Privacy and cookies

What we collect

Account details: your name, email address and password. Passwords are stored scrambled, never in plain text.
Profile details you give at sign-up: age band, gender, nationality and the instruments you play, plus a social media handle if you add one.
How you use Sonikoo: the songs you open, how long you practise, which features you use, and your daily free playing time.
Technical information: your internet (IP) address, and your device and browser type. We use these to keep accounts and the service secure, to measure how fast the site loads, and to find and fix errors.
Premium payments: Stripe processes your payment. We keep a record of your subscription (its status and renewal date), the amounts paid and the country of the card used. We never receive your full card details.
Messages: emails you send us.

Why we use it

To provide Sonikoo (our contract with you): your account, playing songs, your free allowance, Premium and payments.
To keep Sonikoo secure and working well (our legitimate interests): preventing misuse, fixing errors, measuring speed and improving the service.
To meet legal duties: for example, keeping payment records for tax.
With your consent: news and offers by email, and analytics cookies (asked for in the cookie banner). You can withdraw consent at any time.

Teachers and music hubs

If you joined Sonikoo through a teacher or a music hub, they can see your practice progress, such as which songs you've practised and for how long.

Who we share it with

We don't sell your data. We use trusted service providers who handle it only on our behalf and under our instructions:

hosting, database and file storage;
sending emails;
payments (Stripe);
security and spam protection;
error reporting;
profile pictures (Gravatar receives a scrambled version of your email address);
analytics, only if you accept analytics cookies (see below).

We may also share data if the law requires it, for example with tax authorities.

Some of these providers store data outside the UK, including in the United States. Where that happens, we rely on the safeguards UK law requires, such as the UK–US data bridge or approved contract terms.

How long we keep it

Your account and practice history: while your account is open. If you ask us to delete your account, we delete it within 30 days.
Payment records: 6 years, for tax and accounting.
Security and technical records: no longer than 90 days.

Your rights

You can ask to see, correct or delete your data, to get a copy of it, or to object to how we use it. Email info@sonikoo.com. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Children

You must be 13 or over to create an account. If you are under 18, you need a parent's or guardian's permission. We don't knowingly collect data from children under 13. If you think a child under 13 has signed up, please tell us and we'll delete the account.

Cookies and similar technology

Essential: a cookie that keeps you signed in (it lasts 24 hours), security checks, and a cookie that remembers your cookie choice (6 months). Sonikoo can't work without these.
Settings stored in your browser: player preferences such as your last tempo or mixer settings.
Analytics, only if you accept: Google Analytics and Hotjar, to understand how the site is used. They aren't loaded unless you choose "Accept" in the cookie banner.

You can change your choice at any time: cookie settings (also at the bottom of every page). You can also block or delete cookies in your browser's settings. If you block essential cookies, you won't be able to sign in.

Changes to this policy

If we make important changes, we'll tell you by email or on the site.

Who is responsible for your data

Sonikoo Ltd (registered in England and Wales, company number 12342346, registered office: Unit A, 82 James Carter Road, Mildenhall Industrial Estate, Mildenhall, Suffolk, IP28 7DE) is responsible for your personal data. Contact us at info@sonikoo.com.

Last updated 21 October 2026.