Privacy Policy

Last updated: 29 October 2026

This Privacy Policy explains how Talented collects, uses, shares and retains personal data through its mobile app, talentedmusicapp.com and related services. It covers learning features, the AI music teacher, subscriptions, social features, analytics and your choices. Our Terms and Conditions explain the service and subscription agreement.

Celadonsoft, Unipessoal Lda, registered in Portugal under NIPC 517238411, is the controller of the processing described in this Policy. Its registered address is Avenida Eng. Duarte Pacheco, No. 19, Piso 1, 1070-100 Lisboa, Portugal.

For privacy requests, support, refunds and other enquiries, contact support@talentedmusicapp.com. We may need proportionate information to verify a request before disclosing or changing account data.

This Policy is an information notice. Beginning to use Talented or acknowledging this Policy does not by itself constitute consent to every processing purpose. Where a specific permission or consent is required, it must be obtained through the relevant process.

We process the data needed to provide the features you use and operate, support and improve the Service. The categories below can be supplied by you, generated through use of the app or received from sign-in and purchase providers.

• Account and profile — Examples and source: Email, authentication information, name or nickname, language, profile photo, selected teacher character and app settings. Passwords used for email registration are stored as hashes. Apple or Google sign-in supplies the account information you authorise that provider to share; a photo may be provided through a supported sign-in integration where available.
• Onboarding and learning — Examples and source: Musical level, areas of interest, practice goals and time, lesson and exercise activity, answers, mistakes, XP, levels, streaks, leagues, achievements, Talent Tree and friend connections. Streak Saver use and friend-gift events.
• AI features — Examples and source: Messages, AI replies, relevant conversation history or summaries, feedback extracted from messages, and the context described in section 4.
• Support and diagnostics — Examples and source: Support correspondence, ratings, refund requests, issue descriptions and Shake to report submissions, including user ID, relevant exercise context, device and app information, submission time and an unmasked screenshot of an eligible app screen.
• Store purchases — Examples and source: Store, transaction and subscription references, plan, price, currency, status, relevant dates and refund information. Apple and Google process the payment; Talented does not receive or store full payment card details.
• Device and usage — Examples and source: User ID, device model, operating system, app version, language, mobile carrier, IP address and approximate country, installation and app identifiers, push token, feature interactions, attribution data, performance and error information, and session recordings through the relevant tools. User IDs are sent to Firebase, AppsFlyer, Amplitude, Sentry, Clarity and Adapty. Amplitude also receives the email domain, such as gmail.com. Clarity recordings are linked to your user ID and can include any app screen, including AI chat, depending on masking settings. Android advertising identifiers (GAID) are collected by Meta, Firebase, AdMob and AppMetrica, subject to applicable permission requirements.
• Website interactions — Examples and source: Information submitted through contact forms, website pages and interactions, cookies and similar technologies, as explained in section 6.

Before registration, Talented may create a temporary profile to retain onboarding answers and progress. It can contain device language, installation identifiers and a push token linked to that installation. Temporary profiles are deleted after 30 days of inactivity. Separately stored push-token and installation-source records follow section 5.3.

Weekly leaderboards. By default, other participants can see your name, or your nickname if you have set one; profile photo; level and level frame; weekly XP; and ranking position. Leaderboards may include computer-controlled participants.

Friends. By default, friends can see your name and profile photo, level, league and streak. They can also see which lesson you are currently on through the position of your avatar on their learning map.

Your chat messages, payment information and account email are not included in the leaderboard and friend displays described above.

Visibility and controls. The leaderboard and friend displays described above are visible by default in the app. There are no in-app controls to hide your profile, restrict this visibility, opt out of leaderboards or remove a friend.

Where the GDPR applies, we use the legal bases described below. The data and controls must also meet any applicable rules for children's data. Where consent is required, it can be withdrawn without affecting earlier lawful processing.

• Create and maintain the account; provide lessons, learning progress and requested AI functionality — Legal basis under the GDPR: Performance of the service contract, subject to any separate permission required for a disclosure or device feature.
• Manage subscriptions, access, refund requests and alternative reimbursements — Legal basis under the GDPR: Performance of the contract; legal obligations for required accounting and transaction records.
• Respond to support requests and investigate bugs, abuse or security incidents — Legal basis under the GDPR: Our legitimate interests in operating a reliable and secure service; a legal obligation where applicable.
• Review statistics, errors and feedback to improve learning quality — Legal basis under the GDPR: Our legitimate interests in understanding and improving the Service, subject to users' rights and any consent required for the collection or further use concerned.
• Send progress and reminder messages by push and email, including streaks, Streak Saver, leagues, friend gifts and re-engagement reminders — Legal basis under the GDPR: Performance of a user-requested reminder function or our legitimate interests in supporting ongoing learning, as applicable; subject to communications rules and any required consent. Messages with a promotional purpose follow the marketing basis below.
• Send marketing and retention messages by push and email, including trial or subscription campaigns, reactivation offers and promotional broadcasts — Legal basis under the GDPR: Consent where required by applicable communications law. A specific existing-customer exception may apply only where the law allows it and all its conditions are satisfied.
• Send necessary account, security and individual support emails — Legal basis under the GDPR: Performance of the contract, security-related legitimate interests or a legal obligation, depending on the message.
• Optional website analytics, session recording and attribution technologies — Legal basis under the GDPR: Consent where required for storage, access to device information or the particular processing; any other use requires an applicable legal basis.
• Meet legal duties and respond to lawful requests — Legal basis under the GDPR: Compliance with applicable legal obligations.

Talented does not currently run A/B tests. Onboarding choices and learning progress are used to operate learning features and provide AI context. We also use subscription expiry and related account or learning information to time and address subscription reactivation and promotional messages, subject to the applicable communications requirements.

For these messages, relevant data can include your email address, name or nickname, subscription status and expiry, streak and XP values, the offer or promotional code and communication preferences. Depending on the message, we also use league and leaderboard events, Streak Saver status and friend-gift events.

Talented is a music education app for children and adults. Its AI assistant is configured to focus on music learning and to use language appropriate for its audience. It is an AI system and may make mistakes. The Terms and Conditions explain its limits.

We access OpenAI directly through its API. The context needed to generate a response may include the name or nickname you provide, your messages and relevant conversation history, onboarding answers and learning progress. Nicknames are checked against a word list and may also be checked using OpenAI. We limit the data sent to what is needed for the relevant AI function.

Our production OpenAI project is configured with Zero Data Retention. We do not opt in to sharing API data with OpenAI to train its general-purpose models. Talented's own retained chat history, summaries and feedback reports are separate from OpenAI's retention controls and follow section 5.

The teacher's greeting is created when you first open the chat. It uses a prepared text from our administration tools, or, if no prepared greeting is available, is generated through OpenAI. Other AI processing occurs when you use the relevant features, including nickname checks.

We analyse usage statistics, errors and feedback to understand and improve learning quality and reliability. Talented does not use user messages to train or fine-tune AI models. Access to original messages for quality review is restricted to a limited number of authorised company employees. We use aggregated or de-identified information where appropriate. Original messages may remain associated with your account.

Feedback about an app issue or exercise may be summarised and saved as a report for the team, together with relevant message and technical context. Chat messages and conversation summaries are retained until the relevant chat or progress reset, or account deletion under section 6.3; they are not automatically deleted after 30 days. Feedback extracted and stored separately is not automatically deleted when you reset chat or progress. Its retention follows section 5.3. Resetting activity does not itself delete your account.

We use the providers below for the functions listed. Providers receive information relevant to their role, subject to applicable contractual arrangements and legal requirements. Talented remains responsible for the processing obligations that apply to it.

• OpenAI — Function and relevant data: AI responses and nickname moderation; the information described in section 4.
• Apple and Google — Function and relevant data: Sign-in and store purchases; authorised sign-in information, account or transaction references and purchase status. Their own notices also apply to their respective services.
• Google Firebase — Function and relevant data: Push delivery, analytics and crash or performance functions; user ID, push tokens, installation identifiers, usage events, technical reports and, on Android, advertising identifiers (GAID), as relevant to enabled functions.
• Adapty — Function and relevant data: Subscription management and purchase offers; user ID, purchase status and relevant device information.
• AppsFlyer — Function and relevant data: App install attribution, referral or invite links and analytics events; user ID, installation identifiers, install source and relevant event data. On the website, advertising campaign attribution uses cookies and referral-source information only with the relevant cookie consent.
• Amplitude — Function and relevant data: Product analytics; user ID, feature interactions, relevant device information, mobile carrier and email domain (for example, gmail.com).
• Microsoft Clarity — Function and relevant data: Session recordings and usage analytics linked to user ID; screen interactions and technical information. Recordings can cover any app screen, including AI chat. The text visible in a recording depends on the masking settings applied in Clarity.
• Yandex AppMetrica — Function and relevant data: App analytics and crash reporting; events, technical device or crash information and Android advertising identifiers (GAID).
• Yandex Metrica — Function and relevant data: Website analytics and any enabled session recording; usage events, page interactions and technical identifiers.
• Sentry — Function and relevant data: Error monitoring; user ID, error reports and associated technical context.
• Meta SDK — Function and relevant data: App event measurement; installation, launch or activation, session-time and possible subscription purchase events, device and app information, and identifiers as detailed below.
• Slack — Function and relevant data: Internal notifications for submitted app bug reports; user ID, description, screenshot, relevant exercise context, device and app information, and submission time.
• Google Analytics — Function and relevant data: Website statistics; permitted cookies or similar identifiers, page interactions and approximate location.
• File storage and CDN: DigitalOcean / Cloudflare — Function and relevant data: Profile photos and report screenshots. The provider depends on infrastructure deployment and migration status; Cloudflare receives these files only where its storage or delivery services are enabled.
• Email delivery and mailbox providers — Function and relevant data: Email address, name and message content needed to deliver messages or handle support correspondence. Google Workspace (Gmail) processes these data where used for delivery or the support mailbox.
• Hetzner — Function and relevant data: Servers and databases; the service data hosted in its infrastructure, including the categories described in section 2.
• Uptrace — Function and relevant data: Server logging and monitoring; technical request logs.
• Google AdMob — Function and relevant data: Advertising SDK processing, including the Android advertising identifier (GAID).

Meta SDK data. The SDK collects installation, app launch or activation events and time spent in the app; device model, operating system and version, app version, language, time zone, screen size, mobile carrier and IP address; and an SDK-generated app-scoped identifier. Automatic events may also include subscription purchase events, such as product, price and currency. On Android, it collects the advertising identifier (GAID). On iOS, the advertising identifier (IDFA) is collected only if you allow tracking in the Apple ATT prompt.

As configured in Talented, this Meta SDK integration does not collect names, email addresses, Facebook login data, lesson content or chat messages.

Shake to report. This optional bug-reporting feature is enabled by default. You can disable it in Settings > General using Shake to report a bug. On an eligible screen, a qualifying shake temporarily captures a screenshot before the Yes/No confirmation asking whether you want to leave a report. Choosing Yes opens the report form. The report form states that a screenshot of the current app screen is attached and shows it as a thumbnail. The report and screenshot stay on your device until you press Submit; only then are they sent. Cancelling without submission discards both. Declining or dismissing the initial reporting prompt also discards the temporary screenshot.

A submitted report includes your user ID, the description you enter, the screenshot, device model, operating system name and version, app version and submission date and time. For an exercise, it also includes the relevant unit, lesson and exercise, or Talent Gym category, step and exercise.

Screenshots are not automatically blurred, masked or redacted; any text, images or personal information visible on an eligible screen may be included. Avoid submitting unnecessary sensitive information or information about other people.

Shake capture is disabled on email sign-in and registration screens, verification code screens, password recovery, reset, creation and change screens, subscription offers and paywalls, subscription management screens, and associated payment screens, including store payment sheets opened from those screens. No screenshot is taken through this feature on these excluded screens.

Submitted reports are available in our admin panel and are sent to a restricted internal Slack channel used to investigate app bugs. Authorised administrator and designated content-management roles can view and delete reports in the admin panel. Authorised members of the internal bug-reporting channel, including support, product and testing staff, can view the report notifications and attachments. Deleting a report from the admin panel deletes that report and its screenshot file; it does not automatically delete the Slack message. Reports are not subject to automatic 30-day deletion. After account deletion, retained reports are unlinked from the account; this does not necessarily remove personal information included in the report or screenshot.

We may also disclose information where lawfully required, to establish or defend legal rights, or as part of a lawful business transfer subject to appropriate safeguards and any required notice.

Our primary service data are hosted in Germany, within the EU. Authorised company personnel access data from Poland and Portugal. We use encryption in transit and at rest. Access is restricted according to the responsibilities of authorised personnel.

Some provider processing takes place outside the European Economic Area (EEA), including in the United States through OpenAI, Google (including Firebase and AdMob), Amplitude, Sentry, Microsoft Clarity, Meta, Slack, AppsFlyer and Adapty, and through Cloudflare where enabled for file storage or delivery. Processing in Russia takes place through Yandex AppMetrica and Yandex Metrica. The categories and purposes of provider processing are described in sections 2 to 5.1.

International transfers are subject to the safeguards required by applicable law. For transfers from the EEA, these may include a European Commission adequacy decision, including the EU–US Data Privacy Framework where the specific US recipient and processing are covered, or appropriate safeguards such as the European Commission's standard contractual clauses (SCCs). Russia is not covered by an EU adequacy decision. Transfers to recipients there require another applicable transfer mechanism and any necessary supplementary measures. Contact support@talentedmusicapp.com for information about the safeguards applicable to your data.

No online service can guarantee absolute security.

The list below distinguishes automatic deletion periods from records that currently have no automatic expiry. Some records are retained separately from core account data. Their purposes, retention criteria and deletion effects are described below. You can contact support@talentedmusicapp.com about deletion; the rights and applicable exceptions in section 7.2 continue to apply.

• Unverified email registration — Retention or deletion rule: Deleted after one hour if unverified and inactive.
• Temporary profile before registration — Retention or deletion rule: Deleted after 30 days of inactivity. Separately stored push-token and installation-source records follow the rule below.
• Registered account profile and learning progress — Retention or deletion rule: Retained while the account is maintained and during its recovery window. An existing signed-in session may remain valid for up to 24 hours after confirmation of deletion; the current weekly leaderboard entry may remain until the week ends, for up to 7 days. Recovery ends at the end of the UTC day falling 30 calendar days after the UTC confirmation date, when core account data are permanently deleted without an additional waiting period. Separately retained records and backups follow the rules below.
• AI messages and conversation summaries — Retention or deletion rule: Retained until the relevant chat or progress reset, or account deletion under section 6.3. There is no automatic 30-day deletion. Separately extracted feedback follows the next rule.
• Feedback extracted from chat — Retention or deletion rule: Stored separately for investigating reported issues and analysing product quality. Not automatically deleted when chat or progress is reset. No fixed automatic expiry currently applies.
• Support correspondence — Retention or deletion rule: Retained to handle the enquiry, related follow-up and any associated dispute. The mailbox does not currently apply automatic 30-day deletion. Refund correspondence needed for transaction, accounting or legal duties follows the separate purchase and accounting rule below.
• Bug reports and screenshots — Retention or deletion rule: No fixed automatic expiry currently applies. Reports are retained for bug investigation, issue tracking and product-quality analysis. Deleting a report in the admin panel deletes that report and its screenshot file, but does not automatically remove the Slack message. After account deletion, retained reports are unlinked from the account; personal information within the report or screenshot may remain.
• Technical logs — Retention or deletion rule: 30 days.
• Analytics data — Retention or deletion rule: Up to 14 months.
• Backup copies — Retention or deletion rule: Kept for 7 days before expiry. Deleted service data may remain in existing backups until those backups expire.
• Purchase, refund and accounting records — Retention or deletion rule: For the period required by applicable tax, accounting and other legal obligations, with access limited to the retained purpose.
• Preference, permission and unsubscribe records — Retention or deletion rule: For as long as needed to respect the choice and meet applicable evidential or legal obligations.
• Push-token and installation-source records — Retention or deletion rule: These separately stored technical records are not currently removed automatically when an account is deleted and have no fixed automatic expiry. They are separate from the core account deletion process described above.

Talented sends necessary account and security messages and individual support replies by email, including verification codes, password reset messages, and account deletion and recovery messages. Optional notification preferences do not turn off these necessary service emails. Payment receipts and billing notices are sent by the store handling your purchase, Apple or Google, under its own arrangements. Optional messages cover learning progress and promotional offers. They can be delivered by push with an email copy, subject to the relevant delivery permission and available preferences. Their content falls into the following groups; the controls available in your version of the app determine how you can manage them.

• Progress & reminders. Messages about streaks and Streak Saver, league events and leaderboard positions, gifts from friends, and reminders to resume learning after inactivity.
• Offers & rewards. Marketing and retention messages, including promotional sequences associated with trials, subscriptions or inactivity, subscription reactivation offers and promotional broadcasts sent through our administration tools.

Use the controls available under Notifications in the app to manage optional communications. The unsubscribe link in an optional email stops all optional emails, including both Progress & reminders and Offers & rewards. Necessary service emails continue separately. Push delivery also depends on your device notification permission.

During onboarding on iOS and Android, the app offers daily learning reminders and an Enable notifications option. On iOS and Android 13 and later, the system asks permission to send notifications. On Android 8–12, notifications are allowed by default at system level and can be turned off in device settings. You can manage notifications in device settings and the app's available settings. System notification permission is separate from email preferences, app tracking and any consent needed for promotional messages.

Request deletion in Settings > General > Delete account or by emailing support@talentedmusicapp.com. We may verify the request. Once you confirm deletion, your account is marked for deletion. An existing signed-in session may continue to work for up to 24 hours, and your entry may remain on the current weekly leaderboard until that week ends, for up to 7 days. Your account remains recoverable until the end of the UTC calendar day that falls 30 calendar days after the UTC date on which you confirm deletion. Core account data are permanently deleted when that recovery window ends, without an additional waiting period. Separately retained records, technical identifiers and backup copies follow section 5.3. Contact support with questions about account recovery. Account deletion is separate from store subscription cancellation and a refund request; see section 6.4 of the Terms.

Registered accounts are not automatically deleted solely for inactivity. Unverified registrations and temporary profiles follow the confirmed periods in section 5.3.

Strictly necessary technologies support essential website functions. Optional analytics and other non-essential technologies remain inactive until you make the relevant consent choice where consent is required. The banner offers Accept all, Reject optional and Manage preferences. Optional categories can be selected separately. You can reopen Cookie settings to change or withdraw your choice. Refusing optional technologies does not prevent use of the essential website functions.

Optional website analytics and attribution can use Google Analytics, Yandex Metrica and AppsFlyer, subject to the consent choice described above. Information about specific cookie providers and durations can be requested from support@talentedmusicapp.com. App analytics and attribution also remain subject to applicable device, consent and children's privacy requirements. Agreeing to the Terms or merely visiting the site does not supply any required consent for optional technologies.

On iOS, Talented may display a separate App Tracking Transparency dialog about tracking activity across other companies' apps and websites. You can allow or decline the request and change the choice in Settings > Privacy & Security > Tracking. This choice is separate from notification permission, email preferences and any permission needed for AI processing.

Talented serves a mixed audience, including children and adults. Its content and AI assistant are designed around music education and language appropriate for that audience. The current app uses a common account flow and does not have separate child or parent accounts. OpenAI Zero Data Retention is used as described in section 4.

A parent or guardian with a question about a child's data can contact support@talentedmusicapp.com. We will review the request and take the steps required by applicable law, using proportionate verification where needed.

Depending on applicable law, you may request access to, correction or deletion of personal data, restriction of processing, a portable copy of relevant data and an objection to processing based on legitimate interests. Where processing relies on consent, you can withdraw that consent without affecting earlier lawful processing. These rights are subject to the conditions and exceptions in the applicable law.

Contact support@talentedmusicapp.com to exercise a right. For GDPR requests, we normally respond within one month; where a lawful extension is needed, we explain it within the initial period. Requests are normally free, subject to lawful exceptions. Necessary account verification is proportionate to the request.

You may complain to a competent data protection authority, including Portugal's Comissão Nacional de Proteção de Dados at https://www.cnpd.pt, or the authority available to you under applicable law.

We may update this Policy when processing or legal requirements change. The date above identifies the latest revision. We will provide any additional notice and obtain any new permission required for a material change; publication of an update alone does not create such permission.

For all privacy requests and questions, email support@talentedmusicapp.com or write to Celadonsoft at the address in section 1.