Privacy Notice

Effective Date: 2026-05-01 · Last Updated: 2026-08-27 · Version: 1.4

This Privacy Notice explains how the Mind the Guitar mobile application (the “App”) handles personal data when you use it. It is issued together with our Terms of Use.

The data controller for the App is Michał Gajek, an individual sole developer (acting as a private individual) operating the Mind the Guitar application, with a correspondence address at Aleja Wilanowska 103/49, 02-795 Warszawa, Poland and reachable at contact@mindtheguitar.com (“Developer,” “we,” “us,” or “our”).

1. Local Data Only

Mind the Guitar is designed to operate offline and to keep your data on your device.

We do not maintain user accounts on our servers and we do not receive your personal data. Your profile, progress, settings, and related app data are stored locally on your device only.

2. What the App Stores Locally

The App may store the following information locally on your device:

your optional display name;
your avatar image, if you choose to add one;
your learning progress;
your exercise statistics and streaks;
your app preferences and settings;
local app status flags and backup copies of your profile data.

3. Microphone Access

The App may request access to your microphone only for the tuner feature.

Microphone input is processed locally on your device. We do not record, store, or send your audio to our servers.

4. Photo Library Access

The App may request access to your photo library only if you choose to add or change your avatar.

Any image you choose for your avatar is stored locally on your device. The App does not access the camera, contacts, location, calendar, health data, or any other sensors.

5. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

6. Contacting Us

If you contact us by email at contact@mindtheguitar.com, we will receive the information you choose to include in your message and use it only to respond to you and to keep a record of the correspondence as required by applicable law.

7. Legal Bases (GDPR Art. 6)

We process the limited categories of data described above on the following legal bases:

Performance of a contract (Art. 6(1)(b) GDPR) — to provide the educational features you request when you use the App.
Consent (Art. 6(1)(a) GDPR) — granted by you through the operating system permission prompts when you enable microphone or photo library access, and through the in-app Data Measurement choice for advertising measurement (Section 8) and product analytics (Section 9).

8. Advertising Measurement and Attribution

If you install the App after clicking one of our advertisements (for example on Facebook, Instagram, or other advertising networks), the App uses a mobile measurement partner, AppsFlyer, to understand whether an ad led to your installation, to measure conversions such as purchases, and, where permitted, to create or exclude audiences for follow-up advertising (for example, showing a subscription ad to users who installed the App but have not purchased). This is called “attribution” and “retargeting.” For Meta campaigns, the App also includes the Meta SDK, used only to support direct and deferred links and Meta attribution. We do not separately log purchase or other in-app conversion events through the Meta SDK; AppsFlyer remains our conversion-event source.

For this purpose the App may process:

device and advertising identifiers (such as IDFA on iOS or the Advertising ID on Android, where available and permitted);
limited technical and event data (for example install, app open, start of a trial, and purchase events, including purchase amount and currency).

This processing only takes place with your consent. On iOS you are asked through the system App Tracking Transparency prompt; on all platforms attribution stays disabled until consent is given. If you do not consent, the App still works fully and no advertising identifiers are used for cross-app tracking.

This data may be shared with AppsFlyer and with the advertising network that served the ad, either directly through that network's SDK or through AppsFlyer (currently Meta Platforms; other networks such as Google or TikTok may be added in the future). With your consent, it may be used to measure advertising performance and to include or exclude your device from advertising audiences. This may constitute profiling for direct marketing, but we do not make automated decisions that produce legal or similarly significant effects within the meaning of Art. 22 GDPR.

If you decline consent, the App does not perform advertising tracking or use App data for retargeting.

9. Product Analytics

To understand how the App is used and to improve it (for example, to see where users get stuck during onboarding, lessons, or the subscription flow), the App uses PostHog, a product-analytics service.

We use PostHog Cloud EU, which stores and processes this data on servers located in the European Union (Frankfurt, Germany). PostHog acts as our data processor under a data processing agreement and processes the data only on our behalf and on our instructions.

For this purpose the App may process:

a pseudonymous random identifier assigned to your installation of the App;
in-app usage events (for example: which screens you view, your progress through the tutorial and lessons, when the subscription screen is shown, taps on buttons, and completed purchases);
basic technical information such as app version, operating system and version, device model, and language or coarse region.

We do not collect your name, email address, contacts, precise location, photos, or microphone audio through analytics. We do not use this data to track you across other companies' apps or websites, we do not use it for advertising, we do not sell it, and we do not use it for automated decision-making within the meaning of Art. 22 GDPR.

This processing only takes place with your consent (Art. 6(1)(a) GDPR). The App works fully whether or not you consent, and you can withdraw your consent at any time in Profile → Data Measurement. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

10. Third-Party Services

Except for the advertising measurement described in Section 8 (AppsFlyer and the relevant advertising network, including its SDK where applicable), the product analytics described in Section 9 (PostHog), and the optional subscription and error-handling services described elsewhere in this Notice, the App does not transmit your personal data to third-party services.

11. Data Retention

Data stored on your device is retained for as long as the App is installed or until you delete it (see Section 13).

Analytics data held by PostHog (Section 9) is retained for approximately 12 months and then deleted or anonymized. Advertising-measurement data (Section 8) is retained only as long as needed to measure the relevant campaign.

12. Your Rights (GDPR Art. 15–22)

Because your data stays on your device and we have no access to it, you can exercise most of your rights directly through the App:

Access and portability — your data is visible in the App (Profile, Stats) at any time.
Rectification — you can edit your display name and avatar in Profile.
Erasure (“right to be forgotten”) — see Section 13.
Restriction and objection — you can disable microphone or photo permissions in your device settings, or stop using the App.
Withdrawal of consent — you can revoke microphone or photo library permissions at any time in your device's system settings, and you can withdraw advertising-measurement and product-analytics consent at any time in Profile → Data Measurement, in each case without affecting the lawfulness of processing carried out before withdrawal.

13. How to Delete Your Data

You can delete your data at any time using one of the following methods:

In the App, open Profile → Reset Profile → Reset Statistics to clear your exercise statistics and streaks.
In the App, open Profile → Reset Profile → Reset Entire Profile to clear your entire profile (display name, avatar, progress, statistics, and preferences), return the App to its initial state, and automatically erase the analytics data associated with your installation from PostHog (Section 9).
Uninstall the App to remove all locally stored data, including any items kept in the platform-provided secure storage.

We have no copy of your profile data on our servers, so no separate request to us is required to have it deleted. See also our step-by-step deletion guide.

If you have withdrawn analytics consent or cannot use the in-App reset, you can also request deletion of analytics data associated with your installation (Section 9) by contacting us at contact@mindtheguitar.com; we will delete it from PostHog.

14. Right to Lodge a Complaint

If you believe we are processing your personal data in violation of applicable law, you have the right to lodge a complaint with the Polish supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
https://uodo.gov.pl

You also have the right to lodge a complaint with the supervisory authority of your country of residence.

15. Security

Sensitive items such as integrity tokens are stored in the platform-provided secure storage (iOS Keychain / Android Keystore via flutter_secure_storage). We rely on the security mechanisms provided by your device's operating system (sandboxed app storage, OS-level encryption at rest). The App disables cleartext HTTP traffic on Android via a network security configuration. No security measure is perfect; you are responsible for keeping your device and operating system up to date.

16. Subscriptions

The App may offer paid features or subscriptions through Apple App Store or Google Play.

Where you make a purchase through one of these platforms, payment processing, billing, renewals, cancellations, and related payment data handling are managed by the relevant platform provider under its own terms and privacy policy.

The App may receive limited information from the platform, such as the status of a purchase or subscription, solely to enable paid features. We do not store your full payment card details.

17. Changes to This Privacy Notice

We may update this Privacy Notice from time to time. If we make material changes, we will update the “Last Updated” date and the version number above and, where appropriate, provide notice in the App.

18. Contact

Michał Gajek — sole developer of the Mind the Guitar application
Aleja Wilanowska 103/49, 02-795 Warszawa, Poland
contact@mindtheguitar.com