Privacy Policy

Honor Choir Academy · Last updated: June 17, 2026

This policy explains what information Honor Choir Academy ("we," "us," the "Service," at honorchoiracademy.com) collects, how we use it, and your choices. It is designed around minimizing the information we collect from students, who may be minors.

1. Who we are

The Service is operated by Honor Choir Academy, a sole proprietorship owned and operated by Colby Hawkins ("we"). You can reach us at [email protected] or by mail at 1003 Elmer Dr, Arbuckle, CA 95912.

2. The accounts we offer

Teacher / Director accounts — created by adults. We collect a name, email address, and a password (stored only as a secure hash).
Individual subscriber accounts — created by an adult (or a student's parent/guardian on their behalf). We collect the same: name, email, hashed password.
Student accounts — created from a teacher-managed class roster. We collect the student's first and last name and practice progress (scores, stars, streaks, and XP), but no student email address or password. Students sign in with their class code and full name.

3. Information we collect

Account information as described above.
Learning progress — exercises attempted, scores, stars, streaks, and XP.
Beta waitlist information — an optional email address and verification status when someone requests beta access to a future training app.
Microphone audio — the app listens to singing to score pitch. Audio is processed live in your browser to detect pitch and is not recorded, stored, or transmitted to us or anyone else.
Payment information — handled entirely by our payment processor, Stripe. We never receive or store full card numbers.
Basic technical/log data needed to operate and secure the Service.

4. How we use information

To provide and improve the Service: create accounts, save and sync progress across devices, show teachers their class rosters and student progress, power per-class leaderboards, and process subscriptions, verify beta waitlist requests, and contact verified waitlist members about beta testing. We do not use student information for advertising, and we do not sell personal information.

5. Children's privacy (COPPA)

Honor Choir Academy is intended to be used by students through their teacher or school. We follow a data-minimization approach for students: no student account email, no password, and no behavioral advertising. Where the Service is used with children under 13, we rely on the school/teacher to provide the consent permitted under COPPA's "school authorization" framework, and on the individual-account holder (an adult or parent/guardian) where applicable. A parent, teacher, or school may review or request deletion of a student's information at any time by contacting us. We will not knowingly collect more personal information from a child than is necessary to use the Service.

6. Schools & student records (FERPA)

When a school or teacher uses the Service, student learning records are made available to that teacher and are handled as education records under the school's direction. We act as a service provider/"school official" processing this data only to provide the Service, and we do not use it for any other purpose. A school data processing agreement (DPA) is available on request at [email protected].

7. How we share information

We share information only with service providers who help us run the Service, under confidentiality obligations: Stripe (payment processing), Zoho Mail (waitlist email verification), and our hosting/network provider used to deliver the site. We do not sell or rent personal information. We may disclose information if required by law or to protect the Service and its users.

8. Data retention & deletion

We keep account and progress data while an account is active. Teachers can remove a student from a class, which deletes that student's progress. Unverified waitlist requests are removed after 30 days. Verified waitlist emails are retained for the beta program or until deletion is requested. You may request deletion of your account and associated data by emailing [email protected].

9. Security

The Service is served over HTTPS, passwords are stored as bcrypt hashes, and access to student data is limited to the student's own teacher. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

10. Cookies & local storage

We use your browser's local storage to keep you signed in and to save progress. We do not use third-party advertising or tracking cookies.

11. Your choices & rights

You may access, correct, or delete your information by contacting us. Depending on where you live, you may have additional rights under laws such as the CCPA/CPRA or GDPR; we honor applicable requests.

12. Changes to this policy

We may update this policy from time to time. We will revise the "Last updated" date above and, for material changes, provide notice within the Service.