Privacy You Can Understand

• Provide the service: authenticate your account, evaluate MIDI practice, maintain review schedules, save requested recordings, restore entitlements, and deliver notifications.
• Operate and improve Virtu: investigate failures, secure the service, understand feature use, and measure whether downloads and campaigns work.
• Communicate with you: answer support requests and send newsletters or waitlist updates you requested.
• Meet legal obligations: keep records or respond to valid legal requests where applicable.

Where the GDPR applies, our legal bases may include performance of a contract, our legitimate interests in operating and securing Virtu, your consent for optional marketing-site analytics and requested communications, and compliance with legal obligations. You can withdraw consent without affecting processing already carried out lawfully.

• Local practice data remains in the app's local database and recording storage until you use “Delete local practice data,” complete in-app cloud-account deletion, clear app data, or uninstall the app, subject to operating-system backups.
• Account and subscription records are kept while needed to provide the account and maintain entitlements. When cloud-account deletion completes, personal profile fields and authentication links are removed, subscription access is revoked, and the profile row is anonymized into a tombstone so retained financial and audit relationships remain valid. Related retained records may still contain limited provider transaction or refund references, refund explanations, or operator audit details where required.
• Feedback and support messages are kept while needed to review and respond to them. In-app feedback linked to your cloud account is deleted when that account is deleted, subject to temporary protected backups or legal obligations.
• Newsletter and waitlist data is kept until you unsubscribe, ask us to remove it, or the requested communication is no longer offered.
• Diagnostics, attribution, and website analytics are retained according to our configured provider settings and only as long as reasonably needed for reliability, security, and measurement.

“Delete local practice data” removes the current user's local database data and recording files from that device without deleting the Virtu cloud account. “Delete Virtu account” anonymizes the cloud profile, removes its sign-in identities, notifications and entitlements, then deletes that account's local data from the current device. We do not physically delete the backend user row because doing so would break relationships to records that must remain. The profile fields are replaced, but related financial or audit records may retain limited provider transaction or refund references, refund explanations, or operator audit details and therefore are not necessarily anonymous. Limited information may also remain where required by law, needed to establish or defend claims, or temporarily present in protected backups. See the account-deletion page for the in-app and login-independent request paths.

Providers may process information in Korea, the United States, and other countries where they operate. Where applicable law requires a transfer safeguard, we use a legally recognized mechanism or another lawful basis available for the transfer. Local privacy protections may differ by country.

• Change marketing-site analytics through Cookie settings.
• Turn off weekly practice recaps in Virtu settings, use the relevant unsubscribe link in an email, or contact us to stop email messages.
• Change push-notification permissions through Virtu or your device settings.
• Delete scores, recordings, and other device data with “Delete local practice data” while keeping the cloud account active.
• Delete your Virtu cloud account in Settings, or use our login-independent account-deletion request if you no longer have the app.
• Ask to access, correct, delete, restrict, object to, or receive a portable copy of personal information, as provided by applicable law.

Korean users may have rights to access, correct or erase personal information, and request suspension of processing under PIPA. People in the EEA or UK may have GDPR rights, and California residents may have rights under the CCPA if that law applies to Virtu. Legal exceptions can limit a request. We may verify your identity and will respond within the period required by the law that applies.

Send a request to privacy@virtu-oso.com. You may also contact the relevant privacy regulator, including Korea's Personal Information Protection Commission, an EEA/UK data protection authority, or the California Attorney General's privacy office.

Questions or privacy requests can be sent to privacy@virtu-oso.com or to Forty Two LLC at the address above.

We may update this policy as Virtu, its providers, or applicable requirements change. We will update the date above and provide additional notice when a change is material and notice is required.