Privacy Policy for Octero

Last updated: April 2026

At Octero (‘App’), we are committed to protecting your privacy as a user of our App and services. We use the information we collect about you to provide and improve our services. We respect the privacy and confidentiality of the information provided by you and adhere to the Australian Privacy Principles, the Privacy and Data Protection Act 2014 (Vic) and the Education and Training Reform Act 2006 (Vic). Please read our privacy policy below carefully.

INFORMATION WE COLLECT FROM YOU

Any information you enter through our App, on our website or give us in any other way, from time to time, is protected by our secure server or a third party on our behalf using an approved secure server. You may provide basic contact information such as: your name, company or school name, email address, telephone number, billing address, geographic location, IP address, survey responses, support queries and social media handles to enable us to process your order or access our services (together ‘Personal Data’).

When you use our App, we also collect:

  • Practice session data: instrument played, session duration, timestamps, and audio recordings (only when you actively initiate recording)
  • Account data: authentication details provided through Google, Apple, or Facebook login
  • Age range: the age category you select during signup (e.g. 13-17, 18-24). We do not collect your exact date of birth.
  • Device information: device type, operating system version, and app version for crash reporting and troubleshooting

At no time does our App record any information or audio whilst not in use. The App will only record audio when it is instructed by the user to do so.

CHILDREN’S PRIVACY

Our App requires users to be 13 or older to create an account. Users under 13 cannot sign up through the consumer app.

Users aged 13-17: Accounts for users aged 13-17 are set to private by default. We do not serve advertising to users under 18. We limit the personal information shared with analytics services for users under 18 to non-identifying data only (user ID without name, email, or profile picture).

Managed members (school use): Users under 13 may use our App when invited by an educational institution or music teacher through our managed member feature. In this case, the institution is responsible for obtaining appropriate parental or guardian consent prior to the student’s use of the App, as required by our Terms of Service. Managed members’ profiles are isolated within their group and not visible to other users.

Parents and guardians: If you believe your child has created an account without appropriate consent, please contact us at privacy@octero.app and we will delete the account promptly.

We comply with the Australian Children’s Online Privacy Code, the U.S. Children’s Online Privacy Protection Act (COPPA), and applicable international child privacy regulations.

HOW WE USE YOUR INFORMATION

Personally Identifiable Information: We use the information we collect to deliver our services to you, including: communicating with you, providing technical support, notifying you of updates and offers, sharing useful content, measuring customer satisfaction, diagnosing problems and providing you with a personalised App experience.

Non-Personally Identifiable Information: We also use the information we collect in aggregated and anonymised forms to improve our services, including: administering our App services, producing reports and analytics, advertising our products and services, identifying user demands and assisting in meeting customer needs generally.

THIRD-PARTY SERVICES

We use the following third-party services to operate and improve the App. Each service receives only the data necessary for its function:

ServicePurposeData sharedCountry
Amazon Web Services (AWS)Hosting, data storage, content deliveryAll app data (encrypted at rest and in transit)United States
Auth0 (Okta)User authenticationEmail, name, login credentialsAustralia
AmplitudeProduct analyticsUser ID, app usage events. For users under 18: user ID only (no name, email, or picture).United States
RudderStackAnalytics data pipelineUser ID, app usage events. For users under 18: user ID only.United States
Firebase / Google AnalyticsCrash reporting, app performanceUser ID, device info, crash logsUnited States
Customer.ioTransactional and marketing communicationsUser ID, email, nameUnited States
Google AdMobAdvertisingDevice identifiers, ad interaction data. Not served to users under 18.United States
RevenueCatSubscription managementUser ID, purchase historyUnited States
BranchDeep linking and attributionDevice identifiers, link click dataUnited States
AlgoliaUser searchName, profile picture, instrument, countryUnited States

We do not sell or deal in Personal Data. Our contracts with third-party services prohibit them from using your data for any purpose other than providing their service to us.

ADVERTISING AND TRACKING

Advertising: We display ads to users aged 18 and over through Google AdMob. Users under 18 do not see ads.

App Tracking Transparency (iOS): On iOS devices, we request your permission before allowing advertising networks to track your activity across other apps and websites, in accordance with Apple’s App Tracking Transparency framework. You can change this setting at any time in your device’s Settings under Privacy & Security > Tracking.

Advertising Identifier: On Android, we collect the Android Advertising ID for ad personalisation for users aged 18 and over. Users under 18 do not have their Advertising ID collected.

You may opt out of personalised advertising through your device settings at any time.

STORAGE AND SECURITY OF YOUR INFORMATION

We will use all reasonable means to protect the confidentiality of your Personal Data while in our possession or control. All information we receive from you is stored and protected on our secure servers from unauthorised use or access. All data is encrypted at rest (AES-256) and in transit (TLS/HTTPS). Subscription payments are handled entirely by Apple and Google through their respective app stores — we do not collect or store any payment information.

To enable us to deliver our services, we may transfer information that we collect about you, including Personal Data, to countries other than Australia for storage and processing. Your data is primarily stored in the United States (AWS us-east-1 region). If your Personal Data is transferred and processed outside Australia, it will only be transferred to countries or services that have adequate privacy protections.

We retain your Personal Data for as long as needed to provide services to you and as otherwise necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

In the event there is a breach of our security and your Personal Data is compromised, we will promptly notify you in compliance with the applicable law, including the Australian Notifiable Data Breaches scheme.

YOUR RIGHTS

You have the right to:

  • Access your Personal Data that we hold
  • Correct inaccurate Personal Data
  • Delete your account and all associated data
  • Export your Personal Data in a portable format
  • Opt out of marketing communications
  • Withdraw consent for data processing where consent is the basis

To exercise any of these rights, contact us at privacy@octero.app. We will respond within 30 days.

To delete your account and all associated data, email deletion.request@octero.app. Deletion will be completed within 30 days and includes removal of your data from all third-party services listed above.

For California residents (CCPA/CPRA): You have the right to know what personal information we collect, request its deletion, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, contact privacy@octero.app.

For UK and EU residents (GDPR): The lawful basis for processing your data is: consent (for analytics and marketing), contractual necessity (for providing the service), and legitimate interest (for security and fraud prevention). You may lodge a complaint with your local data protection authority.

For New Zealand residents: Your data is handled in accordance with the New Zealand Privacy Act 2020 and the Information Privacy Principles.

For Canadian residents (PIPEDA): We comply with the Personal Information Protection and Electronic Documents Act. Marketing communications require your explicit opt-in consent in accordance with Canada’s Anti-Spam Legislation (CASL).

COOKIES AND PIXELS

A cookie is a small file placed in your App or web browser that collects information about your browsing behaviour. Use of cookies allows an App and website to tailor its configuration to your needs and preferences. Cookies do not access information stored on your device or any Personal Data (e.g. name, address, email address or telephone number). Most browsers automatically accept cookies but you can choose to reject cookies by changing your web browser settings. This may, however, prevent you from taking full advantage of our website.

Our website uses cookies to analyse website traffic, provide social media sharing and liking functionality and help us provide a better website visitor experience. In addition, cookies and pixels may be used to serve relevant ads to website visitors through third party services such as Google Adwords and Facebook Adverts. These ads may appear on our website or other websites you visit.

SHARING YOUR INFORMATION WITH THIRD PARTIES

We do not and will not sell or deal in Personal Data or any customer information.

Your Personal Data details are only disclosed to third party suppliers when it is required by law, for goods or services which you have purchased, for payment processing or to protect our copyright, trademarks and other legal rights. To the extent that we do share your Personal Data with a service provider, we would only do so if that party has agreed to comply with our privacy standards as described in this privacy policy and in accordance with applicable law. Our contracts with third parties prohibit them from using any of your Personal Data for any purpose other than that for which it was shared.

DISCLOSURE OF YOUR INFORMATION

We may from time to time need to disclose certain information, which may include your Personal Data, to comply with a legal requirement, such as a law, regulation, court order, subpoena, warrant, in the course of a legal proceeding or in response to a law enforcement agency request. Also, we may use your Personal Data to protect the rights, property or safety of Octero, our customers or third parties.

If there is a change of control in one of our businesses (whether by merger, sale, transfer of assets or otherwise) customer information, which may include your Personal Data, could be transferred to a purchaser under a confidentiality agreement. We would only disclose your Personal Data in good faith and where required by any of the above circumstances.

Our App and website may contain links to other websites. These links are meant for your convenience only. Links to third party websites do not constitute sponsorship or endorsement or approval of these websites. Please be aware that we are not responsible for the privacy practices of such other websites. We encourage our users to be aware, when they leave our App or website, to read the privacy statements of each and every App and website that collects personally identifiable information. This privacy policy applies solely to information collected by this App and website.

CHANGE IN PRIVACY POLICY

As we plan to ensure our privacy policy remains current, this policy is subject to change. We may modify this policy at any time, in our sole discretion and all modifications will be effective immediately upon our posting of the modifications on this website. Please return periodically to review our privacy policy.

CONTACT US

If you have any questions or concerns at any time about our privacy policy or the use of your Personal Data, please contact us at privacy@octero.app and we will respond within 48 hours.