We use cookies for essential functionality and, with your consent, analytics to improve KitsuBeat. Cookie Policy
Version 1.0.0 · Effective 2026-XX-XX
When you sign up we ask for your email address and date of birth. We use your email to send you important messages about your account. We use your date of birth to make sure the app is set up safely for younger learners.
We track which songs and lessons you have completed so we can show you your progress. We do not sell your information to anyone. We do not show you adverts. We do not share your data with social networks.
You can ask us to delete your account and all your data at any time by emailing [email protected].
KitsuBeat is the data controller for personal data collected through this Service. We are registered with the UK Information Commissioner’s Office (ICO).
ICO Registration Number: [ZB000000 — to be inserted before Phase 19 launch]
We collect the following categories of personal data:
We use your personal data to:
We use cookies to operate the Service and, with your consent, to collect analytics data. For a full list of cookies we set, see our Cookie Policy.
We do not sell your personal data. We share data only with the following service providers who process it on our behalf:
All processors operate under Data Processing Agreements and are required to handle your data in compliance with UK GDPR.
We retain your account data for as long as your account is active. After account deletion, we retain anonymised aggregate data (no personal identifiers) indefinitely for service improvement. Error logs are retained for 90 days. Cookie consent records are retained for 3 years as required by PECR.
You may request deletion of your personal data at any time (see Section 7).
Under UK GDPR, you have the following rights:
To exercise any of these rights, contact us at [email protected]. We will respond within one calendar month.
We use PostHog for product analytics. PostHog tracking is disabled by default and only activates after you explicitly accept analytics cookies via the cookie consent banner. You can withdraw this consent at any time by clearing the kb_consent cookie from your browser settings and refreshing the page.
KitsuBeat uses the following AI systems. No automated decisions with legal or similarly significant effects are made solely by these systems:
For more details on AI use, see our AI Transparency & Disclosure page.
KitsuBeat is designed to be used by learners aged 13 and over. We comply with the UK Age Appropriate Design Code (AADC) for users aged 13–17.
Users aged 13–17 (“minor users”) receive the following default protections at sign-up:
When a minor user turns 18, their account is automatically transitioned: the is_minor flag is set to false by a scheduled process. Minor privacy settings are not changed automatically — users can update their own settings after turning 18.
A Data Protection Impact Assessment (DPIA) has been conducted for minor user processing and is available to supervisory authorities on request.
We do not knowingly collect personal data from users under 13. If we discover that a user under 13 has registered, we will delete their account and all associated data within 72 hours.
Some of our service providers (including Anthropic, Vercel, and PostHog) process data in the United States. These transfers are conducted under appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the UK ICO. Where providers hold EU-US Data Privacy Framework certification, we rely on that adequacy decision for EEA transfers.
For privacy questions or to exercise your data subject rights:
Data Protection contact: [email protected] [operator alias — configure before Phase 19 launch]
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint.
De acordo com a Lei Geral de Proteção de Dados (LGPD — Lei nº 13.709/2018), informamos o seguinte aos usuários localizados no Brasil:
Coletamos endereço de e-mail, data de nascimento, dados de progresso de aprendizagem, histórico de revisão de cartões e registros de consentimento de cookies. Não coletamos dados sensíveis conforme definido pelo artigo 5º, inciso II da LGPD.
O tratamento dos seus dados pessoais é realizado com base nas seguintes hipóteses legais previstas na LGPD:
Em conformidade com o artigo 14 da LGPD, o KitsuBeat não realiza qualquer forma de publicidade comportamental ou perfilização de usuários com idade inferior a 18 anos. Usuários com 13 a 17 anos recebem configurações padrão de privacidade reforçadas no momento do cadastro. Não coletamos dados de crianças com menos de 13 anos.
Nos termos do artigo 18 da LGPD, você tem os seguintes direitos:
Para exercer seus direitos, entre em contato pelo e-mail [email protected]. Responderemos dentro de 15 dias úteis.
Os dados pessoais são retidos enquanto a conta estiver ativa. Após a exclusão da conta, dados anonimizados podem ser mantidos para fins estatísticos. Registros de consentimento são mantidos por 3 anos.
O responsável pelo tratamento de dados do KitsuBeat pode ser contatado pelo e-mail [email protected] [alias do operador — configurar antes do lançamento na Fase 19].
Caso não esteja satisfeito com nossa resposta, você pode contatar a Autoridade Nacional de Proteção de Dados (ANPD) pelo site gov.br/anpd.