SYNCPrivacy Policy
SYNCopated ("the App") is a remote music-lesson tool made by Cape Wesley. This page is written for the humans using it — teachers, students, and parents — as well as for Apple's App Review team. If anything here is unclear, email services@capewesley.com and we'll clarify.
The short version
- We collect the minimum needed to make the App work.
- We never sell your data. We don't use it for advertising or analytics profiling across other apps.
- You can delete your account, and everything tied to it, from Settings → Delete account at any time.
- Live audio and video during lessons are transmitted but not recorded by us.
- We don't knowingly create accounts for children under 13. Young students sign in with their own Apple ID, which Apple's platform already age-gates and parentally controls.
What we collect, and why
Account
When you sign in with Apple, we receive a stable identifier ("Apple subject"), the email Apple provides (which may be a private relay address), and the display name you supplied. We use these to tell your account apart from everyone else's, sign you in on subsequent launches, and let teachers invite you by email.
Content you create
Scores, annotations, lesson plans, assignments, practice logs, notes, end-of-lesson summaries, and invitations. These are stored on our servers so they're available on every device you sign in from, and shared with the members of the rooms or events you grant access to. We keep them until you delete them, delete the room that contains them, or delete your account.
Lesson audio, video, and MIDI
During a live session, audio and video are streamed peer-to-peer via LiveKit's Selective Forwarding Unit. MIDI notes travel through our real-time server to keep the shared score cursor in sync. Sessions are not recorded on our servers. Individual participants can choose to record locally on their own device; they are responsible for obtaining consent before doing so.
Device + push
To deliver lesson reminders, assignment reminders, and end-of-lesson summaries, we store the Apple Push Notification token your device provides, along with the platform (iOS) and the time we last saw it. You can turn push off in iOS Settings or inside the App; we'll stop trying to reach that device.
Usage, just enough to make the App work
We record practice-session durations, lesson start/end times, and assignment completion so your teacher's progress view reflects reality. We log technical errors (with no personal context beyond a user id) for debugging — those logs auto-expire after thirty days. We do not use any third-party analytics or advertising SDK in v1.1.0.
Who we share it with
Other members of your rooms and events
The core function of the App is sharing content with people you invite. Scores you attach to a room are visible to the members of that room. Notes and summaries are visible to their intended audience per the app's UI controls.
Service providers
- Apple — Sign in with Apple, push notifications (APNs), and the App Store.
- Microsoft Azure — our lesson server and database are hosted in Azure Container Apps and Azure Database for PostgreSQL.
- LiveKit Cloud — our real-time audio/video transport. Live streams route through their infrastructure for the duration of a session and are not persisted there.
Each of these companies handles data under their own terms, covering only the narrow role they play. We do not transmit your content to any advertising, analytics, or data-broker service.
Legal
We will disclose data if compelled by a valid legal process. We do not volunteer it.
Young students and parents
SYNCopated is designed for one-to-one piano instruction. Students under 13 should sign in with their own Apple ID — a family-sharing child account set up by a parent. Apple's platform handles age verification, parental consent, and content restrictions at that layer. We do not ask for a student's date of birth, and we do not allow teachers to create accounts on a student's behalf.
If you are a parent and believe your child is using SYNCopated without your consent, or you want us to remove data tied to a child's account, email services@capewesley.com and we'll act within seven days.
How you control your data
- Delete account — Settings → Delete account. Cascades to every room you own, every uploaded score, every assignment, every note you authored.
- Turn off end-of-lesson summary notifications — a student-profile toggle on each room; either you or your teacher can flip it.
- Revoke push — iOS Settings → Notifications → SYNCopated.
- Individual content — delete a score, note, or assignment inside the App. Deletion is immediate.
- Export — scores and notes can be exported via the iOS share sheet. If you need a wholesale data export, email us.
Where your data lives
Primary storage is in Microsoft Azure's East US 2 region. Backups are stored in the same region. Data in transit is TLS-encrypted; data at rest is encrypted using Azure's managed keys.
How long we keep it
- Account + content: until you delete it.
- Error logs: 30 days.
- Invites: until consumed or until they expire (the teacher sets the expiry).
- Session summaries: until the room is deleted.
- Live session media: not stored. Transient only.
Security
We use industry-standard protections — TLS for transit, encrypted-at-rest storage, JWT-based authentication with short-lived tokens, and least-privilege roles on our cloud resources. No system is invulnerable; if we become aware of a breach affecting your data, we will notify you via push and email within 72 hours of confirmation.
Changes to this policy
If we change anything substantive, we'll bump the "Effective" date at the top of this page, surface a notice in the App on next launch, and email the address associated with your account. Continuing to use the App after a substantive change indicates acceptance.
Contact
Cape Wesley
Questions, requests, or complaints: services@capewesley.com