Privacy

Where the legal text lives

This page is the public posture summary. The legally- binding versions are our Privacy Policy (Crescender-wide) and the Family Privacy Notice (the children’s notice for My Crescender Family). When the legal text and this summary diverge, the legal text wins, but we work hard not to let them diverge.

What we collect (and don’t)

We collect only what we need to render the products. That’s a deliberate design constraint, not a promise. The minimum-collection principle is enforced at the data-model level, fields we don’t need don’t exist in our schema.

• Adult users: email, name, avatar colour or image, notification preferences, the data you create in the product (songs, gigs, gear, financial records, practice sessions, etc.).
• Children (in My Crescender Family): first name, date of birth, instrument(s), practice sessions, optional avatar. Nothing else. See the Child Safety page for the full child-data treatment.
• Diagnostic data: crash stack traces, transaction timings, device metadata. PII-stripped. See the Sub-processors page for what reaches the application-diagnostics processor.
• What we do NOT collect from children: email or phone (they don’t have accounts); location data; contacts; advertising IDs; behavioural tracking data for advertising profiles; biometric data.

Retention and deletion

We retain data while you keep the account active. When you delete:

• An individual record (a song, a gear item, a practice session): soft-deleted immediately, hard-deleted after 30 days. Recoverable in the soft- delete window via support.
• A child in My Crescender Family: “Retire” flow hides the child from active rosters but preserves their practice history as a parent value. Full deletion via account deletion.
• The whole account: Settings → Delete account. Double-confirmation; cascade across every table runs immediately. 30-day grace period during which we can restore by email to hello@crescender.com.au; after 30 days the data is permanently removed.

Your rights and how to exercise them

Under the Australian Privacy Principles, GDPR, and other applicable privacy frameworks, you have rights to access, correct, port, delete, and object to processing of your data. We honour these via in-product mechanisms wherever we can:

• Access: visit any data record in the app or web surface; you see the full content.
• Correction: edit any record you own. Family children’s records are edited by the parent.
• Portability: Settings → Export. Receive a JSON file containing your account record and everything you’ve created in the product. Sent to your email within 24 hours.
• Deletion: Settings → Delete account (full) or per-record deletion (partial).
• Object to processing: via account deletion. We don’t maintain a separate processing-stop register; if you don’t want us to process your data, you don’t have an account.
• Complaint: email hello@crescender.com.au or contact the OAIC directly if you’re in Australia and unsatisfied with our response.

Children’s privacy frameworks

We align to three children’s privacy frameworks: the U.S. Children’s Online Privacy Protection Act (COPPA), the EU’s GDPR Article 8 protections for minors (GDPR-K), and the Australian Privacy Principles as they apply to children.

The strongest single design choice we made is that children never have accounts in our system. They use the app via a parent-issued code; they are not the authenticated principal. Verifiable parental consent (COPPA’s core requirement) is satisfied by the account-creation flow: a parent has to sign up, add the child manually, and explicitly authorise device access.

For the full child-data treatment, every category, every retention rule, every framework provision, see the Child Safety page and the legally-binding Family Privacy Notice.

Where the data lives

Data stays in Australia for storage, hosted on globally recognised public cloud infrastructure. The only category of sub-processor that may transit data globally is application diagnostics (crash telemetry, no PII). Full treatment on the Security page and the Subprocessors page.