GuitarMaxx Privacy Policy

Last Updated: September 8, 2026

GuitarMaxx is owned and operated by ToneAdapt, LLC (the "Company"). The Company is committed to maintaining robust privacy protections for its users. This Privacy Policy ("Privacy Policy") is designed to help you understand how we collect, use and safeguard the information you provide to us and to assist you in making informed decisions when using our Service.

For purposes of this Privacy Policy, "Site" refers to the Company's GuitarMaxx website, which can be accessed at https://guitarmaxx.app/, and "App" refers to the GuitarMaxx mobile application available on the Apple App Store. "Site" as used throughout this Privacy Policy shall refer to both the website and the App unless otherwise specified.

"Service" refers to the Company's GuitarMaxx services accessed via the App, in which users record or upload a short clip of their own guitar playing and receive an automated rating of that playing (including scores for individual skills, a written verdict, practice suggestions and comparisons against other players), a daily practice routine derived from that rating, and an automated coaching assistant.

The terms "we," "us," and "our" refer to the Company.

"You" refers to you, as a user of our Site or our Service.

By accessing our Site, our App, or our Service, you accept our Privacy Policy and Terms of Use (found here: https://guitarmaxx.app/terms), and you consent to our collection, storage, use and disclosure of your Personal Information as described in this Privacy Policy.

I. Information We Collect

We collect "Non-Personal Information" and "Personal Information." Non-Personal Information includes information that cannot be used to personally identify you, such as anonymous usage data, general demographic information we may collect, platform types, preferences you submit and preferences that are generated based on the data you submit, and interaction counts. Personal Information includes the recordings of your playing that you submit to the Service, which may contain your voice or other identifiable audio, and, if you choose to contact us, your email address and the content of your message.

1. Information collected via Technology

GuitarMaxx does not require you to create an account or provide an email address to use the Service. When you first open the App, we create an anonymous identifier for your device, which is used to associate your scans, scores, practice routine and purchases with your installation of the App. This identifier is not linked to your name, email address or other contact details. However, in an effort to improve the quality of the Service, we track information provided to us by our software application when you use the Service, such as the type of device you use, the operating system version, the time and date of access, the screens you visit, and other information that does not personally identify you. On the App, we use local device storage and secure Keychain storage for the anonymous identifier and your preferences instead of cookies. For example, the Company may use local device storage to collect and retain the following information:

• your anonymous device identifier and session status
• screens visited and feature usage patterns and interaction events
• your onboarding answers (for example, which instrument you play and how long you have played)
• your saved scan results and practice routine progress, cached locally
• performance metrics such as load times and error reports

2. Recordings and Content You Provide

The core of the Service is rating your playing. To do that, the App records a short clip of your guitar playing through your device's microphone (with your permission), or accepts a short video that you choose to upload from your device. The audio from that clip is transmitted to our servers and to our AI scoring provider (see Section III) in order to generate your rating. We do not use your camera and we do not access your photo library except to save a score card image when you tap Save, and only with your permission.

We also collect the messages you type to the in-App coaching assistant, and the referral or invite code you enter or share, if any.

Because a recording may capture more than your guitar (for example, your voice or the voices of people around you), you should take care not to record anything you do not want transmitted to us. You are responsible for obtaining any consent required from other people whose voices appear in a recording you submit.

3. Advertising and Attribution Information (iOS App)

When you use the iOS App, we use the Appstack SDK to understand which advertising campaigns and channels lead people to install and use GuitarMaxx, and to measure the effectiveness of our marketing. For this purpose we may collect and share the following information with Appstack:

• your anonymous device identifier and Apple's app-install attribution data
• device and operating system information
• app event data, including app installs, app launches, onboarding completion, scans, paywall views and subscription purchases (including price and currency)

The App does not request Apple's App Tracking Transparency permission and does not collect the Identifier for Advertisers (IDFA). Attribution relies on privacy-preserving mechanisms such as Apple's SKAdNetwork framework. Appstack's use of this information is governed by Appstack's privacy policy.

4. Children's Privacy

The Site and the Service are not directed to anyone under the age of 13. The Site does not knowingly collect or solicit information from anyone under the age of 13, or allow anyone under the age of 13 to use the Service. In the event that we learn that we have gathered personal information from anyone under the age of 13 without the consent of a parent or guardian, we will delete that information as soon as possible. If you believe we have collected such information, please contact us at contact@guitarmaxx.app.

II. How We Use and Share Information

Personal Information

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share for marketing purposes your Personal Information with third parties without your consent. We do share Personal Information with vendors who are performing services for the Company, such as the provider that hosts our database and the AI provider that analyzes your recordings. Those vendors use your Personal Information only at our direction and in accordance with our Privacy Policy.

In general, the recordings you provide to us are used to generate your rating, and the information you provide when contacting us is used to help us communicate with you. For example, we use Personal Information to contact users in response to questions, solicit feedback from users, and provide technical support.

We may also use the recordings and ratings we collect, in a form that is not linked to your contact details, to calibrate and improve the accuracy and consistency of our scoring, and to compute the aggregate comparisons (such as percentiles) shown in the App.

We may share Personal Information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Use, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

Non-Personal Information

In general, we use Non-Personal Information to help us improve the Service and customize the user experience. We also aggregate Non-Personal Information in order to track trends and analyze use patterns on the Site. This Privacy Policy does not limit in any way our use or disclosure of Non-Personal Information and we reserve the right to use and disclose such Non-Personal Information to our partners, advertisers and other third parties at our discretion.

In the event we undergo a business transaction such as a merger, acquisition by another company, reorganization under a new parent company, or sale of all or a portion of our assets, your Personal Information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If our information practices change at any time in the future, we will post the policy changes to the Site so that you may opt out of the new information practices. We suggest that you check the Site periodically if you are concerned about how your information is used.

III. Third-Party Service Providers

We use the following third-party service providers to operate and improve our Service. These providers may have access to your Personal Information only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose:

• Supabase — Database hosting, anonymous authentication, storage of your submitted recordings, and the server functions that process scans.
• Google (Gemini API) — AI analysis of your recordings and generation of your rating, verdict, practice suggestions and coaching answers. The audio from your clip and the messages you send to the coaching assistant are sent to Google to generate these outputs.
• Apple — App distribution via the App Store, and processing of all in-app purchases through Apple's In-App Purchase system. Your payment information is handled by Apple and is never stored on our servers. If you download or use the App, Apple may collect certain information in accordance with Apple's Privacy Policy.
• RevenueCat — In-app subscription management, entitlement validation, and receipt processing for the App. RevenueCat receives your anonymous identifier and your purchase and subscription status.
• Superwall — Paywall presentation and in-app subscription experience management for the App.
• Appstack — Mobile app analytics, advertising attribution, and conversion measurement for the App. See Section I.3 above for additional details.
• Vercel — Website hosting and deployment.

We encourage you to review each provider's respective privacy policy to understand how they handle your information.

IV. How We Protect Information

We implement security measures designed to protect your information from unauthorized access. Recordings and scan data are transmitted using encrypted connections and stored on infrastructure that restricts access to your data to your own anonymous identifier. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, access controls and secure socket layer technology. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such safeguards. By using our Service, you acknowledge that you understand and agree to assume these risks.

V. Data Retention

We retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

• Recordings: A submitted clip is retained until it has been scored and for a limited period afterwards for quality and calibration purposes, and is then deleted or anonymized. A pending clip that is replaced by a newer clip before scoring is deleted.
• Scan results and routine data: Retained for as long as the App is installed and associated with your anonymous identifier, so that your history and progress can be shown to you. Deleted upon a verified deletion request.
• Purchase data: Subscription and purchase records are retained as required by applicable tax and financial regulations, typically for 7 years. Your payment method details are stored and managed exclusively by Apple.
• Analytics data: Aggregated, non-personal analytics data may be retained indefinitely for service improvement purposes.
• Email communications: Records of email communications are retained for up to 2 years.

VI. Data Breach Notification

In the event of a data breach that compromises your Personal Information, we will notify affected users within 72 hours of becoming aware of the breach, or as otherwise required by applicable law. Because the App does not collect your email address, notification will be made by a prominent notice in the App and on the Site, and by email where we have your email address from prior correspondence. The notification will include: (a) a description of the nature of the breach; (b) the types of information that were or may have been compromised; (c) steps we are taking to address the breach; and (d) steps you can take to protect yourself. We will also notify any applicable regulatory authorities as required by law.

VII. Your Rights Regarding the Use of Your Personal Information

You have the right at any time to prevent us from contacting you for marketing purposes. When we send a promotional communication to a user, the user can opt out of further promotional communications by following the unsubscribe instructions provided in each promotional e-mail. Please note that notwithstanding the promotional preferences you indicate, we may continue to send you administrative communications including, for example, periodic updates to our Privacy Policy.

You have the right to request deletion of your Personal Information that we have collected. To request deletion of your data, contact us at contact@guitarmaxx.app with a deletion request. Because the App does not collect your email address, we may ask you for information from within the App (such as your invite code) to verify that the request relates to your installation. Deleting the App from your device removes locally stored data but does not by itself delete data held on our servers. Please note that we may need to retain certain information as required by law or for legitimate business purposes, such as fraud prevention, compliance with financial regulations, or to complete transactions you have requested.

VIII. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose what Personal Information we have collected, used, disclosed, and sold about you in the last 12 months.
• Right to Delete: You have the right to request that we delete Personal Information we have collected from you, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate Personal Information that we maintain about you.
• Right to Opt-Out of Sale or Sharing: We do not sell your Personal Information. We share app event data and your anonymous device identifier with Appstack for advertising measurement and attribution as described in Section I.3. To request that we cease sharing information associated with your installation for advertising measurement purposes, please contact us at contact@guitarmaxx.app.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please contact us at contact@guitarmaxx.app. We will respond to verifiable consumer requests within 45 days. You may also designate an authorized agent to make a request on your behalf.

In the preceding 12 months, we have collected the following categories of Personal Information: identifiers (anonymous device identifier, invite code), audio information (recordings of your playing), internet or other electronic network activity information (usage data, interactions with the Service), and commercial information (subscription and purchase history).

IX. Your Rights Under GDPR (European Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your Personal Information based on: (a) your consent (e.g., when you grant microphone permission and submit a recording); (b) performance of a contract (e.g., providing the Service you have subscribed to); (c) compliance with legal obligations; and (d) our legitimate interests (e.g., improving our Service, preventing fraud), provided those interests are not overridden by your data protection rights.
• Right of Access: You have the right to request a copy of the Personal Information we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete Personal Information.
• Right to Erasure: You have the right to request that we delete your Personal Information, subject to certain legal exceptions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Information under certain circumstances.
• Right to Data Portability: You have the right to receive your Personal Information in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your Personal Information for direct marketing purposes or where we rely on legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time, for example by revoking microphone permission in your device's Settings.

To exercise any of these rights, please contact us at contact@guitarmaxx.app. We will respond to your request within 30 days. If you believe that we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Your Personal Information may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your information to the United States, which may not offer the same level of data protection as your home country. We take appropriate safeguards to ensure that your Personal Information remains protected in accordance with this Privacy Policy.

X. Links to Other Websites

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our Site or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

XI. Changes to Our Privacy Policy

The Company reserves the right to change this policy and our Terms of Use at any time. We will notify you of significant changes to our Privacy Policy by placing a prominent notice in the App or on our Site. Significant changes will go into effect upon posting and reasonable notice, unless a longer notice period is required by applicable law. Non-material changes or clarifications will take effect immediately. You should periodically check the Site and this privacy page for updates.

XII. Cookies and Browser Storage

The GuitarMaxx website is a static informational site. It does not set cookies, does not use advertising pixels or retargeting trackers, and does not require you to sign in. Our hosting provider, Vercel, may collect standard server logs (such as IP address, browser user agent and requested page) for security and operational purposes in accordance with Vercel's privacy policy.

The App does not use cookies. It uses local device storage and the iOS Keychain as described in Section I.1. You can remove all locally stored data by deleting the App from your device.

XIII. Contact Us

If you have any questions regarding this Privacy Policy or the practices of this Site, please contact us by sending an email to contact@guitarmaxx.app.