HARMONIC VISION, INC.

Student data privacy at a glance

Music Ace collects almost nothing, sells nothing, and deletes what it holds when your contract ends. This page summarizes our practices; the complete Data Privacy and Security Plan (NIST CSF-aligned, in the New York Ed Law §2-d format) is available on request.

Names and emails.
That's it.

The only PII we collect is the names and email addresses of teachers and students, plus lesson progress and game scores.

Never sold.
Never advertised.

We do not sell PII, use it for targeted advertising, or share it with anyone except the infrastructure that runs the service.

Deleted when
you're done.

At contract end, your records are removed from the database; backups expire and are destroyed within 14 days.

What we collect, and why

We store only what the service needs: teacher and student names and email addresses for accounts, and each student's lesson progress and game scores so teachers can see who's mastering what, kept until the account is deleted or the subscription ends. We also log IP addresses to prevent account sharing and ensure proper license use. No addresses, no demographic data, no behavioral profiles. We may analyze progress data internally in anonymized, aggregate form to improve the software's reliability and educational effectiveness.

How it's protected

Encrypted in transit (HTTPS/TLS) and at rest.
Hosted on SOC 2-certified cloud infrastructure under Data Processing Agreements. No other party touches student data.
Multi-factor authentication and least-privilege access controls for all administrative access; production and development environments are strictly partitioned.
Continuous monitoring with anomaly detection; everyone with PII access completes annual training on FERPA, COPPA, and secure data handling.
A student's data is visible only to that student and their own teachers, never to other students, teachers on other licenses, or third parties.

Cookies, sign-in, and email

No third-party or advertising cookies. We use one cookie to keep a signed-in user's session, and one to remember that the cookie notice was shown.
Sign-in is by email and password, or optionally Google Sign-In. Lesson content is cached in the browser to shorten download times. No personal information is stored that way.
Students only receive email about access to the software: account setup, password resets, technical support. Product announcements go to teachers, and only when they've opted in.
There are no social-media features anywhere in the product or site.

If something goes wrong

In the event of a confirmed or suspected breach involving PII, we notify the affected educational agency without unreasonable delay, and no later than 72 hours after discovery, and coordinate on communication to affected teachers, students, and families.

Your data stays yours

During your license, teachers can export student-progress data as downloadable reports, and students can export their Doodle Pad compositions as MIDI files. At contract end we return PII on written request in a commercially reasonable format, then securely delete it: database records immediately, encrypted backups within the 14-day retention window, destroyed using NIST-aligned sanitization.

Documents available on request

Data Privacy and Security Plan (summary and detailed responses, NY Ed Law §2-d format) · NIST CSF v1.1 alignment table · signed student-data privacy agreements in your state's format. Our full Privacy Policy is linked from the footer of every page. Contact support@harmonicvision.com.