Privacy Policy

Introduction

Scope & Acceptance

Our Details

1. Entity: Crescender (ABN 38 439 878 239)
2. Contact: privacy@crescender.com.au

Information We Collect

We collect only information that adds value to your experience. This includes:

1. Account Data: name, email, username, date of birth; for child accounts, parent/guardian contact details.
2. Profile & Usage: bio, avatar, instruments, practice history, event participation.
3. Device & Technical: IP address, browser/app type, cookies and similar technologies (managed via our cookie consent manager).
4. Performance & Analytics: anonymised metrics on feature usage, retention and churn.
5. We do not collect sensitive personal information (e.g. health, race) unless you voluntarily provide it.

Google Calendar and YouTube Connections

Google API Services User Data Policy

1. Calendar: when you connect your account, Crescender uses your connected-account email and calendar event details to show your schedule and synchronise music events. Two-way synchronisation reads events from your primary calendar and writes changes to your Crescender events back to that calendar.
2. YouTube: read-only channel and video information lets Crescender confirm access to your connected channel and check which videos belong to it. A Crescender channel badge is not a YouTube endorsement or proof of copyright ownership. Recent public uploads can be added to your profile; private and unlisted uploads are excluded from automatic imports.
3. AI separation: information retrieved from Google APIs, including raw data and information derived from it, is not sent to AI services or used to train, improve, guide or otherwise interact with AI models. Our separate AI capture features process information users submit for gear and event capture. Events created from those submissions may later be synchronised out to Google Calendar; this does not make Google-sourced information input to AI.
4. Limited purposes: Google connection data is used only to provide and secure the connection features you choose. We do not sell it, use it for unrelated profiling, advertising or marketing, or share it with professional partners for offers. Broader opt-in partner provisions elsewhere in this Policy do not override these limits.
5. Your controls: you can disconnect a connection in Crescender or revoke Crescender's access in your Google Account. You can request access, correction or deletion of imported account data using the controls and contact details described in this Policy.

Crescender Music Companion Browser Extension

1. Music and page content: on supported music websites, the extension reads available song titles, artist credits, chart positions, chord or tab details, setlist references, artwork links and source-page URLs. On another website, Scan this page reads supported music information or a musician name you explicitly select. Detection depends on the information supplied by the page.
2. Recent discoveries: detected music and its source URLs are kept in a device-local list of up to 20 recent items. Temporary per-tab results let the popup and side panel show the music associated with the active page. This is not a general record of every website you visit, and the extension does not use Chrome's browsing-history API.
3. Account connection: the extension uses your existing Crescender sign-in session to check account status and authenticate actions you request. Your display name and email may be cached locally to identify the connected account. The extension does not read your password or persist session credentials in its own storage.
4. Actions you choose: when you import songs, follow an artist or start or save practice, the relevant music information, source references and activity are sent to your selected Crescender service. A band-library import is shared according to that library's access permissions. Account-status checks also contact Crescender automatically; detected page content is not automatically uploaded as a general browsing feed.
5. Practice and preferences: the extension stores your settings and any active practice session locally, including start and pause times, musical details and notes you enter. Saving a practice session sends its duration, songs and notes to Crescender. The extension does not record general keystrokes, mouse movements or unrelated browsing behaviour.
6. Connection information: service connections may generate ordinary technical records such as IP address, request time and browser information for delivery, security and troubleshooting. The extension does not request GPS or precise device location. Loading source artwork may also contact the image provider under that provider's privacy practices.
7. Your controls: use Clear in the recent-discoveries list to remove those entries. Chrome's extension controls let you restrict site access, disable the companion or remove it. Removing the extension clears its local extension storage; music already saved to Crescender remains in your account until you delete it there or use the account-data controls described in this Policy.

Browser Extension Data: Limited Use

1. We use extension data only to provide, maintain and secure the described music-discovery, capture and related practice features. We do not sell extension user data, use it for unrelated profiling, or use or transfer it for personalised, retargeted or interest-based advertising. We do not use it to determine creditworthiness or for lending purposes.
2. Transfers are limited to those necessary for these user-facing features, service providers acting on our behalf, security, legal obligations, or a permitted change of business ownership subject to these restrictions. The general opt-in professional-partner provisions elsewhere in this Policy do not authorise unrelated transfers of extension browsing or captured-page data.
3. Human access to extension user data is limited to specific user-consented assistance, necessary security or legal purposes, or aggregated and anonymised internal operations. Access is not provided for unrelated advertising or market research.
4. The extension executes code supplied within its installed package. It does not download or execute remote JavaScript or WebAssembly. Network responses used for the music workflow are treated as data.
5. The extension is not intended to collect health, payment or personal-messaging information. Avoid putting sensitive information into optional practice notes. For access, correction or deletion assistance, contact privacy@crescender.com.au.

Children's Privacy

We recognise the importance of protecting children's information. Where our Services are used by children, a parent or guardian account is required. We will:

1. Obtain verifiable parental consent before collecting a child's personal data, in line with the U.S. Children's Online Privacy Protection Act (COPPA), GDPR-K and the Australian Privacy Principles.
2. Limit collection to what is reasonably necessary. Examples include:
   1. Practice logs
   2. Lesson schedules
3. Never use children's data for advertising or marketing.
4. Our app specifically designed for children, My Crescender Family, is governed by a dedicated Children's Privacy Notice at www.crescender.com.au/legal/family-privacy, which describes exactly what is collected and how a parent can review, export, or delete it.

How We Use Your Information

We use your information to:

1. Provide, maintain and improve our Services.
2. Personalise your experience (e.g. instrument recommendations).
3. Facilitate communication (e.g. lesson reminders).
4. Recommend third-party services that may benefit your music career. Subject to your opt-in, these may include:
   1. Studios
   2. Distribution Platforms
   3. Insurance Providers
   4. Performance Venues
   5. Music Schools
5. Analyse trends and usage to reduce churn and enhance engagement.

Disclosure to Third Parties

We may share your data with:

1. Service Providers: hosting, authentication, analytics, advertising, crash diagnostics, email delivery and payment providers. These include:
   1. Supabase (database, authentication, file storage)
   2. Firebase / Google (authentication, push notifications, analytics)
   3. Google AdMob (advertising in our free apps, see “Advertising” below)
   4. Sentry (crash and error diagnostics)
   5. Apple Sign-In and Google Sign-In (authentication)
   6. Globally recognised public cloud infrastructure providers
   7. Vercel (web hosting)
   8. Stripe (payment processing)
   9. Google Workspace (email and productivity)
   10. OpenAI (AI processing for information users submit to gear and event capture features; Google connection data is excluded)
2. Professional Partners: when you have opted in, to help you access relevant offers (e.g. music-industry services).
3. Legal & Compliance: if required by law, or to protect our rights.
4. We never sell your personal information.

Advertising & Advertising Identifiers

Some of our apps are free and supported by advertising (the Crescender and Clavet mobile apps). Our app for children, My Crescender Family, contains no advertising.

1. We use Google AdMob to display ads. To serve and measure ads, AdMob may access your device's advertising identifier (Apple's IDFA on iOS, or the Advertising ID on Android).
2. On iOS, we ask for your permission through Apple's App Tracking Transparency prompt before any tracking identifier is used. If you decline, you will still see ads, but they will be non-personalised.
3. You can reset or limit ad personalisation at any time in your device settings (iOS: Settings → Privacy & Security → Tracking, and Apple Advertising; Android: Settings → Google → Ads).
4. We never show advertising to children, and children's information is never used for advertising. See the separate My Crescender Family Privacy Notice for details.

Cookies & Tracking

Our website uses cookies and similar technologies for:

1. Essential functionality (login, security).
2. Performance analytics.
3. Personalisation (only with your consent).
4. You may manage your cookie preferences via the on-site banner or your browser settings.

Data Security & Retention

Practical retention and deletion guide

Accessing or Exporting Your Information

How to make an access or export request

1. You can request a copy of your personal information by emailing privacy@crescender.com.au. In the Crescender web app, Settings → Export your data opens an email draft for you to review and send; it does not automatically generate or deliver a download.
2. Tell us which service and information your request concerns. We may need to verify account ownership and clarify the scope and suitable format before providing information. Do not send passwords or sign-in codes.
3. We will respond within a reasonable timeframe. Information relating to other people, shared organisations or legal obligations may require separate consideration; a request does not guarantee unrestricted access to another person's information.

Access, Correction & Complaints

Under the Privacy Act you may:

1. Request access to or correction of your personal information.
2. Withdraw consent to certain uses (e.g. third-party offers).
3. Complain about a breach of the APPs.
4. Please direct requests or complaints to privacy@crescender.com.au. We will respond within a reasonable timeframe.

Deleting Your Account & Data

You can delete your account and the personal information associated with it at any time:

Account deletion and cancellation guide

1. In the Crescender web app, open Settings → Delete account and review the confirmation. A confirmed request schedules account deletion with a 30-day cancellation period; it does not immediately erase every record.
2. By email: contact privacy@crescender.com.au and we will action your request after verifying ownership.
3. To cancel a pending request, use the cancellation control where available or contact privacy@crescender.com.au before the scheduled date. Other Crescender services may have different controls; contact us if you cannot find the relevant option.
4. After the cancellation period, account deletion is intended to be permanent. Applicable retention obligations and the rights of other people can affect what is removed and when; we will explain relevant exceptions when handling your request.

Your Rights in the EU/UK and California

Depending on where you live, you may have additional rights:

1. EU/UK (GDPR / UK GDPR): rights of access, rectification, erasure, restriction, data portability, and objection. Our legal bases for processing are your consent, performance of our contract with you, and our legitimate interests in operating and improving the Services.
2. California (CCPA / CPRA): the right to know, delete, and correct your personal information, and to opt out of any “sale” or “sharing” of personal information. We do not sell your personal information.
3. To exercise any of these rights, contact privacy@crescender.com.au.

International Transfers

Some of our service providers may be located overseas. We will ensure any overseas disclosure is protected by contracts or binding privacy rules in line with the APPs.

Changes to This Policy

We may update this Policy from time to time. Any changes will be posted here with an updated effective date.