Privacy Policy
Effective Date: October 1, 2026
Hana Mele is operated by Imaginary Productions LLC ("we", "us", "our").
This policy explains what data we collect, why we collect it, and what we do with it. The short version: your data is yours, we only collect what we need to make the app work, and we don't sell or share your information with anyone.
Our Philosophy
You own your data. We're just holding it for you.
What We Collect
Information You Provide
- Account information: Email address, name, timezone, and language preference.
- Practice data: Songs, artists, practice sessions, instruments, setlists, and related notes.
- Preferences: Your app settings and practice goals.
- Payment information: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number.
Information Collected Automatically
- Usage data: Counts of visits to our public pages, so we know which ones people find useful. See Analytics below for exactly what this is and is not.
- Device information: Browser type, operating system, and device type for troubleshooting and compatibility.
- Log data: Server logs that may include IP address, timestamps, and error information.
What We Do NOT Collect
- We do not collect location data.
- We do not collect contacts or address book information.
- We do not record audio unless you explicitly use a recording feature (future).
- We do not use cookies for analytics or advertising.
- We do not build a profile of you, follow you across other websites, or attempt to identify you as an individual visitor.
How We Use Your Data
We use your data solely to:
- Provide and improve Hana Mele.
- Authenticate your account.
- Process payments (via Stripe).
- Send transactional emails (password resets, account notifications).
- Respond to support requests.
That's it.
What We Do NOT Do
- We do not sell your data.
- We do not share your data with advertisers.
- We do not share your data with third parties, except as required to operate the service (see below).
- We do not use your data to train AI models.
- We do not profile you for marketing purposes.
Third-Party Services
We use a limited number of third-party services to operate Hana Mele:
| Service | Purpose | Data Shared |
|---|---|---|
| Amazon Web Services (AWS) | Hosting and storage | All app data (encrypted) |
| AWS Cognito | Authentication | Email, password (hashed) |
| Stripe | Payment processing | Email, payment method |
| Email provider | Transactional emails | Email address |
| Plausible Analytics | Counting visits to our public pages | Page address, referrer, browser, operating system, device type, country |
These providers are bound by their own privacy policies and data processing agreements.
Analytics
We use Plausible Analytics to count visits to our public pages. We chose it because it was built to answer "how many people came, and from where" without the usual cost to the people being counted.
What that means in practice:
- No cookies. Nothing is stored on your device, so there is nothing to consent to and nothing to clear.
- No identifier that follows you. Plausible does not store IP addresses and does not assign you an ID that persists from one day to the next, so we cannot recognise you as a returning visitor, build a profile, or follow you to another site.
- Aggregate only. We see counts — which pages were visited, which site sent people to us, roughly where in the world they were, what kind of browser and device. We never see who.
- No connection to your account. Analytics data is not joined to your Hana Mele account, your practice data, or anything else we hold about you.
Where it does not run
Analytics runs only on our public pages: the marketing site, the help centre, these policies, and published band pages.
It deliberately does not run on pages reached by a personal link from an email — unsubscribing, verifying an account, and accepting an invitation. The addresses of those pages carry a code meant only for you, and we would rather not hand that to anyone else, even in passing.
It also does not run inside the application itself. What you do while signed in is between you and your account.
Data Retention
- Your data is retained as long as your account is active.
- If you delete your account, all your data is permanently deleted.
- Backups may retain data for up to 30 days after deletion.
Data Export
You can export all your data at any time from the Settings page. The export includes your songs, practice history, instruments, setlists, and settings in standard formats (CSV).
Data Security
We take reasonable measures to protect your data:
- All data is transmitted over HTTPS.
- Data is encrypted at rest.
- Access to production systems is restricted and logged.
- We use industry-standard authentication (AWS Cognito).
No system is perfectly secure, but we do our best.
Your Rights
Depending on your location, you may have the right to:
- Access your data (use the export feature).
- Correct inaccurate data (edit it in the app).
- Delete your data (delete your account).
- Object to processing (contact us).
We honor these rights for all users, regardless of location.
Children's Privacy
Hana Mele is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it.
Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or through the application.
Contact
Questions or concerns? Contact us at privacy@hana-mele.com.
