Privacy Notice

Last edited October 3, 2026

Thank you for using Adventure Guitar. This Privacy Notice explains what personal data White River Media LLC (“we”) collects about you and how we use it, and the choices you have. It applies to the Adventure Guitar website and app (the “Services”). If we make a material change we will update the date above and tell you in the app and by email.

1. Contact us

White River Media LLC is responsible for your personal data. Questions, requests or complaints: info@whiteriver.media.

2. What personal data we collect and where we get the data

Data you give us.

Account details: your name and email address, and, only if you add them, a phone number, a delivery address for orders and a profile photo.
Your password. We store only a one-way hash of it and cannot read it. Short-lived sign-up, password-reset and email-change codes are stored the same way and deleted once used or expired.
Your practice: the minutes you play, the journal entries and weekly reviews you write, your practice plan, and the timed practice sessions you run.
Your progress: the lessons you finish, the Notes and XP you earn, and the trophies you win.
Your settings: language, appearance, daily practice goal, tuning, left-handed layout, number of frets, note labels, reference pitch, and your notification choices.
Orders and keys: when you buy a printed book we use the delivery address and phone number on your account (the carrier requires a phone number) and your name and email. A record of the printed order and its shipping status and tracking link, the keys you redeem, and which items you own are stored on your account.
The contact form, even if you are signed out: your name, email address and message.
If you turn on push notifications: an address and encryption keys for your device, issued by your browser’s push service.
Your choice to receive product update emails, if you opt in.
A record of when you accepted the Terms of Service and Privacy Notice, and which version.
If you ask to download your data: a record of the request, and the archive we prepare for you until its link expires after 7 days.

Data we generate. An account ID. Figures worked out from your own data, such as your practice streaks, totals, achievements and trophies. Short-lived attempt counters tied to your IP address and email that we use to block password guessing and abuse. A random device ID, stored in a cookie, that counts how many devices read the Guitar Atlas on your account (limited to a few). Your email address, shown as a faint watermark on the Atlas pages you read.

Your microphone. The tuner and ear tools can listen through your device’s microphone, only while the tool is open and only if you allow it in your browser. The sound is analysed on your device, in real time, to find the pitch. It is never recorded, stored or sent to us.

Data from partners. We do not receive personal data about you from advertisers, data brokers or other partners. When you pay, our payment processor collects your card details and tells us the payment succeeded. We do not receive or store your card number. Items bought through a link to another shop are sold by that shop, which has its own privacy notice.

3. Why we process your personal data

To provide the Services (performing our contract with you): running your account, saving your practice, journal and progress, showing your stats and achievements, building your practice plan from the answers you give, and answering your requests.
Account emails (performing our contract with you): sign-up, password-reset and email-change codes, a welcome message, notices when your email or password changes, when your data download is ready, when we update this notice, and when your account is deleted. These are not marketing.
Product update emails (your consent): only if you turn them on. Every product email has an unsubscribe link, and you can also switch it off in the app.
Push notifications (your consent): only if you turn them on, for app alerts. You can turn them off in Settings or in your browser.
Security and fraud prevention (our legitimate interests): protecting accounts and the service from abuse.
Support (our legitimate interests): reading and replying to your contact-form messages and emails.
Legal obligations: where the law requires us to keep or disclose data.

We do not sell your data, show ads, or use advertising or analytics trackers. Your practice plan is built by our own software from your answers; none of your data is sent to an outside AI service.

4. Who can see your data

You, when signed in. Adventure Guitar has no public profiles, reviews or other member-to-member features: no other member can see your data.
White River Media LLC, for support and security, when needed.
Service providers that process data on our behalf: Vercel (hosting) and a managed Postgres database provider, which holds your account data. They may not use it for their own purposes.
Our payment processor, which handles your payment details when you buy.
Lulu, our print-on-demand partner, which receives your name, delivery address, phone number and email only for printed orders, to print and ship your book and give you tracking.
An email delivery provider, which handles your address and the message text when we send you email.
If you turn push notifications on, the push service run by your browser’s maker (such as Google, Mozilla, Apple or Microsoft), which carries the notification to your device.
Authorities, where legally required, and a buyer if the business is transferred (you would be told).

5. International data transfers

We are based in the United States. Our providers may process data in the United States and other countries. Where the law requires, we rely on safeguards such as standard contractual clauses.

6. Data retention

We keep your data until you delete it. “Delete your data” clears your practice, journal, lesson progress, push devices and any data downloads, and keeps your account and settings. Deleting your account removes all of that and the account itself. Data downloads are deleted 7 days after you ask. Deleted data leaves our live systems immediately. Encrypted backups kept by our providers can hold a copy for up to 30 days before they are overwritten; we do not restore or use them. We keep a record of the terms you accepted only for as long as your account exists. Security attempt counters expire automatically. We email you a confirmation when your account is deleted.

7. Your rights

Inside the app you can see and change your details on your profile and Account pages, download your data (a zip with your account details, lessons, practice, timed sessions and journal), delete your data or your account, and switch product emails and notifications off. Depending on where you live you may also have the right to object to or restrict processing, and to complain to your data protection authority. To use any right, contact us at the address above.

8. How do we keep your data secure

Connections use HTTPS, passwords are hashed, and sign-in attempts are limited. Your data is private to your account: other members cannot see it. No system is perfectly secure, so please use a strong, unique password and keep access to your email account secure, since we use it to confirm sign-ups and reset passwords.

9. Age matters

Adventure Guitar is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

10. Cookies and similar technologies

We set essential cookies that keep you signed in and protect sign-in from forgery, and we tell you about them in a short notice the first time you visit. We also keep a few small items on your device that never leave it: that you dismissed that notice and the install prompt; which days you opened the app, which feeds your journal’s two-week tracker; journal drafts you have not saved yet; the book page you were last reading and the pages you saved; your recent dice rolls and sound setting; and your flashcard streak. The device-ID cookie described above is essential too: it only counts devices reading the Atlas on your account. If you add the app to your home screen, its files are stored on your device so it opens quickly. We use no advertising or analytics cookies, so there are no optional cookies to accept or decline.

11. Note for California residents

We do not sell your personal information or share it for cross-context behavioral advertising. California residents can request to know, correct or delete their personal information, and we will not treat you differently for doing so. Use the in-app tools or contact us above.