Privacy Policy

• Provide the service: sign you in, analyze MIDI practice, divide scores into practice passages, maintain review schedules, synchronize cloud backups and shared recordings, verify subscriptions and restore purchases, moderate community content, and send notifications.
• Operate and improve Virtu: diagnose errors, keep the service secure, understand how features are used, improve practice analysis and recommendations, and measure campaign and download performance.
• Communicate with you: respond to support inquiries, send the weekly practice recap email, and deliver essential account and billing notices.
• Comply with legal obligations: retain transaction and dispute records as required by law and respond to valid legal requests.

Where the GDPR or UK GDPR applies, our legal bases are performance of a contract with you, our legitimate interests in operating, securing, and improving Virtu, your consent for optional website analytics and ad measurement, tracking in the iOS app, and marketing emails, and compliance with legal obligations. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Recipient:

Google LLC (Google Ads), passed on by AppsFlyer Ltd. as our service provider

Information:

Advertising identifier (advertising ID on Android, IDFA on iOS), the app install, and app activity (sign-in, onboarding completed, keyboard connected, first practice completed, trial started, subscription purchased or restored) with their times, the amount and currency the store charges, including a trial’s conversion to paid and renewals, and device and app information

How it is collected:

The AppsFlyer SDK in the Android app, and in the iOS app once you allow tracking, collects it automatically, RevenueCat sends AppsFlyer what the store charges, and AppsFlyer sends it to Google Ads

Purpose:

Measuring how our ads perform and helping them reach more people who play piano

Retention:

Until you delete the advertising ID on Android or turn tracking off on iOS, or the processing contract ends; information already sent to Google is kept under Google’s privacy policy

How to refuse:

On Android, search for “Ads” in your device settings and choose “Delete advertising ID”; the app sends no advertising identifier after that. On iOS, choose “Ask App Not to Track” when the app asks, or turn off Virtu in Settings › Privacy & Security › Tracking; nothing more is sent to Google after that. Information already sent is not deleted.

• Practice data in the installed app stays on your device until you use “Delete data from this device,” complete account deletion in the app, clear app storage, or uninstall the app. Operating-system backups on your device or cloud account may retain copies until those backups rotate.
• Plus cloud continuity backups stored online are kept while your Plus subscription is active and deleted 90 days after Plus ends. We notify you in advance before deleting them, and they are kept if you restart Plus before the 90-day period expires. Deleting cloud backups does not delete your account or data stored on your devices.
• Account data is kept until you delete your account. When you delete your account, we delete or anonymize it immediately: your name and email address are replaced, your profile photo is cleared, and files stored in our object storage are deleted shortly afterward. Copies remaining in encrypted database backups expire automatically within 30 days. Sign-in session records (IP address and user agent) are deleted 30 days after the session expires (at most about four months after sign-in). Even after account deletion, purchase and refund records are retained for 5 years from the purchase or refund date as required by Korea’s Act on the Consumer Protection in Electronic Commerce, and then deleted. Posts (including performances shared in them), comments, and reviews you posted in the community remain attributed to a deleted member after account deletion; please delete them before deleting your account if you want them removed. Usage and practice records used for service statistics and research to improve practice features, together with your sign-up country, are pseudonymized so they cannot identify you and are retained only for those purposes.
• In-app feedback and score error reports are kept to improve the service; when you delete your account, they are unlinked from your account and email address. Support cases and email conversations (including original messages sent to support@virtu-oso.com or privacy@virtu-oso.com) are consumer complaint and dispute records under Korean law: even after account deletion, they are retained with your contact details for 3 years after the case is resolved so we can verify the requester, and then deleted. Community abuse report records are retained after account deletion; your block list is deleted.
• The weekly practice recap email uses your account email address and summary data from your practice records (such as days practiced and progress). Your email address and email preferences are kept until you delete your account, and delivery logs for the weekly recap are kept for 90 days. Practice records used for reminders and summaries are deleted when you delete your account; records used for statistics and research are pseudonymized as described above.
• Server logs and product-event streams are kept for 90 days. Sentry retains diagnostic data for up to 90 days, Google Analytics retains website analytics data for up to 14 months, and Microsoft Clarity retains session replays for up to 30 days and aggregated website data for up to 13 months. AppsFlyer retains attribution data, and Ahrefs website analytics data, until the processing contract ends.

When you delete your Virtu account, we delete or anonymize your account details and unlink your Google and Apple sign-in connections; Apple sign-in access is revoked automatically. To also remove Virtu from your Google account’s connected apps, use Google’s third-party access settings. Records required by law are retained only for the statutory period. See the account-deletion page for details about deleting in the app or by email.

When a retention period expires or the processing purpose is fulfilled, we destroy the personal information without delay: database records are permanently deleted or irreversibly anonymized, files in object storage are permanently deleted (no prior versions are kept), and logs expire automatically. Encrypted database backups are kept solely for disaster recovery and expire automatically within 30 days of creation, so data deleted or anonymized in the live database may remain in an encrypted backup for up to 30 days. If we ever restore from a backup, we re-apply every account deletion completed after that backup was created. Records retained under a statutory obligation are stored separately for that legal purpose only and destroyed when the statutory period ends.

• Change your website analytics and ad measurement preferences at any time through Cookie settings.
• Delete the advertising ID on Android at any time by searching for “Ads” in your device settings, and change whether the iOS app may track you at any time in Settings › Privacy & Security › Tracking.
• The weekly practice recap email is enabled by default; you can turn it off at any time using the “Weekly practice email” toggle in Virtu settings or the unsubscribe link in any recap email. Transactional account and billing notices cannot be turned off.
• Turn push notifications on or off in Virtu settings or in your device’s system settings.
• Choose “Delete data from this device” in the app’s Settings to clear local practice data without deleting your Virtu account.
• Delete your Virtu account in the app or request deletion by email through the account-deletion page.
• Request access, correction, deletion, suspension of processing, withdrawal of consent, or data portability by emailing privacy@virtu-oso.com.

We may verify your identity before fulfilling a request. We respond within the timeframe required by applicable law and may keep a minimal record of the request and response to demonstrate compliance.

If you have a privacy concern, please contact privacy@virtu-oso.com first. You may also contact Korea’s Personal Information Protection Commission or the California Attorney General.

If you are in Korea and need assistance with a privacy dispute or infringement report, you may contact the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Supreme Prosecutors’ Office (www.spo.go.kr, 1301), or the Korean National Police Agency (ecrm.police.go.kr, 182).

For privacy questions or requests, email privacy@virtu-oso.com. We review requests on business days and may verify your identity before responding.

Privacy Officer: Forty Two LLC Privacy Team (privacy@virtu-oso.com) handles privacy inquiries, complaints, and requests to exercise your rights.

We may update this policy as Virtu evolves or legal requirements change. Material changes will be announced through the app or website with any advance notice required by applicable law.