data in the United States, the United Kingdom, the European Union and other countries.

4. Cookies and analytics

We use Google Analytics and Microsoft Clarity to understand how visitors use the site. They set cookies and collect information such as the pages you visit, your device and browser, your approximate location, and how you click and scroll. Clarity can replay these sessions for us, with text you type and other sensitive content hidden. We use this only to improve Fretwork, never for advertising. You can block these cookies in your browser settings, or with Google’s opt-out add-on; the site works without them.

We don’t use advertising cookies. The site keeps a few things in your browser’s local storage: your sign-in session, a copy of your progress (so pages load instantly and still work if your connection drops), and preferences such as light or dark mode and currency. Clearing your browser data signs you out on that device; your progress stays safe in your account. When you open checkout, Paddle’s checkout may use its own cookies to take your payment and prevent fraud.

5. How long we keep it

We keep your data while your account is open. You can delete your account at any time from Account → Delete account. This removes your account and progress from our database straight away; copies in our providers’ routine backups are removed as those backups expire. Deleting your account doesn’t cancel a paid subscription, so cancel it first from Account → Manage subscription. We and Paddle keep records of payments for as long as tax law requires.

6. Your rights

Under India’s Digital Personal Data Protection Act, 2023, you can ask us to show you the personal data we hold about you, correct it, or erase it, and you can withdraw your consent at any time. Email hello@guitarfretwork.com and we’ll respond as soon as we can, and within 30 days. If you’re unhappy with our answer, you can complain to the Data Protection Board of India.

7. Children

Learners of any age are welcome. If you are under 18, a parent or guardian must create the account and agree to this policy on your behalf.

8. Keeping it safe

Everything you send to the site travels over an encrypted connection. Each learner’s data is kept separate, so only you can read your own progress, and access to our systems is limited to the people who run Fretwork.

9. Changes to this policy

If we change this policy, we’ll update the date at the top. If the change is significant, we’ll also tell you by email or on the site.

10. Contact

Questions or requests about your data: hello@guitarfretwork.com.