Privacy Policy for Super Guitar

PRIVACY POLICY FOR SUPER GUITAR
Effective Date: September 16, 2026
Last Updated: September 16, 2026
Welcome to Super Guitar ("we", "our", "us", or the "App"), owned and operated by Ari Software ("Company"). We are committed to protecting your privacy and ensuring complete transparency regarding how your data is collected, processed, and safeguarded.
This Privacy Policy explains how information is collected, used, and protected when you download, install, and use the Super Guitar mobile application (Package Name: com.arisoftware.superguitar) and any associated services, websites, or features.
By downloading, installing, or using Super Guitar, you agree to the practices described in this Privacy Policy. If you do not agree with this policy, please do not use the App.

1. INFORMATION WE COLLECT AND PROCESS
A. Device Hardware and Sensor Permissions
Super Guitar provides real-time guitar tuning, chord recognition, and interactive guitar learning feedback. To deliver these core features, the App requests access to specific device hardware:
- Microphone Access (RECORD_AUDIO):
  Purpose: Required exclusively for the chromatic tuner and chord recognition engine to detect the pitch, notes, and chords produced by your guitar in real time.
  Strictly Local On-Device Processing: Audio captured by the microphone is processed in real time in volatile device memory (RAM) using on-device algorithmic analysis (such as YIN pitch detection and chromagram calculation).
  Zero Storage / Zero Transmission: We NEVER record, save, store, or transmit your voice or microphone audio to any remote servers, cloud infrastructure, or third parties. Once a pitch or chord is evaluated, the transient audio buffer is immediately discarded.
- Audio Settings (MODIFY_AUDIO_SETTINGS):
  Used solely to configure low-latency audio buffer parameters (such as the Android Oboe audio framework) for responsive sound output and tuning accuracy.
- Vibration (VIBRATE):
  Used to deliver tactile haptic feedback for the digital metronome, tuner indicators, and interactive UI controls.

B. Automatically Collected Information and Device Data
When you access or use the App, certain non-sensitive diagnostic and technical information may be collected automatically by the App or third-party service providers:
- Device Identifiers: Device manufacturer, model, operating system version, and unique device identifiers (such as the Google Advertising ID / AAID).
- Usage and Diagnostic Metrics: App session duration, features accessed, lessons completed, application crashes, ANRs (Application Not Responding), and diagnostic logs.
- Network and Connection Information: IP address, mobile network operator, language and locale settings, time zone, and general coarse location (country or city level derived from IP).

C. Information You Voluntarily Provide
- Support Inquiries: If you contact us directly via email for technical support, feedback, or bug reports, we collect your email address, your name (if provided), and any details you include in your message.

2. IN-APP PURCHASES AND SUBSCRIPTIONS (GOOGLE PLAY BILLING)
Super Guitar offers optional in-app purchases and auto-renewable subscription plans (such as premium lesson tiers, advanced song library access, tuner features, or ad-removal passes).
- Payment Processing via Google Play: All financial transactions, payment methods, and billing information are processed securely and directly by the Google Play Store (Google Payment Services).
- No Direct Financial Data Collection: We do NOT collect, receive, store, or process your credit/debit card numbers, bank details, billing addresses, or payment credentials.
- Purchase Verification: We only receive non-sensitive purchase receipts, order IDs, purchase tokens, and subscription status (such as active, expired, or cancelled) from the Google Play Billing API to verify your entitlement and unlock your purchased features.
- Subscription Management: Subscriptions automatically renew unless cancelled through your Google Play account settings. You can manage, pause, or cancel your subscription at any time by visiting the Subscriptions section in the Google Play Store app.

3. ADVERTISING (GOOGLE ADMOB)
To support free lessons, tools, and content within Super Guitar, we display third-party advertisements served by Google AdMob (provided by Google LLC / Google Ireland Limited).
A. How Google AdMob Uses Data
Google AdMob and its advertising partners may collect and use information to display ads, measure ad performance, and prevent fraud:
- Identifiers: Google Advertising ID (AAID on Android), IP address, and cookie/SDK identifiers.
- Device and Usage Data: Device model, operating system version, connection type, ad interaction data (clicks, impressions, views), and in-app events.
- Personalized vs. Non-Personalized Ads:
  Personalized Ads: Ads tailored to your inferred interests based on past browsing activity and app usage (where consented).
  Non-Personalized Ads: Ads targeted based on contextual factors (such as the content of the app, general location, or time of day) rather than past user behavior. Even for non-personalized ads, identifiers are used for frequency capping, aggregated ad reporting, and fraud detection.
B. Managing and Opting Out of Targeted Advertising
You have complete control over interest-based advertising on your Android device:
- Reset or Delete Advertising ID: Go to Settings > Google > Ads (or Settings > Privacy > Ads) on your Android device and select "Reset advertising ID" or "Delete advertising ID".
- Opt Out of Ads Personalization: Toggle on "Opt out of Ads Personalization" in the same menu.
- Google Ad Settings: You can also manage your Google ad personalization preferences at https://adssettings.google.com/

4. THIRD-PARTY SERVICE PROVIDERS
We integrate trusted third-party software development kits (SDKs) and application programming interfaces (APIs) to provide advertising, payment processing, and core app stability. These third parties have their own privacy policies governing their data practices:
1. Google Play Services and Google Play Billing
   Purpose: App delivery, authentication, and in-app purchase processing.
   Privacy Policy: https://policies.google.com/privacy
2. Google AdMob
   Purpose: Monetization and ad serving (banner, interstitial, and rewarded video ads).
   Privacy Policy: https://policies.google.com/technologies/ads
   AdMob Data Usage: https://support.google.com/admob/answer/6128543
3. Google Firebase / Crashlytics (if enabled for diagnostics)
   Purpose: Application crash analysis, performance monitoring, and bug fixing.
   Privacy Policy: https://firebase.google.com/support/privacy

5. HOW WE USE YOUR INFORMATION
We use collected and processed information for the following legitimate purposes:
- Core Functionality: To provide real-time audio pitch detection, tuning, metronome haptics, and guitar lessons.
- Order and Entitlement Fulfillment: To confirm and activate in-app purchases, lifetime unlocks, or subscriptions.
- App Improvement and Optimization: To identify bugs, reduce audio latency, optimize battery consumption, and improve learning materials.
- Advertising and Monetization: To serve relevant banner, interstitial, or rewarded ads and monitor campaign efficacy.
- Customer Care: To respond to user inquiries, provide troubleshooting assistance, and handle feedback.
- Security and Compliance: To prevent fraudulent activities, enforce our terms of service, and comply with legal requirements.

6. LEGAL BASES FOR PROCESSING (GDPR / UK GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our legal bases for collecting and processing your personal data under the General Data Protection Regulation (GDPR) are:
- Consent: Where you have granted explicit consent (such as granting microphone permission for tuning, or consenting to personalized advertising via our Consent Management Platform).
- Performance of a Contract: Where processing is required to deliver services you requested (such as activating in-app purchases or subscriptions).
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (such as maintaining app security, preventing ad fraud, analyzing crashes, and improving app performance).
- Legal Obligation: Where processing is necessary to comply with applicable statutory laws or regulatory requests.

7. YOUR PRIVACY RIGHTS
Depending on your country or state of residence, you may have specific rights regarding your personal data:
A. European Union and United Kingdom (GDPR / UK GDPR Rights)
- Right of Access: You can request a copy of personal information we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data.
- Right to Restriction of Processing: You can ask us to restrict the processing of your data under certain circumstances.
- Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to processing based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time (such as revoking microphone permission in your device settings).
- Right to Complain: You have the right to lodge a complaint with your local Data Protection Authority (DPA).
B. California Residents (CCPA / CPRA Rights)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have specific rights:
- Right to Know: The categories and specific pieces of personal information collected, sources, and third parties with whom it is shared.
- Right to Delete: Request deletion of personal information collected from you.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt-Out of Sale or Sharing: We do not sell personal information in exchange for money. However, sharing identifiers (like Advertising IDs) with ad networks for interest-based advertising may qualify as a sale or sharing under California law. You may opt out by adjusting your device's ad tracking settings as described in Section 3.
- Right to Non-Discrimination: We will not discriminate against you (such as by denying services or charging different prices) for exercising any CCPA/CPRA rights.
To exercise any of these rights, please contact us using the contact details provided in Section 12.

8. CHILDREN'S PRIVACY (COPPA AND GLOBAL COMPLIANCE)
Super Guitar is an educational music application designed for guitar learners of various ages. However:
- We do not knowingly collect, request, or solicit personally identifiable information from children under the age of 13 (or under 16 in the European Union).
- Our on-device microphone processing does not identify individuals, record speech, or collect voice profiles.
- Third-party ad networks (AdMob) serving ads within the app are configured in compliance with child privacy laws (COPPA / GDPR-K). Where required, ads are served in a non-personalized, contextual-only mode.
- If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately so that we can promptly take corrective action and delete the information.

9. DATA RETENTION AND STORAGE
- Microphone Audio: Held in volatile RAM for milliseconds and immediately destroyed; zero retention.
- Diagnostic and Support Data: If you contact customer support, we retain correspondence records for as long as necessary to resolve your issue and comply with standard tax and legal obligations, after which it is securely deleted.
- Purchase History: Purchase tokens and receipts from Google Play are retained as long as your account or entitlement is active to maintain your subscription status.

10. DATA SECURITY
We implement reasonable administrative, technical, and physical security safeguards designed to protect personal data against unauthorized access, destruction, loss, alteration, or misuse. All network communications between the App, Google Play, and third-party SDKs utilize encrypted transport layer protocols (HTTPS / TLS).
However, please remember that no method of transmission over the Internet or electronic storage is 100 percent secure, and we cannot guarantee absolute security.

11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or app features (such as when adding new ad placements, purchase options, or cloud backup features).
When updates occur:
- We will revise the "Last Updated" date at the top of this document.
- For significant changes, we will provide noticeable in-app notifications or app store release notes where appropriate.
- We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

12. CONTACT US
If you have any questions, concerns, feedback, or requests regarding this Privacy Policy or your personal data, please contact us at:
- Developer / Company Name: ARI Software Lab
- Email: mdraihan2328@gmail.com
- App Package: com.arisoftware.superguitar
x