Go to the app!

Privacy Policy

Last updated: 16/10/2026

1. Who processes your data

The data controller is Stefano Corradi, author of MEG – Music Exercises Generator, based at Viale Giovanni da Cermenate 18, Milan, Italy. This policy covers the site musicexercisesgenerator.com and the app app.musicexercisesgenerator.com, and follows Regulation (EU) 2016/679 (GDPR).

For any question about your data you can write to info@musicexercisesgenerator.com.

2. What data we process

2.1 Account

When you sign up, with email and password or with your Google account, we process:

  • first and last name
  • email address
  • sign-up date and date of last sign-in
  • the devices you have linked to the account and the passkeys you have created
  • your profile photo, if you choose to upload one
  • the licence type (FREE or PRO), its expiry date and any promotional code used

We never see or store your password: the authentication service handles it, in encrypted form.

2.2 Content you create in the app

The exercises, chord progressions and playlists you save, your tags, notes and the practice tempos you use to track progress. The app also works out your practice statistics (time and sessions per day, keys and exercises practised, weekly goal), which only you can see. App settings stay in your browser.

2.3 Payments

The PRO version is paid through Stripe. You enter your card details on Stripe's pages and they never reach us: we only receive your email, the outcome of the payment and the subscription identifier, which we need to activate and renew the licence.

2.4 Contacts and sharing between users

If you invite another user as a contact, or share an exercise or a playlist with them, that user sees your name and email. The email of the person you invite is stored so that the invitation can reach them.

2.5 Contact form

Name, email, topic and message reach us by email and are used only to answer you; the site keeps no copy. To limit abuse, the server computes an anonymous fingerprint of your IP address and keeps it in memory for a few minutes.

2.6 Access statistics and technical data

We count visits with Vercel Web Analytics, which uses no cookies and does not recognise you from one day to the next: we only see aggregate numbers (pages viewed, referring site, country, type of device and browser). Like every site, the hosting service briefly records the technical data of each request (IP address, date and time, browser) to run and protect the service.

2.7 Activity in the app

The app records a few actions linked to your account, with date and time: sign-ins and sign-outs (with the method used, for example Google or passkey), the creation of an exercise or a playlist, and the use of credits. We use them to protect your account and, only as overall counts, to understand which features matter most and to improve the app.

2.8 “What do you want to practise?” assistant

If you write a request in the app's assistant field, the text (at most 300 characters) is sent to Anthropic, which has an artificial intelligence model interpret it only to understand instrument, level, goal and key and suggest exercises. We do not send your name, your email or any other account data, and we do not keep the text; please do not write personal data in it. Anthropic does not use this data to train its models. We only count how many requests you make per day, for the limit of 10.

3. Why we process it

  • to give you the service you asked for: account, licence, saving your exercises, sharing, payments (performance of the contract)
  • to answer the messages you send us (steps taken at your request)
  • to send you MEG updates and new features by email, only if you asked for it with the tick box at registration (consent, which you can withdraw at any time with the link at the bottom of every email or by writing to us)
  • to comply with legal obligations, such as accounting and tax rules
  • to understand how the site and the app are used, through aggregate statistics, and to protect them from abuse (legitimate interest)

We do not use your data for advertising or profiling and we do not sell it. Emails about MEG news reach you only if you asked for them.

4. Cookies and browser storage

We only use technical cookies, needed for the service to work: that is why there is no consent banner. There are no profiling or third-party cookies.

  • language (site, 1 year): remembers the language you chose
  • noteNames (site, 1 year): remembers how you want note names written
  • loggedIn (site, 5 days): remembers that you have signed in, to show your account pages straight away; it holds no password or other credentials
  • gen-locale (app, 1 year): remembers the language you chose

The app also stores your settings and your sign-in session in the browser (localStorage and IndexedDB). You can delete cookies and stored data from your browser settings: you will need to sign in and choose your preferences again.

5. Who receives the data

Data is processed by the providers we need to run the site and the app, each for its own part:

  • Google (Firebase): authentication and the database holding accounts and content; sign-in with Google, if you choose it
  • Vercel: hosting of the site and the app, access statistics
  • Stripe: payments and subscriptions
  • Postmark: sending the app's emails (address confirmation, notices, purchases, gifts)
  • Anthropic: interpretation of the requests written in the app's assistant
  • Cloudinary: profile photos
  • our email provider: messages from the contact form
  • Sender.net: sending the app emails and, if you asked for it, the newsletter

We may also disclose data to authorities when the law requires it.

6. Transfers outside the European Union

Some of these providers are based in the United States or use servers outside the European Union. Transfers take place under the safeguards of the GDPR: the provider's participation in the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

7. How long we keep it

  • account data and content: as long as the account exists; we delete them when you ask for the account to be removed
  • payment data: for the time required by accounting and tax rules
  • contact form messages: for the time needed to answer you and follow up on the request
  • newsletter consent and address in the subscriber list: until you unsubscribe
  • record of activity in the app: as long as the account exists
  • technical request data: for the short period set by the hosting service

8. Security

Connections are encrypted and each user can read and change only their own data. No system is completely secure, though: should a breach affecting you occur, we will inform you as the law requires.

9. Your rights

At any time you can ask us to:

  • access your data and receive a copy
  • correct or update it
  • delete it, together with your account
  • restrict its processing or object to it
  • receive it in a format another service can read (portability)

You can change your name, photo and devices yourself in the account settings. For anything else write to info@musicexercisesgenerator.com: we answer within one month. You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it) or with the authority of your country.

10. Changes to this policy

If the service changes, we update this page and the date at the top. We notify registered users of important changes.

11. Contact

For questions about this policy or your data:

Stefano Corradi – Music Exercises Generator
Viale Giovanni da Cermenate 18, 20141 Milano
P.IVA 09857500962
info@musicexercisesgenerator.com
+39 327 353 4462