Privacy Policy

Learning stays in this browser

Progress, reflections and settings are stored in your browser using localStorage. Learning records are not sent to our servers or automatically synced between devices. Clearing site data or ending a private browsing session can remove them. Signing out or purchasing does not delete ordinary learning records.

We do not collect or record your playing through a microphone or MIDI, or automatically grade your performance.

Accounts, purchases and support

We use your email address and account identifier for sign-in and purchase-access checks. Product, amount/currency, payment identifiers, purchase/refund status and access records are kept to deliver the service, reconcile payments, prevent abuse and maintain accounting records. Stripe processes card numbers and security codes; COYUNO does not store them on its servers.

We use support emails and information needed to investigate your request. Do not send passwords, Magic Links, full card numbers or security codes.

Optional feedback and basic usage counts

If you send feedback, we store the category, optional comment of up to 500 characters, lesson/section, language, screen-size class, app version and receipt time in Supabase to improve the material. Names, emails, account IDs, playing and learning results are not attached. Do not include personal/payment information, passwords or sign-in links. Use Contact if you need a reply.

We count sales-page views, free-trial link clicks, app openings and Account-page openings through a same-site endpoint, with language, screen-size class, app version and time. We do not use advertising cookies, identifiers linking people across actions or session recordings. Optional usage reporting is skipped when Do Not Track or Global Privacy Control is enabled. On tagged social visits to a sales page, we also count allowlisted source, medium, campaign and landing-page path labels. We do not store full URLs, other query parameters or tracking data carried between pages. Completed purchases are counted separately from existing authoritative server purchase records.

Cloudflare temporarily uses connection IPs for abuse rate limiting; IPs are not fields in feedback or usage records. We aim to clear these records after about 180 days. Sending failures do not affect practice or browser learning records.

Cookies and retention

Essential Secure, HttpOnly cookies support sign-in. Encrypted server-side session state lasts at most 30 days; an unfinished sign-in request lasts at most 15 minutes. Sign-out or expiry ends the session. Purchase access is checked on the server rather than trusted from a cookie value.

The 30-day session limit is not a deletion deadline for account or purchase records. Those are retained as needed to provide the service, meet legal/accounting obligations, prevent abuse and handle disputes. Learning records remain until you remove this site’s browser data.

Service providers

We use Cloudflare for delivery and sessions, Supabase for accounts and purchase/access data, Resend for sign-in emails, and Stripe for payments. Support is handled through email services. Providers may process connection IP addresses, browser details, access times and errors for delivery, security and troubleshooting, including outside Japan.

We do not use learning records for advertising or set advertising-tracking cookies.

Access, correction and deletion requests

Contact contact@coyuno.com to ask about, correct or delete account information. We verify identity before handling requests. Records needed for legal obligations, abuse prevention or disputes may be retained to the extent necessary. Remove local learning records through the site-data controls on the device where you practiced.