Privacy Policy

Introduction

DecPlay ("we", "us", or "our") is a UK-based piano learning platform that helps you develop your musical skills through structured courses, interactive lessons, and practice tools. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services.

What Data We Collect

We collect the following types of information:

• Account information: Email address when you register or sign in
• Learning data: Course progress, completed lessons, and saved songs
• User content: Files you upload (e.g. sheet music, recordings)
• Technical data: Session cookies for authentication and localStorage for preferences

Why We Collect It

We use your data to:

• Provide and maintain the DecPlay service
• Authenticate you and keep your account secure
• Track your learning progress and personalise your experience
• Store your saved songs and uploaded content
• Manage subscriptions and communicate with you about your account

How We Store and Protect It

We take the security of your data seriously and use industry-standard measures to protect it:

• Your data is stored in a secure database with appropriate access controls
• Passwords are never stored in plain text — they are securely hashed before storage
• All connections to our platform are encrypted via HTTPS
• We use secure session cookies for authentication

International Data Transfers

Our platform is hosted in the United States. If you are based in the UK or EU, your personal data will be transferred to and stored in the US. We ensure these transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) and data processing agreements with our hosting providers, in compliance with UK GDPR.

Cookies We Use

We use the following:

• Session cookie: Essential for keeping you logged in. This is a functional/essential cookie required for the service to work.
• localStorage: Used to store preferences (e.g. theme, volume) on your device. This data stays on your device and is not sent to our servers.

Third-Party Services

We use a small number of trusted third-party services to help operate our platform, including for subscription management, file storage, and video hosting. These providers process data on our behalf under contractual agreements and are required to protect your data in line with applicable law.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Data Retention

We keep your data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Ask us to correct inaccurate data
• Erasure: Request deletion of your personal data
• Data portability: Receive your data in a structured, machine-readable format
• Object: Object to processing in certain circumstances
• Withdraw consent: Where we rely on consent, you may withdraw it at any time

To exercise these rights, contact us at support@decplay.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data properly.

How to Delete Your Account

You can delete your account at any time. Go to your account settings in the app and select "Delete account", or email us at support@decplay.com with your request. We will process deletion requests within 30 days.

Contact Information

For any questions about this Privacy Policy or your personal data, contact us:

Email: support@decplay.com

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.