Privacy Policy

1. Introduction and Privacy Commitment

This Privacy Policy explains how Pro Audio Training Academy (“Pro Audio Training Academy,” “we,” “us,” or “our”) collects, uses, discloses, protects, and retains information when an individual accesses or uses our mobile applications, websites, browser-based learning environment, customer-support channels, and related educational services (collectively, the “Services”).

This Policy applies to the free reference experience and the paid Academy experience. It also applies when a person creates an account, communicates with us, requests support, participates in testing or research, purchases access through an application marketplace, receives a certificate, or elects to use an optional networking or credential-verification feature.

Our baseline privacy commitments are:

• We do not sell Personal Information.
• We do not operate the Services as an advertising platform.
• We do not use third-party advertising networks within the learning experience.
• We seek to collect only information reasonably necessary to operate, secure, support, and improve the Services.
• We seek to keep this Policy, application-store disclosures, permission prompts, and actual production behavior consistent.

The Services are intended for users who are at least 13 years old and are not directed to children under 13. Additional requirements may apply when a minor uses the Services through a school, institution, parent, or guardian.

By using the Services, a user acknowledges that information will be handled as described in this Policy. Where consent is legally required for a specific practice, we will request it separately. This Policy does not replace a more specific notice presented at the point of collection, in a device permission prompt, or in connection with an optional feature.

2. Definitions

Account means a registered user profile used to access paid or personalized features, save progress, synchronize information, or obtain certificates or other records.

Academy Mode means the paid or otherwise authorized portion of the Services that provides access to the complete curriculum, guided study features, assessments, progress tracking, and other premium functions.

Certificate means a completion record issued after a user satisfies the applicable learning, study, assessment, and integrity requirements.

Credential means a Certificate, achievement, verification record, or other representation that a user has satisfied specified Academy requirements.

Deidentified Information means information that cannot reasonably be used to infer information about, or otherwise be linked to, a particular person when maintained with appropriate safeguards.

Device Data means technical information about a device, application, or browser, such as device type, operating system, application version, browser type, language, and diagnostic identifiers.

Institution means a school, college, university, training provider, employer, or other organization that obtains or administers access to the Services.

Networking Profile means an optional profile intended for professional networking or employer-facing functions and made available only when the user affirmatively participates.

Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to a particular person or household, subject to applicable law.

Purchase Entitlement means a record showing whether a user has a monthly, annual, lifetime, promotional, institutional, or other right to access Academy Mode. It does not include a complete payment-card number.

Reference Mode means the free portion of the Services that may be used without creating an Account and that includes the professional-audio glossary and other free content or tools made available by us.

Service Provider means a company or individual that processes information on our behalf to provide hosting, authentication, analytics, diagnostics, billing support, communications, security, or other operational services.

Usage Data means information about how the Services are accessed and used, such as screens viewed, features selected, sessions, navigation paths, study activity, and technical performance events.

User means any person who accesses or uses any portion of the Services, whether as a guest, registered user, subscriber, certificate holder, tester, or institutional participant.

3. Scope and Applicability

This Policy applies to information processed through:

• The Pro Audio Training Academy application for iOS and iPadOS.
• The Pro Audio Training Academy application for Android.
• The Pro Audio Training Academy website and browser-based Academy environment.
• Account registration, authentication, subscription verification, and progress synchronization.
• Customer-support communications and in-app support or correction requests.
• Beta testing, surveys, feedback, error reports, and voluntary product research.
• Credential verification, institutional access, and optional networking features, if and when launched.

This Policy does not govern the independent privacy practices of Apple, Google, a device manufacturer, a mobile carrier, an internet service provider, a linked website, or another service selected by the user. Those parties operate under their own terms and privacy policies.

An Institution may independently collect or receive information about its students, employees, or participants. The Institution’s own practices are governed by its policies and applicable law. Where we process information for an Institution under a separate agreement, that agreement may include additional or different terms concerning access, retention, security, reporting, or deletion.

If a new feature materially changes what information is collected or how it is used, we will update this Policy and provide any additional notice required by law or platform rules before or when the new practice begins.

4. Information We Collect

The exact information collected depends on how a person uses the Services.

4.1 Information Provided Directly by the User

A user may provide:

• Name or display name.
• Email address.
• Username or other account identifier.
• Password or authentication credential, which is processed through the authentication system and should be stored in hashed or otherwise protected form rather than readable plain text.
• Optional profile photograph.
• Optional learning interests, career goals, experience level, biography, résumé information, portfolio links, or onboarding responses.
• Customer-support messages, feedback, bug reports, content-correction reports, and requests for new content.
• Information submitted with a privacy request, deletion request, billing inquiry, credential appeal, or suspected-misuse report.

Users should not submit sensitive information that is unnecessary for the requested service. Users should not send government identification numbers, financial account credentials, medical records, or similarly sensitive material through ordinary support email unless we specifically request an appropriate verification item and provide a suitable submission method.

4.2 Learning, Progress, and Achievement Information

For registered users, we may collect and maintain:

• Course, topic, lesson, glossary, or term activity.
• Study sessions and time-related progress indicators.
• Flashcard, matching, connection, ear-training, scenario, quiz, and other study activity.
• Quiz attempts, answers, scores, completion status, and performance trends.
• Achievements, trophies, levels, percentages, streaks, and other milestones.
• Favorites, recently viewed items, saved content, and learning preferences.
• Certificate eligibility, issuance, verification, revocation, and appeal records.
• Information reasonably necessary to detect attempts to bypass required study activity, skip directly to assessments, share Accounts, manipulate progress, or obtain a Credential dishonestly.

These records are used to deliver and synchronize the educational experience, preserve the meaning of Certificates, and protect Academy integrity. They are not used by us to make decisions about credit, insurance, housing, medical care, or other legally significant consumer services.

4.3 Subscription and Purchase Information

For purchases processed through the Apple App Store or Google Play, we may receive:

• The product or plan purchased.
• Purchase, renewal, expiration, cancellation, refund, revocation, chargeback, grace-period, billing-retry, and restore-purchase status.
• Marketplace transaction identifiers, receipts, or tokens needed to validate a purchase.
• Storefront, platform, or country information associated with a transaction.
• Purchase Entitlement status.

We do not receive or store a complete payment-card number when Apple or Google processes the transaction. If direct web billing is introduced, this Policy will be updated to identify the processor and describe the information received.

4.4 Device, Browser, and Technical Information

Our systems and authorized Service Providers may automatically receive:

• Device type, manufacturer, model, operating-system version, browser type, and application version.
• Device, installation, session, or authentication identifiers generated by the application, authentication provider, analytics provider, or marketplace.
• Internet Protocol address and general network information. An Internet Protocol address may indicate an approximate region, but we do not use it to collect precise Global Positioning System location.
• Language, time zone, country, storefront setting, and device accessibility or display settings exposed to the application.
• Log files, authentication events, server requests, timestamps, and security events.
• Crash traces, error messages, diagnostic logs, memory data, and performance information.
• Push-notification token when notifications are enabled.
• Microphone permission status and transient audio input required while a microphone-dependent tool is actively used.

4.5 Usage and Analytics Information

Usage Data may include:

• Screens or pages opened and the order in which they are viewed.
• Buttons, navigation items, searches, glossary entries, audio tools, and learning activities used.
• Session frequency, duration, return activity, and aggregate retention measures.
• Whether a user enters Reference Mode, selects an Academy feature, views an upgrade screen, begins registration, or completes a purchase.
• Load time, failed requests, synchronization results, and application responsiveness.
• General campaign or referral information associated with a website or application-store link.

Analytics should be configured not to collect passwords, complete support messages, raw microphone recordings, or unnecessary content from free-text fields.

4.6 Microphone and Audio-Tool Information

The application may request microphone access only when a user selects an audio measurement or educational tool that requires live sound input. The tool processes audio on your device to display sound level, peak level, root mean square level, spectrum, waveform, spectrogram, reverberation estimates, or related measurements.

The app also uses the microphone when you tap the microphone button in the glossary search, to turn your spoken words into search text. This speech recognition runs on your device.

Unless an updated notice expressly states otherwise, we do not intend to record, store, or transmit continuous raw microphone audio to our servers. Application-store disclosures and this Policy must be revised before a future feature uploads, stores, shares, or analyzes raw audio off the device.

4.7 Optional Profile Photograph and Networking Information

A profile photograph and professional-profile information are optional. Before profile information is displayed to employers, other users, Institutions, partners, or the public, the feature will provide a clear participation choice and describe the intended audience, displayed information, visibility controls, and withdrawal method.

A user may maintain a private Academy Account and receive a Certificate without participating in a networking database.

5. Information We Do Not Intentionally Collect

The Services are not designed to collect through ordinary use:

• Precise or real-time physical location.
• Address-book contacts.
• Text-message or call-log content.
• Calendar content.
• Health or medical records.
• Government identification numbers.
• Biometric templates used to identify a person.
• Complete payment-card numbers processed by Apple or Google.
• Raw camera images at launch.
• Continuous raw microphone recordings, unless a future feature is introduced with updated notice and any required consent.

We do not intentionally collect information for third-party advertising, data-broker activity, or the sale of user profiles. We do not build advertising profiles across unaffiliated applications or websites.

6. Sources of Information

We may obtain information from:

• The user: registration, onboarding, support, learning activity, profile creation, privacy requests, and networking participation.
• The user’s device or browser: Device Data, Usage Data, permission status, notification token, diagnostics, and security information.
• Authentication providers: account identifiers, verified email information, authentication status, and limited information authorized through Sign in with Apple or Sign in with Google.
• Application marketplaces: transaction, receipt, entitlement, refund, renewal, expiration, cancellation, and storefront information.
• Service Providers: information generated while providing hosting, database, analytics, diagnostics, communications, security, or subscription-management services.
• Institutions: enrollment, access authorization, cohort association, or related information supplied under an institutional arrangement.
• Public or professional sources: information voluntarily made public or used to verify a professional or institutional relationship when reasonably necessary and permitted by law.

We do not intend to purchase consumer profiles from data brokers.

7. How and Why We Use Information

We may use information to:

• Provide, operate, maintain, and secure Reference Mode and Academy Mode.
• Register and authenticate users, recover Accounts, and maintain settings.
• Deliver courses, study activities, assessments, audio tools, achievements, and curriculum features.
• Synchronize progress, favorites, achievements, and Account records across authorized access points.
• Validate, restore, and administer subscriptions, lifetime purchases, promotions, or institutional entitlements.
• Determine Certificate eligibility, issue and verify Credentials, and investigate or prevent dishonest completion.
• Analyze aggregate usage, improve onboarding, diagnose failures, and prioritize corrections or enhancements.
• Investigate reports of inaccurate educational content, dangerous instructions, or technical errors.
• Respond to support, billing, deletion, correction, and privacy requests.
• Detect suspicious sign-ins, Account sharing, scraping, automated downloading, reverse engineering, fraud, cheating, or other prohibited activity.
• Send essential service communications and, where enabled, optional learning reminders, Term of the Day notifications, or product announcements.
• Comply with legal, accounting, tax, platform, consumer-protection, and contractual obligations.
• Administer institutional access, cohorts, reporting, and support under applicable agreements.
• Operate optional networking and employer-verification features using information the user has authorized for display or verification.

We may create aggregate or Deidentified Information and use it for analytics, research, planning, reliability, educational improvement, and business measurement. We will not attempt to reidentify Deidentified Information except to test whether deidentification measures remain effective or as otherwise permitted by law.

We do not use Personal Information for third-party targeted advertising. We do not sell Personal Information. We do not make employment decisions on behalf of employers.

8. Accounts, Authentication, and Guest Access

8.1 Guest Access

A person may use designated Reference Mode features without creating an Account. Limited Device Data, Usage Data, and diagnostics may still be processed to deliver, secure, and improve the Services.

Guest activity may not be synchronized or recoverable after application deletion, device replacement, or local-data loss unless the product expressly offers a migration function.

8.2 Account Registration

An Account may be required to save personalized information, enter Academy Mode, maintain cloud-synchronized progress, earn achievements, obtain a Certificate, participate in networking, or associate paid access with a user.

Users must provide accurate registration information and maintain control of the email address and authentication method associated with the Account.

8.3 Authentication Methods

The Services may support email-and-password authentication, Sign in with Apple, and Sign in with Google. The applicable provider may transmit an account identifier, verified email address, authentication status, and limited profile information authorized by the user. We do not receive a user’s Apple ID password or Google password.

When Apple permits a user to hide an email address, we may receive a private relay address. Communications to that address are subject to Apple’s relay rules and the user’s Apple settings.

8.4 Device and Browser Access

Accounts are intended for one individual. The current product plan may limit access to one personal mobile device and one linked browser session or otherwise apply reasonable device and session controls.

Account sharing is prohibited because it undermines privacy, purchase integrity, learning records, and Certificate credibility. Repeated or serious sharing may result in suspension, termination, loss of Academy access, or revocation of Credentials obtained through the shared Account.

8.5 Account Security and Recovery

We may use verification emails, password-reset links, provider-based sign-in, session expiration, reauthentication, device checks, and security logging. Users should use a unique password, secure their devices, sign out of shared browsers, and avoid forwarding verification or recovery links.

We may temporarily restrict an Account when we reasonably believe it is compromised, involved in fraud, used for automated scraping, or used to manipulate learning records.

9. Purchases and Subscriptions

Pro Audio Training Academy offers free and paid educational services. Academy Mode requires registration and an active subscription or other authorized Purchase Entitlement for features designated as paid.

Purchases through the Apple App Store are processed by Apple. Purchases through Google Play are processed by Google. We generally receive only the information needed to verify and administer access, such as the plan, transaction identifier, receipt or validation token, entitlement status, renewal date, expiration date, cancellation status, refund status, and related marketplace metadata.

We may use purchase information to:

• Verify access to Academy features.
• Restore purchases where supported.
• Synchronize entitlements across supported access points.
• Troubleshoot billing and access problems.
• Prevent subscription fraud and unauthorized entitlement use.
• Maintain accounting, tax, audit, and compliance records.

Users manage marketplace subscriptions, payment methods, cancellations, renewals, refund requests, and billing disputes through the marketplace where the purchase was made, subject to that marketplace’s rules.

Promotions, trials, discounts, and lifetime-purchase options may be modified or discontinued for future purchases. A lifetime purchase means access to eligible features for the operational lifetime of the applicable Service. It does not guarantee that the Services will operate indefinitely and does not transfer ownership of software, content, trademarks, or other intellectual property.

If direct website billing is introduced, the applicable payment processor, data practices, refund terms, and user controls will be described before launch.

Individual and Institutional Access. Individual memberships are purchased only through the Apple App Store or Google Play; we do not sell individual memberships directly. An Institution may instead license access for its students, employees, or members under a separate agreement, and those individuals activate access by redeeming an access code issued to the Institution. Access codes are provided only to Institutions for their own members and are not sold or available to individuals. Institutional access is governed by the agreement between us and the Institution and may be limited to the features, content, certificates, or time period the Institution has arranged.

10. Learning Records, Certificates, and Credentials

We maintain learning records to provide continuity, measure progress, and preserve Credential integrity. Records may include completed lessons, glossary activity, study history, time-related progress indicators, quiz attempts, assessment results, achievements, course-completion dates, Certificate status, and participation in Academy activities.

Certificates are intended to represent completion of defined educational requirements rather than passive participation or simple access. Requirements may include instructional content, study activities, assessments, time or engagement thresholds, practical exercises, and integrity checks.

Credentials obtained through fraud, cheating, automated completion, Account sharing, falsification, software manipulation, or other Terms of Service violations may be suspended, revoked, invalidated, or removed.

We may retain sufficient information about issued or revoked Certificates to:

• Verify authenticity.
• Prevent fraudulent reuse.
• Investigate misconduct.
• Resolve appeals.
• Preserve the reliability of employer or institutional verification.

A future verification service may allow an employer, Institution, or other authorized party to confirm whether a Credential is valid. Verification should disclose only information reasonably necessary for authenticity confirmation, such as the Credential holder’s authorized name, Credential title, issuance date, status, and verification identifier.

11. Artificial Intelligence and Educational Integrity

Artificial intelligence and other software tools may assist internal development by helping draft text, organize information, generate preliminary illustrations, identify inconsistencies, or accelerate production workflows.

Artificial intelligence does not independently approve or publish Academy educational content.

Educational assets intended for publication—including glossary definitions, articles, lessons, quizzes, scenarios, assessments, diagrams, illustrations, and other instructional materials—are subject to human review before release. The review process is intended to evaluate technical accuracy, physical accuracy where applicable, educational value, professional appropriateness, audience suitability, and consistency with accepted industry practice.

Where uncertainty remains, publication may be delayed until adequate verification is completed. The use of artificial intelligence does not reduce our responsibility for the content we publish.

This section describes content-development governance. It does not state that user Personal Information is submitted to external generative artificial-intelligence systems. If a future user-facing artificial-intelligence feature processes user content or Personal Information, we will provide an updated notice before launch.

12. Networking and Public Profile Features

The app offers optional networking features that connect eligible users and Certificate holders with verified employers and instructors. We may add connections with Institutions, manufacturers, or professional-audio organizations in the future.

Participation is voluntary. A Networking Profile may include a profile photograph, display name, earned Certificates, achievements, professional interests, biography, employment preferences, portfolio links, résumé information, and selected accomplishments.

Before a profile becomes visible, we explain:

• What information will appear.
• Who may view it.
• Whether it is public, restricted, searchable, or shared only with approved organizations.
• How the user may edit, hide, or delete the profile.
• Whether removal affects previously issued Certificates.

Users are responsible for ensuring that voluntarily published profile information is accurate, lawful, and appropriate. We may remove content that violates our Terms of Service, infringes rights, contains unlawful material, or threatens the integrity or safety of the community.

Where a public profile or directory listing is offered, publication is strictly opt-in and off by default. Enabling it makes the selected information — such as the name shown on your Certificates, your professional interests, and your biography — visible to anyone who has your public link or scans your code. Other members reach you only through in-app contact requests addressed to an anonymous identifier; your email address is never revealed through this feature, and you may decline, block, or report any contact. Public listing is limited to users who confirm they are 18 or older; because we do not collect a date of birth, this age confirmation is a self-attestation and is not independently verified. You may unpublish at any time, which simultaneously removes the public page, its search visibility, and the ability of others to contact you.

13. Microphone, Notifications, and Device Permissions

13.1 Microphone

Microphone permission is requested only for a user-selected tool that requires live audio input. A user may deny or revoke permission through device settings. Doing so will disable microphone-dependent tools but should not prevent access to unrelated glossary or learning features.

Unless separately disclosed, audio processing is intended to occur transiently and, where technically feasible, on the device. We do not intend to store or transmit continuous raw audio.

13.2 Notifications

When a user enables notifications, we or our notification provider may process a push token and information needed to route the notification. Notifications may include essential service messages and optional content such as Term of the Day, study reminders, progress reminders, or product announcements.

A user can manage notification permission through device settings and may be able to manage categories within the application.

13.3 Other Permissions

The Services do not intend to request camera, contact-list, calendar, precise-location, text-message, or call-log access at launch. If a future feature requires an additional permission, we will provide an appropriate explanation and update our disclosures before use.

14. Cookies and Similar Technologies

The website and browser-based Services may use cookies, local storage, session identifiers, and similar technologies to:

• Maintain secure sessions.
• Authenticate users.
• Prevent fraud and protect the Services.
• Remember preferences.
• Preserve navigation or shopping state.
• Measure reliability and understand website usage.

These technologies may include:

• Essential technologies, required for authentication, security, and core operation.
• Preference technologies, used to remember settings.
• Analytics technologies, used to understand performance and usage.

We do not use advertising cookies to build third-party behavioral advertising profiles within the Academy.

Browser controls may permit users to reject or delete cookies. Disabling essential cookies may prevent portions of the website from functioning correctly. Where applicable law requires consent for nonessential cookies, an appropriate choice mechanism will be provided before those technologies are activated.

15. Analytics and Crash Reporting

We may use analytics and crash-reporting tools to understand feature usage, measure reliability, identify failures, improve educational workflows, and correct defects.

Analytics and diagnostic information may include pseudonymous identifiers, device characteristics, application version, session events, screen or feature interactions, load times, failed requests, crash traces, stack information, and performance data.

These tools are configured to avoid collecting passwords, complete support messages, raw microphone recordings, and unnecessary free-text content.

We do not use analytics information for cross-company behavioral advertising or data-broker activity.

16. Third-Party Service Providers

We use the following Service Providers to operate the Services. Appendix A describes each one in more detail.

• Supabase: authentication, database, storage, synchronization, and backend infrastructure.
• Aptabase: anonymous, privacy-first in-app analytics and feature-usage measurement, hosted in the European Union; no advertising identifiers and no cross-application tracking.
• Sentry: crash and error reporting and technical diagnostics, configured without personal identifiers.
• Resend: delivery of transactional email, such as verification codes and account-related notices.
• Vercel: hosting and content delivery for our public website.
• Expo (Expo Application Services): mobile application builds, over-the-air application updates, delivery of application assets, and routing of push notifications.
• Apple App Store: application distribution, billing, receipt validation, and subscription management for Apple platforms.
• Google Play: application distribution, billing, licensing, and purchase management for Android.

Service Providers may process information only to the extent reasonably necessary to perform their contracted functions, subject to applicable agreements and law. We periodically review provider need, access, and configuration.

Appendix A lists the providers active in production. Providers that are only under consideration are not listed there and are not used to process information until this Policy is updated.

17. Disclosure and Sharing of Information

We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising.

We may disclose information:

• To Service Providers that operate, host, secure, analyze, support, or maintain the Services.
• To Apple, Google, payment or entitlement providers, and related marketplace systems as needed to administer purchases.
• To an Institution under an applicable agreement and only for authorized educational or administrative purposes.
• At the user’s direction or with the user’s consent.
• To verify a Credential when the user has authorized verification or when the verification service is an expected feature of the Credential.
• To comply with law, legal process, court orders, or lawful government requests.
• To investigate fraud, security incidents, misuse, infringement, threats, or Terms of Service violations.
• To protect the rights, safety, and property of users, the Academy, Institutions, or others.
• In connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to applicable law and appropriate notice.

A successor receiving information in a business transfer will be expected to honor this Policy or provide notice of material changes where required.

18. Data Security

We use commercially reasonable administrative, technical, and organizational safeguards designed to reduce the risk of unauthorized access, disclosure, alteration, loss, or destruction.

Safeguards may include:

• Encryption in transit using industry-standard transport security.
• Authentication and session controls.
• Role-based or least-privilege access where appropriate.
• Secure cloud infrastructure and configuration controls.
• Password hashing and protected credential processing.
• Security and operational logging.
• Software updates and vulnerability remediation.
• Backup and recovery procedures.
• Restricted access to administrative systems.

No internet-connected system can guarantee absolute security. Users should use strong, unique passwords, keep credentials confidential, secure their devices, sign out of shared browsers, and report suspected unauthorized access promptly.

We may temporarily suspend or restrict an Account while investigating a suspected compromise, fraud event, or security incident.

19. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

Retention depends on the information type:

• Account information: while the Account is active and for a reasonable period afterward for support, dispute resolution, fraud prevention, enforcement, and legal compliance.
• Learning records: as needed to provide continuity, restore progress, analyze educational performance, and support Academy functions.
• Certificate records: potentially for an extended or indefinite period when needed to verify Credentials, preserve integrity, resolve disputes, or prevent fraudulent use.
• Purchase and subscription records: as required for accounting, tax, audit, entitlement, refund, and fraud-prevention purposes.
• Support communications: for a reasonable period to respond, document prior assistance, resolve disputes, and improve support.
• Analytics and diagnostics: for the period reasonably necessary to measure usage, investigate failures, improve reliability, and satisfy provider or legal requirements.
• Security records: for a period appropriate to investigate threats, prevent abuse, and maintain system integrity.
• Deidentified Information: potentially indefinitely, provided it remains deidentified and is not used to identify a person.

Retention periods are documented internally and reviewed as the Services change.

20. Account and Data Deletion

Users may request Account deletion through the in-app deletion function, or by emailing info@proaudiotrainingacademy.com:

info@proaudiotrainingacademy.com

Before processing a request, we may require reasonable verification to protect against unauthorized deletion.

After verification, we will delete, deidentify, or restrict eligible Personal Information as required by applicable law and consistent with operational capabilities. Certain information may be retained, including:

• Accounting, tax, transaction, and audit records.
• Fraud-prevention and security records.
• Records needed to comply with law or enforce agreements.
• Certificate issuance, verification, revocation, and integrity records.
• Information needed to resolve disputes or protect rights.
• Deidentified analytics.

Account deletion may permanently remove progress, favorites, study history, achievements, personalized settings, and other Account-specific information that cannot be restored.

Deletion does not automatically invalidate a previously issued Certificate. A user may request suppression of public profile information or limits on future public verification, subject to the integrity and recordkeeping requirements associated with the Credential.

21. Privacy Rights and Requests

Depending on applicable law and jurisdiction, users may have the right to:

• Know whether we process Personal Information about them.
• Request access to Personal Information.
• Request correction of inaccurate Personal Information.
• Request deletion of eligible Personal Information.
• Obtain information about categories of Personal Information, sources, purposes, and recipients.
• Withdraw consent where processing is based on consent.
• Object to or restrict certain processing where permitted.
• Receive a portable copy of certain information where required.
• Appeal a decision concerning a privacy request where applicable.
• Use an authorized agent where permitted by law.

Requests may be submitted to info@proaudiotrainingacademy.com or through a designated privacy-request form.

We may request information reasonably necessary to verify identity and authority. We may deny or limit a request where permitted or required by law, including when fulfillment would compromise another person’s rights, security, fraud prevention, legal obligations, or Credential integrity.

We do not discriminate against users for exercising applicable privacy rights.

22. Children and Teen Users

The Services are intended for users age 13 or older and are not directed to children under 13.

We do not knowingly collect Personal Information online from a child under 13 without authorization required by applicable law. If we learn that such information was collected improperly, we will take reasonable steps to delete it.

A parent or guardian who believes a child under 13 provided Personal Information may contact info@proaudiotrainingacademy.com.

Users under 18 should use the Services with the knowledge, supervision, or permission of a parent, legal guardian, school, or other responsible adult where appropriate. Institutions using the Services with minors are responsible for obtaining any permissions or consents required of the Institution.

23. California Privacy Disclosures

This section supplements the remainder of this Policy for California residents.

Depending on whether applicable statutory thresholds and exemptions apply to Pro Audio Training Academy, California residents may have rights to know, access, correct, delete, and obtain information about categories of Personal Information, sources, purposes, and recipients.

We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising. We do not knowingly sell or share Personal Information of consumers under 16.

During the preceding 12 months, the categories of Personal Information described in Section 4 may have been collected and disclosed to Service Providers or other recipients for the business purposes described in Sections 7, 16, and 17. The exact categories depend on the user’s interaction with the Services and the final production configuration.

California requests may be submitted to info@proaudiotrainingacademy.com or through a designated request form. We may verify the request and may request proof of an authorized agent’s authority.

If California law requires a “Notice at Collection,” that notice will be made available at or before the point of collection and will describe the relevant categories, purposes, retention criteria, and any sale or sharing practices.

California’s “Shine the Light” law may permit certain residents to request information about disclosures of personal information to third parties for their own direct-marketing purposes. We do not disclose Personal Information to unrelated third parties for their own direct marketing.

24. International Users and Data Transfers

The Services are initially intended primarily for users in the United States. Information may be processed in the United States and in other jurisdictions where our Service Providers operate.

Those jurisdictions may have data-protection laws different from the laws where a user resides. Where required, we will use appropriate contractual, organizational, or legal safeguards for international transfers.

Before materially expanding into a jurisdiction with additional requirements, we may provide a regional supplement addressing matters such as legal bases for processing, cross-border transfers, supervisory-authority complaints, data-protection representatives, or region-specific rights.

References to the General Data Protection Regulation, United Kingdom General Data Protection Regulation, Personal Information Protection and Electronic Documents Act, or other international frameworks should not be treated as a representation that every such law currently applies to the Services.

25. Changes, Contact Information, and Governing Documents

We may revise this Policy as the Services, providers, legal requirements, or business practices change. The “Last updated” date will be revised when changes are published.

Material changes may be communicated through the website, application, email, or another appropriate channel. Where law requires consent rather than notice, we will request consent.

Continued use after the effective date of an updated Policy constitutes acknowledgment of the revised Policy to the extent permitted by law.

Questions, concerns, and privacy requests may be directed to:

Pro Audio Training Academy

Email: info@proaudiotrainingacademy.com

Mailing address: San Diego, CA

This Privacy Policy should be read with the Terms of Service — which contains our billing and refund terms (Terms Appendix A), our acceptable-use obligations (Terms Appendix C), and our data-handling summary (Terms Appendix F) — together with any additional notice presented for a specific feature.

————————————————————————————————————————

Appendix A — Third-Party Service Directory

This directory lists the providers used in production as of the date above.

Supabase

Purpose: Authentication, database services, cloud storage, synchronization, and backend infrastructure.

Possible information processed: Account information, learning records, authentication data, profile content, subscription entitlements, and security logs.

Status: In active production use for authentication, database, cloud storage, and synchronization.

Aptabase

Purpose: Anonymous product analytics, feature usage, and engagement measurement.

Possible information processed: Non-identifying event names, coarse application and device attributes, and app-version and session counters. No advertising identifiers; no cross-application tracking.

Status: In active production use for privacy-first, anonymous in-app analytics, hosted in the European Union.

Sentry

Purpose: Crash and error reporting, technical diagnostics, and reliability improvement.

Possible information processed: Application version, crash and error traces, diagnostic logs, and coarse device information; configured without personal identifiers (no user identifier is attached to reports).

Status: In active production use for crash and error reporting and technical diagnostics.

Apple App Store

Purpose: Application distribution, billing, receipt validation, purchase processing, and subscription administration.

Possible information processed: Entitlement information, transaction identifiers, subscription status, and marketplace metadata.

Google Play

Purpose: Application distribution, billing, licensing, purchase processing, and subscription administration.

Possible information processed: Entitlement information, transaction identifiers, subscription status, and marketplace metadata.

Resend

Purpose: Delivery of transactional email sent by the Services.

Possible information processed: Recipient email address, message subject and body, and delivery status. Used for verification codes, account-related notices, and administrative notifications; not used for marketing email.

Status: In active production use for transactional email delivery.

Vercel

Purpose: Hosting and content delivery for the public website.

Possible information processed: Information inherent in serving a web request, including IP address, request URL, browser user-agent, and timestamps, retained as operational and security logs. The public website does not require an account.

Status: In active production use for website hosting and content delivery.

Expo (Expo Application Services)

Purpose: Mobile application builds, over-the-air application updates, delivery of application assets, and routing of push notifications.

Possible information processed: Device push token, application version and update identifiers, platform and coarse device attributes, and the content of any push notification sent. Push notifications are sent only where the user has granted the operating-system permission.

Status: In active production use for application updates, asset delivery, and push notifications.

Payments

All paid subscriptions are purchased through the Apple App Store or Google Play. We do not operate a direct web payment path and do not use a separate payment processor. We never receive or store full payment-card numbers.

Appendix B — Document Control and Revision History

Document owner: Pro Audio Training Academy

Review status: Reviewed by counsel. Provider directory verified against the production configuration, September 2026.

Next review: At launch, after any material provider or feature change, and at least annually

————————————————————————————————————————

End of Privacy Policy