Privacy Policy

This policy explains what Ampin' Up ("we," "us," the "Service") collects, how we use it, and the choices you have. Ampin' Up is operated by Cole Smith.

1. What we collect

• Account information — email, username, and profile details you provide when you create and manage your account.
• Usage & practice data — songs you practice, practice time, progress, customization and inventory, used to power your dashboard, your learning progress, and the in-app coin economy.
• User-uploaded content — the Guitar Pro tab files you upload and the 3D note and fretting-hand data we derive from them. See "Your uploaded content" below.
• Payment information — handled by Stripe. We do not store your card details; we keep a Stripe customer reference and your subscription and purchase status.
• Device & log data — basic technical information (such as IP address, browser type, and timestamps) generated automatically when you use the Service, used to keep it secure and reliable.

2. How we use it

We use your information to:

• Provide and improve the Service and your learning experience.
• Operate your account and your Ampin' Up Pro subscription.
• Store your uploaded tabs and the 3D data derived from them so you can play them back in your own library.
• Run the in-app coin economy and cosmetic customization features.
• Secure the platform, prevent abuse, and troubleshoot problems.
• Communicate with you about your account, purchases, and important Service updates.

3. Your uploaded content

When you upload a Guitar Pro tab file, we store that file and the 3D note and fretting-hand data we derive from it in Vercel Blob object storage. This content is private to your account — it is stored as personal educational material for your own practice. We do not make your uploaded tabs or their derived data browsable by, shared with, or downloadable by other users.

We access your uploaded content only as needed to operate the Service (for example, to generate the 3D playback, to provide support, or to keep the platform secure), and to comply with law. You can delete uploaded songs from your library, and you can request deletion of your account and associated content as described in "Data retention" and "Your rights."

4. Service providers

We share data only as needed with the processors that run the Service:

• Supabase — authentication and database hosting.
• Stripe — payment processing for subscriptions and coin purchases.
• Vercel — application hosting and asset delivery.
• Vercel Blob — object storage for your uploaded tab files and the 3D data derived from them.

These providers process data on our behalf under their own security and privacy terms. We do not sell your personal information.

5. International data transfers

We and the providers that run the Service operate in, and process data in, the United States. Providers such as Supabase, Stripe, and Vercel may store and process your personal information on servers located in the United States.

If you are in the European Economic Area (EEA) or the United Kingdom, your personal information may be transferred to and processed in countries whose data-protection laws differ from those where you live. Where we make such transfers, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) — to protect your information. The data controller responsible for these transfers is Cole Smith; counsel should confirm the controller entity and the transfer mechanism.

6. Cookies & consent

We use cookies and similar technologies for two purposes:

• Essential cookies — required to sign you in, keep your session active, and operate core features of the Service. These are always on because the Service cannot function without them.
• Analytics or other non-essential cookies — if and where we use these to understand usage and improve the Service, we treat them as optional.

Where required by law (for example, in the EU and UK), we obtain your consent before setting non-essential cookies, and you can withdraw that consent at any time. You can also control cookies through your browser settings.

7. Data retention

We keep personal information only as long as we need it for the purposes described in this policy, and we apply different retention periods by category:

• Account information — kept for the life of your account and deleted after a short wind-down period following account deletion, except where a longer period is required by law.
• Usage & practice data — kept while your account is active to power your dashboard, learning progress, and the coin economy.
• Payment references — the Stripe customer reference and your subscription and purchase status are retained as needed to meet our legal, accounting, and tax obligations.
• Uploaded tabs and derived data — deleted when you delete the song from your library or delete your account. When you delete uploaded songs, we remove the associated files and derived data from storage.

You can request deletion of your account and associated data by contacting us. Some records may be retained for a limited time where required by law, to resolve disputes, or to enforce our agreements.

8. Your rights (GDPR, CCPA/CPRA, and similar laws)

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Export / port a copy of your data in a portable format.
• Delete your account and associated personal information.
• Object to or restrict certain processing of your information.
• Withdraw consent where processing is based on consent (such as non-essential cookies).

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Exercising these rights will not lead to discriminatory treatment.

To exercise any of these rights, contact us at coleto.smitty@gmail.com or through our contact page. We will verify your request and respond within the timeframe required by applicable law. If you are in the EU/UK, the controller of your personal data is Cole Smith, and — where required — our representative can be reached at [EU/UK REPRESENTATIVE, IF REQUIRED]. We rely on the following legal bases under the GDPR:

• Performance of a contract — to operate your account, provide your Ampin' Up Pro subscription, and store and process the tabs you upload.
• Legitimate interests — to keep the Service secure, prevent abuse, and troubleshoot problems.
• Consent — for any non-essential or analytics cookies, which you can withdraw at any time.

If you believe we have not handled your data properly, you may also lodge a complaint with your local data protection authority.

9. Children

The Service is not directed to children under 13 (or the age required by your local law), and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes & contact

We may update this policy from time to time; the "Last updated" date above reflects the latest changes. Questions or requests? Email us at coleto.smitty@gmail.com or visit our contact page.