Privacy Policy

1. Overview

Gumeo is a guitar practice companion for daily practice plans, timers, progress tracking, music tools, focus sessions, widgets, and account-based cloud sync. This Privacy Policy explains what information Gumeo collects, how it is used, and the choices you have.

2. Information We Collect

2.1 Account Information

Gumeo requires sign-in before entering the app. Depending on the sign-in method you choose, we may receive and store:

• Your Supabase user ID
• Your email address
• Limited authentication information from Sign in with Apple or Google Sign-In needed to create and restore your session

2.2 Onboarding and Practice Preferences

Gumeo stores preferences used to personalize your practice experience, including:

• Skill level
• Practice goal
• Preferred guitar style
• Daily practice target in minutes

2.3 Practice and Progress Data

To provide practice history and cross-device sync, Gumeo may store practice-related data such as:

• Total XP, levels, streaks, and practice minutes
• Practice tasks, completion records, and completion dates
• Favorite skills and favorite tasks
• Custom practice sections and home category order
• Progress by practice category

2.4 Local App Data

Some data is stored locally on your device or in Apple app-group storage so Gumeo features can work across the app, widgets, Live Activities, and extensions. This may include notification preferences, active timer state, widget progress snapshots, and Lock-In session state.

2.5 Lock-In and Screen Time Data

Gumeo's Lock-In feature uses Apple's FamilyControls, DeviceActivity, and ManagedSettings APIs. If you enable Lock-In, the app may store your selected app, category, or web domain tokens locally so iOS can apply your chosen shields during a focus session. Gumeo does not upload your Lock-In selections to our cloud database.

2.6 Purchases and Subscriptions

If Gumeo offers subscriptions or paid features, purchases are handled through Apple's StoreKit and the App Store. Gumeo can read subscription entitlement status, but we do not receive or store your credit card number or App Store payment credentials.

2.7 Support Communications

If you contact us, we may receive your email address and whatever information you choose to include in your message.

3. How We Use Information

Gumeo uses information to:

• Create, restore, and secure your account
• Sync your onboarding preferences and practice progress
• Recommend practice plans and keep your progress accurate
• Run timers, notifications, widgets, Live Activities, and Lock-In sessions
• Provide customer support and respond to requests
• Maintain app reliability, prevent abuse, and comply with legal obligations

4. Third-Party Services

Gumeo uses service providers only as needed to operate the app and website:

• Supabase: authentication, session restoration, profile storage, onboarding preference storage, practice sync snapshots, and account deletion support.
• Apple: Sign in with Apple, StoreKit purchases, notifications, widgets, Live Activities, FamilyControls, DeviceActivity, and ManagedSettings.
• Google: Google Sign-In if you choose that provider.
• Vercel: hosting for the Gumeo website and policy pages.

We do not sell your personal information. We do not use your practice data for third-party advertising or cross-app tracking.

5. Data Storage, Security, and Retention

• Cloud account, onboarding, and practice sync data is stored in Supabase with row-level security so users can access only their own rows.
• Local app data remains on your device until you clear app data or uninstall the app, unless it is also synced to your account.
• Lock-In selections are stored locally for iOS Screen Time functionality and are not uploaded to Gumeo's cloud database.
• Support emails may be retained as long as needed to respond to your request and maintain support records.

6. Your Choices and Rights

You can:

• Sign out from the app settings
• Delete your account from the app settings
• Control notifications in iOS Settings
• Control Screen Time, FamilyControls, and Lock-In permissions in iOS Settings
• Manage App Store subscriptions through your Apple ID settings
• Contact us to ask questions about your data

When you use Delete Account in Gumeo, the app calls a signed-in Supabase Edge Function to delete your Supabase Auth account and associated cloud rows. Local Gumeo practice and onboarding data on that device is also cleared by the app flow.

7. Children

Gumeo is not directed to children under the age required by applicable law to consent to online services. If a younger user uses Gumeo, a parent or guardian should review and approve the use of the app and any account setup.

8. Changes to This Policy

We may update this Privacy Policy as Gumeo changes. If we make material changes, we will update this page and may provide notice in the app or through other reasonable means.

9. Contact Us

If you have questions about privacy or data protection, contact us at contact@gumeo.app.