Privacy Policy
This policy explains what personal information PYeahNo collects, why, and your rights. We process personal information in line with South Africa’s Protection of Personal Information Act (POPIA) and, for users in the EU/UK, the GDPR.
1. Responsible party
Company registration 2013/085946/07
18 Marjean Avenue, Florida Park, Johannesburg, 1709, South Africa
Email: hello@pyeahno.com
Website: https://pyeahno.com
Our Information Officer can be reached at hello@pyeahno.com.
2. What we collect
- Account details: your name, email address, preferred language and password (stored only as a secure one-way hash).
- Learning progress: lessons completed, scores, practice time, streaks and settings, so your progress syncs across devices.
- Subscription details: your plan, status, renewal date and the subscription reference from Paddle. We never receive or store your card number.
- Technical data: your IP address and browser details in server logs, used for security and to prevent abuse (for example, limiting repeated login attempts).
- How you found us: the website or social-media link (for example a PYeahNo Instagram or TikTok post) that first brought you here, recorded as a short label and stored with your account so we know which posts are useful. We use a random session number for this, not your IP address, and no third-party tracking or advertising cookies.
Your playing stays on your device. MIDI keyboard input and microphone audio (if you enable it) are processed in your browser to follow your playing. Audio is never recorded or uploaded.
3. Why we use it
- To provide the Service and your account (performance of our contract with you).
- To process subscriptions and send receipts, password resets and important account emails (contract and legal obligations).
- To keep the Service secure and working (our legitimate interests).
- We do not sell your personal information and we do not use it for advertising. We only send marketing emails if you have asked for them, and you can unsubscribe at any time.
4. Who we share it with
We share personal information only with service providers (operators) who process it for us under appropriate safeguards:
- DreamHost (web and email hosting, USA): stores our website, database and email.
- Paddle.com: our reseller and Merchant of Record, which processes all payments and subscriptions (including PayPal payments made in its checkout) under its own privacy policy. Paddle shares your name, email and country with us so we can provide your subscription.
- Google Fonts: delivers the typefaces used on the site, which means your browser connects to Google’s servers.
Some of these providers are outside South Africa. When information is transferred abroad, we rely on providers bound by data-protection terms giving protection comparable to POPIA (section 72).
5. Cookies and local storage
We use one essential session cookie to keep you signed in and protect forms. Your progress and settings (such as light/dark theme and language) are also saved in your browser’s local storage. We don’t use advertising or tracking cookies. Our payment providers may set their own cookies during checkout.
6. How long we keep it
We keep your account information while your account is open. If you delete your account, we delete your profile and progress immediately, except records we must keep by law (for example, transaction records for tax purposes, typically five years). Server logs are kept for a limited period.
7. Your rights
You may ask to access, correct or delete your personal information, object to its processing, or withdraw consent where we rely on it. You can delete your account yourself from the Account page, or email hello@pyeahno.com. You also have the right to complain to the Information Regulator (South Africa) at inforegulator.org.za, or to your local data-protection authority.
8. Security
We use HTTPS encryption, hashed passwords, access controls and rate limiting. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information, and we will notify you and the regulator of any breach as required by law.
9. Children
The Service is suitable for learners of all ages, but accounts must be created by someone aged 13 or over. Accounts for younger learners should be created and managed by a parent or guardian.
10. Changes
We will post any updates to this policy on this page and notify you of material changes by email.