Harmi

Privacy Policy

Last updated: June 5, 2026

The short version

You can use Harmi without an account. In that case your progress stays on your device and we collect no personal information about you.
If you choose to create an account, the only personal information we ask for is your email address, used to sign you in with a magic link. No passwords.
We do not collect payment information, your real name, your date of birth, or your precise location. We do not sell your data and we do not use advertising trackers.
Our product analytics are configured to strip your IP address and location and to respect "Do Not Track".
You can delete your account and all associated data at any time, right inside the app.

This Privacy Policy explains how Harmi ("Harmi", "we", "us", or "our") handles information when you use the Harmi application and website at harmiapp.com (together, the "Service"). Harmi is an independent music-learning app operated by its creators, based in Texas, United States. If you have questions, contact us any time at support@harmiapp.com.

1. Information we collect

If you use Harmi without an account

Harmi works fully without an account. When you play this way, your learning progress (such as lessons completed, scores, and streaks) is stored locally on your device using your browser's storage. We do not receive or store that information on our servers, and it is not linked to your identity. The only data that leaves your device is the limited, privacy-protected usage analytics described in Section 3.

If you create an account

Creating an account is optional and lets your progress sync across devices. When you create one, we collect:

Your email address. We use it solely to sign you in through a one-time "magic link" sent to your inbox. We do not use passwords, and we do not use your email for marketing.
An age confirmation. To create an account you confirm that you are 13 or older by checking a box. We do not collect or store your date of birth.
Your learning data. So we can sync it across your devices, we store the progress and preferences you generate by using Harmi: lessons and variants completed, scores and stars, streaks, experience points (XP), in-app items such as hearts and shields, drill and practice statistics, your optional placement/warm-up result, your musical genre preference, and your audio on/off setting.

Our authentication provider also records standard, security-related technical details inherent to signing in (for example, the timestamps of your sign-ins and account creation). This information is used to operate and secure the sign-in system.

What we do not collect

We do not collect passwords, payment or financial information, your real name, your date of birth, your precise geolocation, your contacts, your photos, your microphone or camera input, or advertising identifiers. We do not build advertising profiles and we do not track you across other apps or websites.

2. Cookies and local storage

Harmi uses your device's local storage to save your learning progress and, if you are signed in, to keep you logged in between visits (an essential sign-in token). We do not use advertising or cross-site tracking cookies. Our analytics are configured to keep their data in memory rather than in persistent tracking cookies.

3. Analytics

We use PostHog to understand, in aggregate, how people use Harmi so we can improve lessons and fix problems. We have configured our analytics to be privacy-protective:

Automatic capture of clicks and page content is turned off; we record only specific product events (for example, "lesson completed").
Session recording is turned off - we do not record your screen or keystrokes.
Your IP address and all location data are removed before events are stored.
We respect the "Do Not Track" setting in your browser.

This analytics data is not used to identify you personally and is not sold or shared for advertising.

4. How we use information

To provide the Service and save your progress.
To sync your progress across your devices when you are signed in.
To send the one-time magic-link emails that let you sign in.
To understand overall usage and improve the app, using the privacy-protected analytics above.
To keep the Service secure and to detect or prevent abuse.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

5. Service providers

We rely on a small number of trusted providers to run Harmi. They process information only as needed to provide their service to us:

Provider	Purpose
Supabase	Account sign-in and secure storage of your synced learning data.
Resend	Delivering the magic-link sign-in emails.
Vercel	Hosting and serving the app and website.
Cloudflare	Domain name (DNS) routing for harmiapp.com.
PostHog	Privacy-protected product analytics (see Section 3).

6. Children's privacy

Harmi is a general-audience learning app and is not directed to children under 13. Accounts are only for users 13 and older. We do not knowingly collect personal information (such as an email address) from children under 13.

A child under 13 may still use Harmi to learn without an account. In that mode, as described in Section 1, learning progress stays on the device and we do not collect personal information.

If you are a parent or guardian and believe a child under 13 has created an account or provided us with personal information, please contact us at support@harmiapp.com and we will delete it promptly.

7. Data retention

If you play without an account, your progress remains on your device until you clear it. If you have an account, we keep your synced data until you delete your account or ask us to remove it. Magic-link emails and related sign-in records are retained only as long as needed to operate and secure the sign-in system.

8. Your choices and rights

Use Harmi anonymously. You are never required to create an account.
Delete your account and data. Open Account settings in the app and choose "Delete Account." This permanently removes your account and your synced data, and clears the copy stored on your device.
Access or correct your data. Your learning data is visible to you in the app. For any other request regarding your information, email support@harmiapp.com.
Opt out of analytics. Turn on "Do Not Track" in your browser and our analytics will not run.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA (for example, the right to access, correct, delete, or port your data, and the right not to be discriminated against for exercising these rights). To exercise any of these, contact us at support@harmiapp.com. We do not sell personal information.

9. Security

We use industry-standard measures to protect your information. Account data is protected by per-user access controls so that you can only read and write your own data, sign-in uses one-time links instead of passwords, and data is transmitted over encrypted connections (HTTPS). No method of transmission or storage is 100% secure, but we work to protect your information and to limit what we collect in the first place.

10. Where your data is processed

Harmi is operated from the United States, and our providers may process and store information on servers located in the United States and other countries. If you access Harmi from outside the United States, you understand that your information may be processed in the United States.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page, and for significant changes we will provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.

12. Contact us

If you have any questions or requests about this Privacy Policy or your information, email us at support@harmiapp.com.