Musical Living Academy Privacy Policy

Effective Date: October 28, 2026. Last Updated: October 28, 2026.

1. Scope

This Privacy Policy explains how Musical Living Academy, LLC, doing business as Musical Living Academy (“Musical Living Academy,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information. It applies when you use our website, online registration and client portal, the Musical Living Academy iOS or Android application (the “App”), in-person or online lessons, payment and scheduling services, messaging, telephone or SMS services, and other interactions with us (collectively, the “Services”).

Some features are provided through the Opus1 software platform. When this policy refers to the App, it includes the school-branded mobile application and the supporting services used to operate it. Features described below apply when they are available and enabled for your account or device.

Our separate SMS Messaging Terms & Conditions, available at https://www.musicallivingacademy.com/privacy-policy, govern text-message consent, message frequency, carrier charges, help, and opt-out instructions. For marketing emails, you can unsubscribe using the link at the bottom of an email. Transactional communications will continue regardless of marketing preferences.

2. Who is responsible for your information

Musical Living Academy determines how student, family, staff, lesson, enrollment, communication, and billing information is used to provide our music-education services. Opus1 Development Studio, Inc. (“Opus1”) provides the software platform, hosting, and related technical services and processes information on our behalf and, for limited platform-security and service-administration purposes, under its own legal obligations. We may also authorize technical contractors to support and maintain the Services under confidentiality and data-protection obligations.

3. Information we collect

Depending on how you use the Services, we may collect:

• Contact and account information: name, email address, telephone number, mailing address, time zone, account identifiers, authentication status, communication preferences, and relationship to a student.
• Student and household information: student and dependent names, date of birth or age, gender when provided, guardians and authorized contacts, school relationships, profile photographs, photo-release preferences, and household associations.
• Instruction and scheduling information: lesson and class enrollments, teachers, locations, attendance, cancellations, make-up credits, availability, recitals, learning notes, assigned files, progress-related information, and other school records.
• Billing and transaction information: invoices, balances, tuition plans, discounts, transaction amounts, payment status, partial card details such as brand and last four digits, and processor tokens. Complete payment-card credentials are entered through our payment processors; Musical Living Academy does not store complete card numbers or security codes.
• Communications and content: email, SMS and in-app messages; customer-service requests; comments; lesson notes; attachments; documents; photos; videos; and content you choose to provide to the AI Assistant.
• Audio and speech information: microphone audio used during an enabled voice call or speech used to dictate a lesson note. Speech recognition may be processed by your device platform, such as Apple, subject to its terms and privacy practices.
• App and device information: device and operating system type, app version, IP address, approximate location inferred from an IP address, device or session identifiers, authentication and security events, diagnostic information, feature usage, and, when notifications are enabled, notification preferences and push tokens.
• Website information: pages viewed, referring links, browser information, cookie or similar identifiers, form submissions, advertising interactions, and website-chat activity. Our website may use cookies, web beacons, and similar technologies to collect device and website interaction information.
• Sign-in information: information needed to verify an existing account through password, email link, Google Sign-In, or Sign in with Apple, when those options are enabled. When you sign in with Google or Apple, that service shares an account identifier with us, and the name and email address on that account (Sign in with Apple lets you hide your email, in which case we receive a private relay address). We do not receive your Google or Apple password.

4. How we collect information

We collect information:

• directly from you, a parent or guardian, or an authorized account manager, including through web forms, event registrations, account setups, customer support communications, and purchases;
• from students and staff while providing lessons and school services;
• from the Opus1 platform and service providers acting for us;
• from Google, Apple, payment processors, or other services you choose to use; and
• automatically from the website, App, devices, and communications used to access the Services, including through cookies, web beacons, and similar technologies on our website.

5. How we use information

We may use personal information for lawful purposes, including to:

• create, authenticate, administer, secure, and support accounts;
• schedule, provide, document, and improve lessons, classes, recitals, and other services;
• manage households, students, teachers, attendance, credits, enrollments, and school operations;
• prepare invoices, process payments, prevent fraud, and maintain accounting records;
• send requested or operational email, SMS, in-app, telephone, and push communications;
• provide files, messaging, dictation, voice calling, and AI-assisted booking or support when enabled;
• respond to questions, requests, privacy choices, and technical problems;
• monitor reliability, troubleshoot errors, protect users, enforce policies, and prevent misuse;
• understand and improve our Services and measure website outreach, including optimizing website functionality and marketing efforts;
• market our products and services, including promotional emails and SMS messages with your consent, and send cart abandonment reminders; and
• comply with contracts, legal requirements, and lawful requests.

6. AI Assistant

The App may offer an optional AI Assistant for app guidance, school questions, lesson availability, and booking assistance. When you use it, your messages and limited account context needed for your request may be sent through Opus1 to OpenAI. That context may include your name, internal account identifier, student names and identifiers, service information, a booking-credit reference, selected schedule information, and the results of actions requested through the assistant.

Before personal information is first sent to the AI provider, the App will disclose this transfer and ask for your permission. The AI Assistant is optional; declining it does not prevent use of the App's non-AI features. Do not enter payment-card numbers, passwords, medical information, or other information that is not needed for your request.

We configure OpenAI API requests not to create stored completions and do not opt in to use App conversations to train OpenAI's general models. OpenAI may nevertheless retain API content for a limited period for abuse monitoring or longer when legally required. AI responses may be inaccurate; verify important scheduling, billing, and policy information in the App or with our staff.

7. Payments

Payment information may be processed by Stripe, Apple Pay, or Fiserv/CardConnect, depending on the payment method and configuration available to your account. Payment forms may be provided directly by those processors. They receive the information necessary to tokenize, authorize, and complete the payment and process it under their own privacy notices and contractual obligations. We receive transaction results and limited payment-method details needed to administer your account, but we do not store complete card numbers or card security codes.

8. When we disclose information

We may disclose information to:

• Opus1 and technical providers: services that host, maintain, secure, and support the website, portal, App, databases, file storage, and communications.
• Payment providers: Stripe, Fiserv/CardConnect, Apple Pay, banks, and fraud-prevention services.
• Authentication and device-platform providers: Google and Apple when you use their sign-in, speech, notification, or device services.
• AI providers: OpenAI, only for the optional AI Assistant as described above and after the required disclosure and permission.
• Diagnostics and analytics providers: the App sends crash reports, performance data and related device and session details to Sentry, and feature-usage events to Google Analytics. These are linked to your account so we can support you and fix problems, and are used only to keep the App working and improve it.
• Communications providers: services that deliver email, SMS, push notifications, website chat, or enabled voice calls.
• School personnel: authorized administrators, teachers, and support staff whose duties require access.
• Professional advisers and authorities: when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or establish or defend legal claims.
• A successor organization: in connection with a merger, financing, reorganization, or sale, subject to appropriate confidentiality and notice where required.

We do not sell personal information for money. The App does not use third-party advertising or share App information for cross-context behavioral advertising; its crash reporting (Sentry) and usage analytics (Google Analytics) are not used for advertising. Our public website may use analytics and advertising-measurement services, including Google and Meta; under some state laws, disclosures through those website technologies may be considered "sharing" even when no money changes hands. You may use available browser or device controls and contact us to exercise an applicable opt-out right.

Mobile opt-in information and SMS consent are not sold, rented, or shared with third parties for their own marketing purposes.

9. Device permissions and controls

The App asks for device permission only when a related feature needs it. Depending on enabled features, this may include access to the microphone for calls or dictation, speech recognition for dictated notes, photos or videos you choose to upload, and notifications. The App does not currently require precise device location for its core features. You can change permissions in your device settings, but the related feature may stop working.

10. SMS, email, telephone, and push communications

We use contact information to send service communications such as lesson reminders, schedule changes, payment notices, security alerts, confirmations, and responses to requests. With any consent required by law, we may also send promotional communications.

Text-message consent, message frequency, carrier charges, help, and opt-out are described in our SMS Messaging Terms & Conditions at https://www.musicallivingacademy.com/privacy-policy. Message frequency varies, and message and data rates may apply. For SMS support, reply HELP or email info@musicallivingacademy.com.

• Reply STOP to an SMS to opt out of non-essential text messages.
• Reply HELP or contact us for SMS assistance.
• Use an email's unsubscribe link to stop promotional email.
• Use App or device settings to control available push notifications.

Opting out of marketing does not prevent necessary transactional, account, safety, or service messages where permitted by law.

11. Children and students

Our Services support music students of different ages, including children. The App does not offer children an independent public account-registration process. Accounts and student relationships are established by Musical Living Academy, a parent or guardian, or another authorized adult. We collect children's information from parents or guardians, school personnel, and, when appropriate, the student while providing lessons and account features.

We seek parental notice and consent where required, limit children's information to the educational and operational purposes described in this policy, and do not use App information for targeted advertising. A parent or guardian may contact us to review, correct, or request deletion of a child's information, subject to legal, safety, accounting, and service-record exceptions.

12. Retention and deletion

We retain information for as long as reasonably necessary to provide our products, services, and customer support; maintain accurate lesson and business records; comply with legal and accounting obligations; resolve disputes; enforce agreements; protect users; and prevent fraud. Retention varies by data type and purpose:

• Account, student, lesson, enrollment, message, and uploaded-content records are generally retained while the relationship is active and afterward for legitimate operational, safety, dispute, and legal needs.
• Transaction and accounting records may be retained for the period required by tax, accounting, payment, and other applicable laws.
• The AI Assistant gateway holds conversation history temporarily in server memory during an authenticated session and may keep an expired conversation for up to approximately 24 hours to support authenticated session renewal. OpenAI may retain API content for up to 30 days for abuse monitoring under its standard API controls, unless a different legally permitted retention control applies.
• Backup, security, and fraud-prevention copies may remain for a limited additional period before deletion or de-identification.

When information is no longer required, we delete, de-identify, or restrict it as appropriate. A deletion request may not remove records we must retain or information belonging to another person.

13. Your choices and privacy rights

Depending on your location and subject to applicable exceptions, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; learn about the categories and recipients of information; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive information; or appeal a denied request.

You may review and update available information and profile or communication settings by logging into your account on our website, where available, or in the Services, or by contacting us directly. To unsubscribe from marketing emails, use the “Unsubscribe” link at the bottom of an email. To stop receiving marketing text messages, reply STOP. Transactional communications, including appointment reminders and account notifications, will continue regardless of marketing preferences. Message frequency varies, and message and data rates may apply. For text-message support, reply HELP or email us at info@MusicalLivingAcademy.com. We may need to verify your identity and authority over the relevant account before acting on a request. An authorized agent may submit a request where permitted by law. We will not unlawfully discriminate against you for exercising a privacy right.

Accounts are created and managed as part of your relationship with Musical Living Academy; the App does not currently offer public self-service account creation. To request closure of an account or deletion of associated personal information, contact us. Closing an account may not cancel an active enrollment or financial obligation; those requests must also follow the applicable school policies.

14. Security

We and our providers use reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls, encrypted network transport where appropriate, authentication, service monitoring, and restricted personnel access. No system can guarantee absolute security. Protect your account credentials and contact us promptly if you suspect unauthorized access.

15. Processing locations and third-party services

We and our providers may process information in the United States and other locations where they operate. Those locations may have different privacy laws. Third-party websites, payment interfaces, sign-in services, and device-platform features are also governed by the third party's privacy notice when it acts independently from us.

16. Cookies and Similar Technologies

Our website may use cookies, web beacons, and similar technologies to automatically collect information from your device, such as your IP address, date and time of visit, browser and operating system information, referring website address, and website interaction details.

17. Website Forms and Account Updates

We collect personal information directly from you through methods including web forms, event registrations, account setups, customer support communications, and purchases. You can review and update your information by logging into your account on our website or by contacting us directly.

18. Mobile Information and Text Messaging Data

Mobile information will not be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

19. Changes to this policy

We may update this policy to reflect changes in our products, Services, providers, or legal obligations. We will post the updated policy here and revise the “Last Updated” date. When required, we will provide additional notice or obtain renewed consent before a material change takes effect. Please review the policy regularly for changes.

20. Contact us

Contact Musical Living Academy with privacy questions, requests, or complaints. Please do not send passwords or complete payment-card details.

• Email: info@MusicalLivingAcademy.com
• Phone: +19568670649
• Mail: Musical Living Academy, Musical Living Academy, LLC, 3428 N 10th St, Ste 160, McAllen, TX 78501
• For questions specifically about the Opus1 software platform, you may also contact support@opus1.io.

This policy covers the Musical Living Academy website, portal, services, and school-branded mobile application.