Yousician: Learn & Play Guitar

"Advertising and social media. Partners who use advertising identifiers, cookies, Application Programming Interfaces, and/or SDKs in our Service to enable them to collect and analyze user and device related data and information. Such partners may be for example, our advertising partners or partners providing social media tools allowing sharing of content from our Services. These partners collect and process personal data separately from us under their own privacy policies."

Yousician embeds third-party SDKs that independently collect user data directly from users' devices, and these partners process data under their own policies, giving users limited control over downstream use.

"We also receive personal information from our analytics and advertising partners, such as information about your interactions with our ads outside our Services (for example on third party websites), including information on how you were referred to our Services. Device identifiers (such as your device ID, advertising ID, IMEI), identifiers we assign to your account."

Yousician collects advertising IDs, device IDs, and IMEI, and receives data about user activity on third-party websites, enabling cross-service tracking and profile linking across platforms.

"Device identifiers (such as your device ID, advertising ID, IMEI), identifiers we assign to your account, other technical information about the device you use for our Services (such as device type, operating system, language or browser type and version)."

Collecting IMEI (a permanent hardware identifier) goes beyond what a music learning app needs for core functionality and can be used for persistent device fingerprinting.

"Your IP address to bring our product to your device, but also to get an idea of your general location through IP geolocation data (on city, state or country level) so that we can manage the content available in the Service in your territory or to show you pricing in your own currency. Where you have opted-out of personalized advertising, these third-party SDKs may collect non-personal, contextual data including geolocation data."

Yousician uses IP geolocation to determine user location, and even when users opt out of personalized ads, third-party SDKs still collect geolocation data for contextual purposes.

"We may update this Privacy Notice from time to time by posting a new version of the Privacy Notice on yousician.com. If the changes we make are material, we will notify you by posting a notice in the Services or by other appropriate means. Please note that your use of the Services after the effective date is subject to the new Privacy Notice."

Yousician can update its privacy policy unilaterally, and continued use of the service after changes constitutes acceptance of the new terms, with no requirement for explicit user consent.

"We will then delete all your personal data from our own and our partners' systems, including backups within 30 days, unless there is a legitimate business interest to retain the data, such as to comply with our legal obligations, to enforce our agreements or to resolve disputes."

While the 30-day deletion timeline is reasonable, the broad exception for 'legitimate business interest' including enforcing agreements or resolving disputes could allow indefinite retention of user data after account deletion.