Privacy Policy
Last updated: July 2026
This policy explains what personal data GuitarPath processes, why, and what rights you have. We collect only what we need to help you practise guitar and improve the service. GuitarPath is in soft launch: parts of the infrastructure may still change, and we’ll update this page accordingly.
Data controller
The controller of your personal data is:
- Legal name:
- [RAGIONE SOCIALE]
- Registered office:
- [INDIRIZZO SEDE LEGALE]
- VAT number:
- [P.IVA]
What data we process
Account data (name, email and picture, managed by Clerk); your practice profile (level, goals, favourite genres and artists, guitar type, minutes per day, language); your activity in the app (sessions, exercises done, BPM and level progress, streaks, achievements, ratings); the audio recordings you submit for AI feedback; your personal tab files; the messages you send us through the support form; and technical usage data for statistics.
Why we use it and on what basis
We use your data to deliver and run the service and to personalise plans and exercises (performance of the contract, i.e. our terms of use); to keep the service secure, prevent abuse and run the technical infrastructure (our legitimate interest); and for product statistics through analytics tools, only when you consent to the relevant cookies.
Artificial intelligence and audio recordings
AI-generated practice plans and text are processed through Anthropic (Claude). When you use AI feedback, your audio recording is sent to Google (Gemini) for analysis and is stored together with the feedback you receive so you can review it. These contents are sent to the providers only to generate your response. We do not sell your data and do not use it for advertising profiling.
Providers that help us (processors)
We rely on external providers that process data on our behalf: Clerk (authentication), Neon (database), Vercel (hosting, file storage and traffic statistics), Anthropic (AI plan and text generation), Google (feedback audio analysis and YouTube video player), PostHog (usage statistics, only with consent), Upstash (abuse protection), Resend (email delivery) and, if enabled, Sentry (error monitoring).
Where your data is processed
We favour providers with infrastructure in the European Union, but some (for example Anthropic and Google) may process data outside the EU, including in the United States. In those cases the transfer is covered by the safeguards required by the GDPR, such as standard contractual clauses.
How long we keep it
We keep your data for as long as you keep your account. Audio recordings stay linked to the feedback until you delete them by deleting your account. When you delete your account we remove your data from the database, your files (audio and tabs) and your sign-in account. Support messages and technical logs may be kept for a limited time for support and security.
Your rights
You have the right to access your data, correct it, delete it, receive a portable copy, object to processing and request its restriction. You can also withdraw cookie consent at any time and lodge a complaint with a supervisory authority. From your settings you can export your data or delete your account yourself.
Manage your data in settings →Cookies
We use as few cookies as possible: those necessary to run the app and, only with your consent, analytics cookies. Details and your choices are in the Cookie Policy.
Read the Cookie Policy →Minors
GuitarPath is open to younger learners too: practising guitar suits all ages. Children under 14 should use it with the involvement of a parent or guardian, who gives consent on their behalf. We do not knowingly collect personal data from children under 14 without that consent; if you believe this has happened, contact us and we’ll remove it.
Changes to this policy
We may update this policy over time. If we make significant changes we’ll flag them in the app or by email. The date at the top shows the last update.
Contact
For questions about your data or to exercise your rights, write to us at:
privacy@guitarpath.example