Legal

Privacy Policy

Last updated June 9, 2026

This Privacy Policy explains how Andante (“Andante,” “we,” “us”) collects, uses, and protects information when you use our website and practice-tracking application (the “Service”). By using the Service you agree to this policy.

Andante is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13. See Children’s Privacy below.

Information we collect

• Account information. When you create an account we collect your email address and authentication credentials (managed by our auth provider; we do not store your password in plaintext).
• Profile you provide. Optional details you enter during onboarding or in settings — such as a display name, instrument, role, experience level, age range (13+), country/region, and practice habits and goals.
• Practice content you create. Practice sessions and timers, repertoire/pieces, logs and notes, goals, recordings you choose to capture, and audition deadlines.
• Payment information. If you subscribe, payments are processed by Stripe. Andante does not receive or store full card numbers; we keep a subscription status and billing identifiers needed to manage your plan.
• Device & technical data. Standard information such as browser type and settings, and identifiers needed for features you enable (for example, a push-notification subscription if you opt in).

Local-first storage

Some of your data is stored locally in your browser (for example, theme and motion preferences, and practice sessions queued while offline) using localStorage and IndexedDB. Offline sessions are synced to your account when you reconnect. Data kept only on your device stays there unless and until it syncs.

How we use information

• To provide, maintain, and improve the Service and your practice log.
• To authenticate you and keep your account secure.
• To process subscriptions and send transactional messages (e.g. receipts, account notices).
• To send updates you opt into, such as a weekly practice digest to a parent or teacher.
• To understand, in aggregate, how the Service is used so we can improve it.

We do not sell your personal information.

Service providers

We share information only with providers that help us run the Service, under their terms:

• Supabase — authentication and database hosting.
• Stripe — payment processing and subscription management.
• Resend — sending email (such as the practice digest).
• Vercel — website and application hosting.
• Web Push services — delivering notifications you opt into.

Cookies & similar technologies

We use cookies and local storage that are necessary to sign you in, keep your session, and remember preferences. We do not use them to build advertising profiles.

Children’s Privacy (COPPA)

The Service is intended for users aged 13 and older and is not directed to children under 13. We do not knowingly collect personal information from anyone under 13, and our onboarding does not request data from users who identify as under 13.

Where a parent, guardian, or teacher sets up Andante on behalf of a younger student, the account is held and managed by the adult, and we do not knowingly collect personal information directly from the child.

If you believe a child under 13 has provided us with personal information, please contact us at privacy@andante.appand we will delete it promptly. A parent or guardian may review, request deletion of, or refuse further collection of their child’s information by contacting the same address.

Your rights & choices

You may access, correct, export, or delete your information. You can update most details in Settings, or contact us to request access or deletion. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor applicable requests.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your personal information, except where we must retain it to comply with legal obligations.

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, but we work to safeguard your data and limit access to it.

International users

Andante is operated from, and your information may be processed in, countries other than your own. By using the Service you understand your information may be transferred to and processed in those countries.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice.

Contact us

Questions about this policy or your data? Email privacy@andante.app.