Privacy Policy

NoteFlow AI ("we", "us", "our") is operated by the NoteFlow AI team. We provide an AI-powered piano learning application accessible at noteflowai.co.uk.

For data protection enquiries, contact us at: louie@noteflowai.co.uk

We collect the following categories of personal data:

We do not collect special category data (health, biometric, etc.) and do not knowingly collect data from children under 13.

• AI Processing: Audio recordings are sent to our AI pipeline to generate piano note sequences. Recordings may be temporarily stored for processing and then deleted.
• Account Management: Your email and name are used to manage your account, authenticate you, and send important service notifications.
• Service Improvement: Anonymised usage data helps us understand how people use the app, identify bugs, and improve features.
• Communications: We may send product updates, launch announcements, and promotional emails. You can unsubscribe at any time.
• Legal Compliance: We may process your data to comply with legal obligations or enforce our Terms of Service.

We work with the following trusted third parties who may process your data on our behalf:

• Base44 (https://base44.com): Our application platform, providing database, authentication, and backend infrastructure. Data may be stored on Base44 servers. See Base44's privacy policy for details.
• Google (https://policies.google.com/privacy): Google Sign-In (OAuth) for authentication. If you use Google Sign-In, Google processes your authentication data. We receive only your name and email.
• Resend (https://resend.com/privacy): Email delivery service used to send waitlist confirmations, launch notifications, and account emails.
• Stripe (https://stripe.com/privacy): Payment processing for subscriptions. Stripe processes card details directly — we never see or store your full card number.

All third-party processors are contractually bound to protect your data and may not use it for their own purposes.

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your account and associated data ('right to be forgotten').
• Right to Restriction: Ask us to restrict processing of your data in certain circumstances.
• Right to Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests, including direct marketing.
• Right to Withdraw Consent: Withdraw consent for marketing emails at any time via the unsubscribe link.

To exercise any of these rights, email louie@noteflowai.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

We use essential cookies necessary for authentication and session management. We may use analytics cookies (with your consent) to understand usage patterns. You can control cookies through your browser settings.

We implement appropriate technical and organisational measures to protect your data, including encrypted data transmission (HTTPS/TLS), hashed passwords, access controls, and regular security reviews. However, no internet transmission is 100% secure.

Your data may be processed in countries outside the UK/EEA by our third-party providers. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) in accordance with GDPR.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by prominently displaying a notice in the app. Continued use of the app after changes constitutes acceptance of the updated policy.

For any privacy-related questions, data subject requests, or complaints: