Privacy Policy

Scope and Applicability

This Policy applies when we act as a “controller” (or “business”) for personal information collected through the Services. Where we process information on behalf of our customers according to their instructions, we act as a processor (or service provider). For those situations, please consult the applicable customer’s privacy policy.

This Policy does not apply to third-party websites, applications, or services, even if accessed via our Services. Those are governed by the third party’s terms and privacy policies.

Information We Collect

Information You Provide:

• Account Information: Email address, authentication credentials, and optional profile information (e.g., display name, subscription plan).
• Payment Information: Payments are processed by Stripe. Stripe receives your full payment details directly; we may store limited billing metadata (e.g., Stripe customer/subscription IDs, plan, status).
• Support & Communications: Information you provide when contacting support, responding to surveys, or otherwise communicating with us.

Information Collected Automatically:

• Log and usage data (IP address, user agent, device/OS, pages and features used, timestamps, referring pages).
• Device identifiers and configuration data.
• Cookies, local storage, and similar technologies for authentication, session management, security, and (where you have allowed it) analytics.
• Analytics data: On our public marketing pages, and only if you accept optional analytics in our cookie banner, we use third-party analytics tools (currently Google Analytics 4) to measure how visitors use the site. These tools collect information such as page views, clicks, approximate region (derived from IP address), browser and device type, referring/exit URLs, and general engagement events. We configure these tools to respect applicable consent requirements and to avoid using analytics data to show you third-party ads via PitchTime Pro.

Information from Third Parties: We may receive information from service providers (e.g., Supabase for authentication/database, Stripe for billing) and sign-on providers if you use social login.

Audio, Singing & Camera-Based Features

PitchTime Pro is designed to analyze your singing and certain camera-based movements to provide feedback, timing, and analytics. These features are optional and typically require microphone and/or camera access that you can control via your device and browser settings.

Microphone & Singing Data:

• When you participate in singing exercises, we process audio from your microphone to estimate pitch, timing, rhythm, and related performance statistics.
• We store derived metrics (for example: pitch accuracy, timing information, scores, and other performance stats) in order to show you practice history, analytics dashboards, and progress over time.
• We do not store raw microphone recordings for these analytics features by default. Audio is processed in real-time for inference and scoring, and we retain only the resulting performance data unless we clearly state otherwise.

Camera, Vision & Gesture Data:

• If you enable camera-based features (for example, using gestures to trigger rhythmic sync or exercise controls), we access your device’s camera to detect movements such as hand or body gestures using computer vision tools (including frameworks like MediaPipe or similar).
• This analysis is performed in real time to determine when a gesture occurs. We do not record or store the underlying video frames or images for these features, and we do not use camera data to create biometric identifiers or facial recognition profiles.
• We may log high-level, non-video events derived from vision signals (for example: “gesture detected at time X” or “exercise beat triggered”) as part of your session data and analytics.

We use audio- and camera-derived analytics solely to provide and improve the Service (e.g., feedback, scoring, and course design) and not to build marketing profiles or sell your personal data. Some countries give you additional rights over this data, which are described in the “Your Rights” section below.

How We Use Information

• Provide, operate, and improve the Services.
• Authenticate users and manage accounts and sessions.
• Process payments and manage subscriptions via Stripe.
• Power singing and rhythm exercises, including pitch tracking, timing and gesture detection, scoring, and personalized analytics dashboards.
• Analyze aggregated or de-identified performance data to improve exercises, models, and user experience.
• Respond to inquiries and provide support.
• Monitor usage, prevent fraud/abuse, and enhance security.
• Measure and understand how visitors discover and use our public marketing pages (for example, via Google Analytics 4 where you have allowed optional analytics cookies) so we can improve content, onboarding, and performance.
• Comply with legal obligations and enforce our Terms of Service.
• Send important notices (e.g., service updates, policy changes).

Legal Bases for Processing (EEA/UK/Swiss)

Where required, we process personal information on the following legal bases: (a) contract necessity (to provide the Services you request); (b) legitimate interests (e.g., to secure and improve the Services, prevent abuse, and understand usage), balanced against your rights; (c) consent (e.g., for certain optional cookies/communications or camera/mic-based features where required by law); and (d) legal obligations.

How We Share Information

We do not sell personal information. We may share it as follows:

• With service providers that help operate the Services (e.g., Supabase for authentication/database, Stripe for billing, hosting and logging providers, and analytics providers such as Google Analytics 4 for site metrics on our public marketing pages).
• With our affiliates for operational purposes.
• In connection with a corporate transaction (e.g., merger, acquisition, or reorganization).
• To comply with law, protect rights/safety, or enforce our agreements.
• With your consent or at your direction.

Key service providers currently include, for example: Supabase (authentication and database), Stripe (billing and payments), cloud hosting and logging providers we use to run the Services, Amazon Web Services and similar infrastructure providers (for storage and email delivery), and Google services such as Google Analytics 4 on our public marketing pages and Google sign-in where enabled. This list may change over time as we add or replace providers.

We maintain a current list of key subprocessors and can provide it upon request, and we will provide notice of material changes where required by law.

Cookies and Tracking Technologies

We use essential cookies for operation, including authentication and security. Where required by law, we request consent for non-essential cookies (such as analytics). On our marketing pages, we currently use Google Analytics 4 to understand how visitors discover and use PitchTime Pro. Our cookie banner lets you choose whether to enable these optional analytics cookies, and your choice is stored so we do not keep asking you. We honor Global Privacy Control (GPC) signals where applicable. We do not respond to “Do Not Track” (DNT) signals due to industry standard limitations.

Data Retention

We retain personal information as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. This includes retaining your performance history and analytics so you can track progress over time. When information is no longer needed, we delete or de-identify it.

If you close your account or request deletion, we will delete or de-identify your personal information within a reasonable period, subject to any legal obligations or overriding legitimate interests (for example, security logs or accounting records).

You can also permanently delete your account and associated practice data using our Delete Account page. When you do so, we remove or de-identify your practice history and profile data as described on that page, subject to limited retention of records we are legally required to keep (for example, basic billing or security logs).

For analytics data collected through Google Analytics 4 on our marketing pages, we currently configure event-level data retention to approximately two (2) months, after which data is deleted or aggregated by Google. If we materially change this retention period, we will update this Policy or provide additional notice where required by law.

Security

We implement reasonable administrative, technical, and physical safeguards. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for any activity under your account.

International Transfers

We may process information in the United States and other countries. For transfers from the EEA/UK/Switzerland, we rely on legal mechanisms such as Standard Contractual Clauses (and the UK Addendum, where applicable).

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also withdraw consent where we rely on consent, and you may lodge a complaint with a supervisory authority.

Account deletion: You may permanently delete your PitchTime Pro account and associated practice data via our Delete Account page. If you are unable to access your account but need data erased, contact us at privacy@scalemodetools.com.

In some U.S. states (including California), additional rights may apply regarding access, deletion, correction, and portability of certain personal information; we will honor those rights where the relevant laws apply to you.

California: We do not “sell” or “share” personal information as defined under the CPRA, including with respect to consumers under age 16. Nevada: We do not sell “covered information” as defined by Nevada law.

Certain U.S. state laws provide a right to appeal if we deny your privacy request. To appeal, reply to our decision email or write to the address below with “Privacy Appeal” in the subject line. We will respond within the applicable statutory timeframe.

To exercise rights, email legal@scalemode.tools. We may verify your identity before acting on your request. Authorized agent requests must include proof of authorization and, where required, user verification.

We do not use automated decision-making that produces legal or similarly significant effects without human involvement. You may also manage certain choices directly in your browser or device settings, such as disabling microphone or camera access; some features of the Services may not function without those permissions.

Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. Where local law sets a higher age for valid consent (e.g., 13–16 in the EEA/UK), we rely on consent from a parent or legal guardian. If we learn we collected information from a child in violation of this Policy, we will delete it.

Contact Us

Scale Mode Tools LLC
Mailing address for legal notices only (c/o Registered Agent):
South Carolina Registered Agent LLC
6650 Rivers Ave. STE 100
Charleston, SC 29406 USA
Email legal@scalemode.tools
Please do not send general correspondence or returns to the Registered Agent address.