Privacy Notice

Last edited October 3, 2026

Thank you for using Adventure Guitar. This Privacy Notice explains what personal data White River Media LLC (“we”) collects about you and how we use it, and the choices you have. It applies to the Adventure Guitar website and app (the “Services”). If we make a material change we will update the date above and tell you in the app and by email.

1. Contact us

White River Media LLC is responsible for your personal data. Questions, requests or complaints: info@whiteriver.media.

2. What personal data we collect and where we get the data

Data you give us.

• Account details: your name and email address, and, only if you add them, a phone number, a delivery address for orders and a profile photo.
• Your password. We store only a one-way hash of it and cannot read it. Short-lived sign-up, password-reset and email-change codes are stored the same way and deleted once used or expired.
• Your practice: the minutes you play, the journal entries and weekly reviews you write, your practice plan, and the timed practice sessions you run.
• Your progress: the lessons you finish, the Notes and XP you earn, and the trophies you win.
• Your settings: language, appearance, daily practice goal, tuning, left-handed layout, number of frets, note labels, reference pitch, and your notification choices.
• If you create a member profile (optional, and off until you turn it on): a handle, a short bio, whether other members can see it, the members you follow, and the kudos you give. If you report a profile, review or question, the reason and the optional note you write.
• Store reviews and questions: a star rating, any text you write, “helpful” votes, and questions you ask the seller.
• Orders and keys: when you buy a printed book we use the delivery address and phone number on your account (the carrier requires a phone number) and your name and email. A record of the printed order and its shipping status and tracking link, the keys you redeem, and which items you own are stored on your account.
• The contact form, even if you are signed out: your name, email address and message.
• If you turn on push notifications: an address and encryption keys for your device, issued by your browser’s push service.
• Your choice to receive product update emails, if you opt in.
• A record of when you accepted the Terms of Service and Privacy Notice, and which version.
• If you ask to download your data: a record of the request, and the archive we prepare for you until its link expires after 7 days.

Data we generate. An account ID. Figures worked out from your own data, such as your practice streaks, totals, achievements and trophies. Short-lived attempt counters tied to your IP address and email that we use to block password guessing and abuse. A random device ID, stored in a cookie, that counts how many devices read the Guitar Atlas on your account (limited to a few). Your email address, shown as a faint watermark on the Atlas pages you read.

Your microphone. The tuner and ear tools can listen through your device’s microphone, only while the tool is open and only if you allow it in your browser. The sound is analysed on your device, in real time, to find the pitch. It is never recorded, stored or sent to us.

Data from partners. We do not receive personal data about you from advertisers, data brokers or other partners. When you pay, our payment processor collects your card details and tells us the payment succeeded. We do not receive or store your card number. Items bought through a link to another shop are sold by that shop, which has its own privacy notice.

3. Why we process your personal data

• To provide the Services (performing our contract with you): running your account, saving your practice, journal and progress, showing your stats and achievements, building your practice plan from the answers you give, and answering your requests.
• Account emails (performing our contract with you): sign-up, password-reset and email-change codes, a welcome message, notices when your email or password changes, when your data download is ready, when we update this notice, and when your account is deleted. These are not marketing.
• Product update emails (your consent): only if you turn them on. Every product email has an unsubscribe link, and you can also switch it off in the app.
• Push notifications (your consent): only if you turn them on, for alerts such as an answer to a question you asked. You can turn them off in Settings or in your browser.
• Member profiles and community (your consent): only if you turn your profile on. Other signed-in members can then see your name, profile photo, bio, trophies, achievements and practice statistics (lessons finished, streaks, minutes played), and can follow you and give you kudos. We never show your email address, phone number, delivery address or journal entries. You can turn your profile off at any time on your profile page, and it disappears from other members’ view immediately.
• Store reviews and questions (your choice to post them): shown to other signed-in members with your first name and the initial of your last name, never your email. A review’s star rating and text are saved until you change or delete them.
• Moderation (our legitimate interests): when a member reports a profile, review or question, we review it. Content with several open reports is hidden from other members until we decide, and we may hide a profile, clear its bio, or remove content. We do not tell the person reported who reported them.
• Security and fraud prevention (our legitimate interests): protecting accounts and the service from abuse.
• Support (our legitimate interests): reading and replying to your contact-form messages and emails.
• Legal obligations: where the law requires us to keep or disclose data.

We do not sell your data, show ads, or use advertising or analytics trackers. Your practice plan is built by our own software from your answers; none of your data is sent to an outside AI service.

4. Who can see your data

• You, when signed in.
• Other signed-in members, only what you choose to share: your member profile if you turn it on (the details listed above), and any reviews or questions you post.
• White River Media LLC, for support, moderation and security, when needed.
• Service providers that process data on our behalf: Vercel (hosting) and a managed Postgres database provider, which holds your account data. They may not use it for their own purposes.
• Our payment processor, which handles your payment details when you buy.
• Lulu, our print-on-demand partner, which receives your name, delivery address, phone number and email only for printed orders, to print and ship your book and give you tracking.
• An email delivery provider, which handles your address and the message text when we send you email.
• If you turn push notifications on, the push service run by your browser’s maker (such as Google, Mozilla, Apple or Microsoft), which carries the notification to your device.
• Authorities, where legally required, and a buyer if the business is transferred (you would be told).

5. International data transfers

We are based in the United States. Our providers may process data in the United States and other countries. Where the law requires, we rely on safeguards such as standard contractual clauses.

6. Data retention

We keep your data until you delete it. “Delete your data” clears your practice, journal, lesson progress, reviews and questions, reports you filed, push devices, member profile with its follows and kudos, and any data downloads, and keeps your account and settings. Deleting your account removes all of that and the account itself. Turning your member profile off hides it immediately. Reports about content stay until we decide on them, and are deleted with the content or the account. Data downloads are deleted 7 days after you ask. Deleted data leaves our live systems immediately. Encrypted backups kept by our providers can hold a copy for up to 30 days before they are overwritten; we do not restore or use them. We keep a record of the terms you accepted only for as long as your account exists. Security attempt counters expire automatically. We email you a confirmation when your account is deleted.

7. Your rights

Inside the app you can see and change your details on your profile and Account pages, choose whether other members can see your profile, download your data (a zip with your account details, lessons, practice, timed sessions and journal, store reviews with their helpful votes, questions, reports you filed, and member profile), delete your data or your account, and switch product emails and notifications off. Depending on where you live you may also have the right to object to or restrict processing, and to complain to your data protection authority. To use any right, contact us at the address above.

8. How do we keep your data secure

Connections use HTTPS, passwords are hashed, sign-in attempts are limited, and reviews and member profiles are shown only to signed-in members. No system is perfectly secure, so please use a strong, unique password and keep access to your email account secure, since we use it to confirm sign-ups and reset passwords.

9. Age matters

Adventure Guitar is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

10. Cookies and similar technologies

We set essential cookies that keep you signed in and protect sign-in from forgery, and we tell you about them in a short notice the first time you visit. We also keep a few small items on your device that never leave it: that you dismissed that notice and the install prompt; which days you opened the app, which feeds your journal’s two-week tracker; journal drafts you have not saved yet; the book page you were last reading and the pages you saved; your recent dice rolls and sound setting; and your flashcard streak. The device-ID cookie described above is essential too: it only counts devices reading the Atlas on your account. If you add the app to your home screen, its files are stored on your device so it opens quickly. We use no advertising or analytics cookies, so there are no optional cookies to accept or decline.

11. Note for California residents

We do not sell your personal information or share it for cross-context behavioral advertising. California residents can request to know, correct or delete their personal information, and we will not treat you differently for doing so. Use the in-app tools or contact us above.