Privacy policy

TL;DR

Motion processes camera frames, hand landmarks, microphone audio, and recordings on your device. Nothing is uploaded to us unless you publish a take to a share link, and that upload is always a separate, explicit action. Motion also runs without product analytics. Other parts of SuperTime Ultra use optional pseudonymous analytics, which you can turn off below.

1. What stays on your device

  • Motion camera frames and 21-point hand landmarks are processed in your browser and are not uploaded to us.
  • Ordinary Motion play does not record video or audio. A recording is created only after you open Record and press Start recording.
  • The vocal microphone is off by default and is captured only if you turn it on before starting a recording.
  • A completed Motion take is held as an in-memory file in this browser tab. Downloading or sharing the file creates a copy but does not upload it to us. The in-tab take remains until you discard or replace it, or leave or reload the page.
  • If you choose to publish a take, the video is uploaded to us and becomes publicly playable at a link with a random identifier. You can delete it at any time with the delete token that publish returns, and it is removed automatically after 30 days. Take pages ask search engines not to index them.
  • Preferences such as tempo, sound, harmony, language, and theme may be stored locally in your browser or on your iOS device.
  • Practice assignments: when a teacher sends a plan from /teach, we store the plan and a hash of a private key kept on the teacher's device (or link it to their account if they sign in). When a student opens that link, we store a random identifier for their browser, the name they choose to type (optional), and their days and minutes practised, best tempo, timing result and whether they reached the goal. Only the teacher who holds the key or owns the assignment can read it. Students do not need an account.

2. Optional product analytics

Motion routes do not send product analytics or create analytics identifiers. Elsewhere on the website, we use first-party event logs and Mixpanel to understand which features work and where the product fails.

Those events may include a random pseudonymous identifier, session timing, page path, approved campaign parameters, the domain of the site that linked you here (never the full address), counts of your visits, active days, plays and practice days on this browser, browser and operating-system families, primary browser language, a coarse screen-size category, a coarse UTC-offset bucket, and fixed feature states. They are designed to exclude email addresses, payment details, secret tokens, recordings, filenames, titles, raw errors, and hand landmarks.

Mixpanel is an analytics processor. Non-Motion analytics may use browser storage so visits can be understood across sessions. We do not use Motion analytics to create a Mixpanel People profile because Motion analytics is disabled.

Outside Motion routes, Mixpanel also records session replays so we can see where the product is confusing or broken. A replay reconstructs the page as you saw it, including page text, images, clicks, scrolling, and what you type into ordinary fields; if you are signed in, that can include account details shown on screen. Password, email, and phone fields are never captured. Replays do not include camera, microphone, or audio, and recording stops when you open a Motion route. The analytics choice below turns replays off along with the rest of Mixpanel.

3. Your analytics choice

We honor Do Not Track and Global Privacy Control for both first-party analytics and Mixpanel. You can also use this site-wide control. Turning analytics back on takes effect fully on your next page load.

Optional analytics are allowed on non-Motion pages unless your browser privacy signal blocks them.

4. Microphone and iOS recordings

Features such as timing analysis or recording ask for microphone access only when needed. Audio is processed in real time on your device. The iOS Layers feature stores audio files in the app’s local storage. We do not remotely listen to or store those audio streams.

5. Children and families

Motion does not ask for a name, account, age, or microphone before play. Live hand tracking requires camera permission; camera video is processed on the device and is not uploaded unless you publish a take. You can also enter the instrument with touch and click controls without starting a camera. Motion product analytics is disabled for everyone rather than trying to infer a player’s age.

Practice assignments ask a student only for an optional first name, which goes to the teacher who sent the link along with how much they practised.

A parent or guardian should help a child understand camera and recording choices. This description is a product-safety measure, not a claim of certification under any particular children’s privacy law.

6. Retention and deletion

Local settings and recordings remain under your browser or device controls. We do not currently promise a fixed deletion period for pseudonymous analytics logs on non-Motion pages. Contact us to ask about access or deletion, and we will handle the request subject to applicable law and technical limits.

7. Subscriptions and payments

iOS: Payments and subscriptions are processed securely by Apple via the App Store. We do not have access to your credit card information.

Web: Stripe processes web payments. We store receipt identifiers, amount, currency, access status and a hash of the receipt email to provide and recover purchased access. Our optional account system stores your verified email and hashed, expiring sign-in tokens. Sign-in links are delivered through Resend. We do not store card details. Device saves and rehearsal audio stay on your device. If you choose to copy saved polyrhythm rhythms to your account, we store their names and musical settings so you can load them on another signed-in device. Account copies can be removed from Saved rhythms without removing your device copies; they are not included in purchase analytics.

8. Launch and news emails

Occasional SuperTime practice tips and product updates are a separate, optional email choice, off by default. Creating an account or signing in does not subscribe you. If you opt in, we record your email address, when and where you made the choice, and the version of the wording you agreed to. We activate that choice only after your email address is verified. Resend delivers the emails. You can withdraw through the unsubscribe link in any news email; this stops future news emails without signing you out or removing your saved rhythms.

We retain your consent and withdrawal record to honour your choice, including when an older sign-in link is opened later. Resend keeps a copy of subscribed addresses and topic choices for sending. You can also change your practice-email preference in your signed-in web account.

If you ask to be notified about the desktop plugins, we store your email, the offer you chose, whether you also asked for occasional SuperTime news, and when and with what wording you agreed. We use it only to email you about those plugins, and SuperTime news only if you ticked that box. Every plugin email has an unsubscribe link; unsubscribing removes your plugin-list entry and opts you out of the plugin email topics in Resend. Your separate practice-email choice is preserved.

9. Contact and privacy requests

When you send feedback or answer the maker's question on the metronome, we email your message, the page you were on, your browser and operating-system family, how many days you have practised on this browser, and your email if you add one, to the maker through Resend. We use that email only to reply to you, never for a mailing list.

When you message the maker through the chat bubble or the app's Help chat, we keep your conversation (your messages, the maker's replies, the page you were on and your email if you add one) on our server so replies can appear in the chat, and email each message to the maker through Resend. Your browser or app holds a private key to the conversation; nobody else can read it. Conversations untouched for 12 months are deleted, and you can ask us to delete one sooner.

For questions, access requests, deletion requests, or concerns about this policy, contact dnncha@gmail.com.

Last updated: October 20, 2026