Managed Learner Child-Data Notice
Managed Learner Child-Data Notice
Version managed-learner-2026-10-14-v1. This notice applies to a school-sponsored MusiCurate learner under 13 after the required school or verified guardian authorization is recorded. A purchase, seat assignment, school label, pending request, or parent link alone does not authorize a child.
Who provides the service and authorizes access
MusiCurate Inc. provides the managed educational account. A signed-in adult administrator authorized to act for a named school may explicitly attest to that learner's educational use after reviewing this notice. A guardian may use a separately verified authorization process. An authorization applies only to the named learner, organization, notice, and educational scope. It expires no later than one year after attestation or the end of the current paid organization term, can be revoked sooner, and may be reused for class or seat changes while valid.
Information used
We use account identifiers and sign-in details, declared birth year or age band, display name and profile choices, school and class relationships, seat assignment, assigned work, course and practice progress, and learning activity. Shared learning activity may include activity type, dates and duration, surface and instrument, skill tags, structured evidence, and limited metadata. Optional features may include game results, annotations, credential evidence, microphone-derived measurements, or recordings and images the learner chooses to upload. Camera, photo, microphone, and notification permissions are requested when a feature needs them.
Purpose, school access, and providers
We use this information to sign the learner in, deliver school-sponsored learning, manage seats, show assignments and progress, maintain service integrity, and answer support and data requests. Authorized teachers and school administrators can see the roster, assignments, and learning records needed for their classes. The learner and authorized support staff can access applicable records. This authorization does not enable consumer purchases, public profiles, public discovery or social features, direct messaging, or advertising use. We do not sell learner data or share it with advertisers.
Supabase hosts accounts, database records, and content for MusiCurate. Adult institutional payments use Shopify; sponsored learners do not provide card details for this access. Data may be processed in Canada and countries where service providers operate, including the United States, under contractual safeguards and subject to applicable lawful access. Optional YouTube, Spotify, and Apple Music embeds have their own data practices and policies.
Retention
Account and ordinary learning data remain while the account is active, subject to access and deletion requests and necessary security, audit, or legal retention. Device data remains until deleted or the app is removed. Uploaded teacher-review media is normally removed after up to 90 days; withdrawing a submission shortens its media-retention period to no more than seven days. If credential features are used, one-time activity attempts are normally kept up to 90 days, structured evidence up to three years before redaction, and integrity events up to two years; minimal issuance or audit history may remain where needed. Authorization and request records remain while the child and organization accounts remain unless deleted or a retention obligation applies. Revoking educational access stops class and seat use; it does not itself erase historical records.
Review, correction, revocation, and deletion
A school administrator or verified guardian can request review, correction, revocation, or deletion through Managed Learner Access in the app or by emailing music@musicurate.com. Revoking a school authorization immediately pauses that school's class and sponsored-seat access. A deletion request starts a reviewed process. A signed-in account can also use Settings → Delete all my data, which removes or anonymizes server data and deletes local data, subject to necessary security, audit, and legal retention. We may verify a requester's authority before disclosing or deleting a child's information and normally respond within 30 days in Canada. You may also contact the applicable privacy regulator.
Privacy contact: MusiCurate Inc., music@musicurate.com, PO Box 23168, Grande Prairie, AB, Canada T8V 6X2.