Privacy Policy

This Privacy Policy explains how Main Act handles personal information when you use Studio Mix or Live Sound, including their websites, apps, accounts, support, billing, and practice features.

Information you provide may include your email address, display name, sign-in details managed by the authentication provider, profile preferences, support messages, and information you intentionally choose to publish or share.

When you practice, Main Act may store exercise history, scores, comfort ratings, belt and XP progress, streaks, challenge results, saved reflections, and feature state needed to resume your work. Signed-in progress may be stored in Firebase so it can be recovered or used across supported Main Act experiences.

Some drafts, preferences, caches, anonymous challenge results, and continuity receipts are stored only in your browser unless a feature says they sync. Clearing browser data can remove those device-only records.

Mix Check uses browser audio APIs to decode and analyze the audio file you select. That file is not uploaded by Mix Check, and the analysis result is kept on the device unless you choose an account or sharing action that expressly says otherwise.

Main Act also downloads its own lesson audio, stems, and narration for playback and may cache those assets on your device. Product analytics does not include your uploaded audio file or the contents of your training answers.

Optional product analytics includes page and feature use, session starts and completions, campaign or referral attribution, browser locale, plan or belt context, and a session identifier. When you are signed in, analytics events can include your account ID. Main Act does not write optional product analytics before you allow it, and you can change the choice in Settings.

When configured, error and performance diagnostics may run to protect reliability and security. Diagnostic reports can include technical context, the page where an error occurred, and your account ID or email when signed in. Choosing “Essential only” turns off optional product analytics; it does not disable strictly operational security or error logging.

Main Act uses a first-party consent cookie to remember your analytics choice across Main Act subdomains. Browser local storage, session storage, and IndexedDB may hold preferences, temporary handoff receipts, training continuity, downloaded lesson-audio caches, and other device-only state.

Main Act does not use third-party advertising cookies in Studio Mix or Live Sound and does not sell personal information or share it for cross-context behavioral advertising.

Main Act uses service providers to operate the product. Their processing is governed by their own terms and privacy commitments:

• Firebase · authentication, cloud data, functions
• Stripe · checkout, billing, fraud prevention
• Resend · transactional and opted-in email
• Sentry · error and performance diagnostics

Payment providers may collect transaction, device, and fraud-prevention information directly. Main Act receives the payment status and transaction details needed to manage access, not your full Stripe card number.

• provide accounts, lessons, tools, progress, and supported cross-device continuity;
• process payments, manage access, and send transactional messages;
• respond to support, export, correction, and deletion requests;
• detect abuse, protect accounts, debug failures, and maintain security;
• send educational or product email when you have opted in, with an unsubscribe control; and
• understand and improve product use when optional analytics is allowed.

Signed-in users can use Settings to export account data, change the optional analytics choice, correct profile information, and request permanent account deletion. Marketing email includes an unsubscribe control. You can also contact support@mainact.app.

Depending on where you live and whether the relevant law applies, you may have rights to know or access personal information, correct it, delete it, receive a portable copy, object to or restrict certain processing, or opt out of sale or sharing. Main Act will not discriminate against you for exercising an applicable privacy right. Identity verification may be required before fulfilling a request.

If you choose to publish a profile, leaderboard entry, shared result, or other public artifact, the fields shown in that action, such as display name, school, belt, XP, streak, or selected result, can be visible to others. Review the preview before publishing and avoid including information you do not want public.

Private training answers and selected Mix Check audio are not added to a public profile by default.

Main Act generally keeps account and synced practice information while your account is active. A deletion request starts a guarded workflow that removes account data and authentication access; if a provider cleanup is still pending, the product reports that state instead of claiming deletion is complete. Device-only Main Act storage is cleared on the device that completes deletion.

Some records may be retained when reasonably necessary for security, fraud prevention, legal obligations, dispute resolution, or backup rotation. Aggregated or de-identified information may be retained when it can no longer reasonably identify you.

Main Act uses HTTPS, access controls, and Firebase security controls. Firebase states that Cloud Firestore and Firebase Authentication encrypt data at rest and Firebase services encrypt data in transit. No system can promise absolute security.

The Service is not directed to children under 13, and Main Act does not knowingly collect personal information from a child under 13. Contact Main Act Support if you believe a child has provided personal information.

Main Act and its providers may process information in the United States and other countries where they operate, subject to their safeguards and applicable law.

Main Act may update this policy as the product, providers, or law changes. The effective date at the top identifies the current version. Material changes will be communicated when applicable law requires notice.