🔐 AI Privacy and Data Usage

🧠 About JazzPracticePro's Privacy Approach

The AI features are optional. If you don't use them, no data ever leaves your device. When you do use AI, JazzPracticePro uses a hybrid client–server design to balance performance and privacy: your device streams results directly from Google's Gemini while small, non-content control requests are made to our serverless endpoints only to manage AI credits and safety.

🤖 What powers the AI?

JazzPracticePro uses Google's Gemini API (via @google/generative-ai) to provide personalized practice feedback and suggestions. When you request AI help, your practice data is securely sent to Gemini to generate a response. In hybrid mode, generation is streamed directly from your device while credits are enforced on the server for fairness.

📤 What data is sent?

Only the information needed for your request is included:

• Your profile and goals (these are relevant to most prompts)
• No personally identifiable information is included unless you write it into a practice note or goal field.
• Practice activity summaries (dates, durations, notes)
• Repertoire info with learning statuses (tunes marked as "In Progress", "Needs Review", etc.)
• Short- and long-term goals
• Instrument info (for context)
• Focus area or time available (for daily suggestions)

🔐 How is it sent?

• In hybrid mode, content generation streams directly from your device to Google's Gemini API for speed and responsiveness.
• Before generation, a kill switch and credit check happens via secure serverless endpoints.
• After success or on failure, usage is confirmed or refunded via serverless functions — no practice content is stored by us.
• No data is sent unless you click a "Generate AI Feedback" button.

You always have full control over when data is sent. You'll see:

• A banner on all AI pages reminding you that data will be shared with Gemini
• A "Generate" button you must click to initiate the request
• Fallback/error handling using our serverless function if direct streaming fails (e.g., long generations)

🚨 Does Google keep my data?

Possibly, for a short time.

According to Google's Gemini API Terms of Service, prompts and responses may be temporarily stored by Google for:

• Abuse prevention
• Improving their models (in anonymized form)

JazzPracticePro does not store or log any prompts or responses locally after generation. You can optionally choose to save your AI results to a file or copy them manually.

✅ Quick Summary

☁️ Encrypted Cloud Backup (Optional)

JazzPracticePro supports end-to-end encrypted cloud backups using your passphrase. Your passphrase never leaves your device; backups are encrypted before upload and can only be decrypted by you.

• Encryption: PBKDF2‑SHA256 + AES‑GCM‑256
• Compression: gzip before encryption to reduce size
• Storage: Supabase Storage with per-user access controls
• Passphrase scope: lives only in-memory per browser tab

You can also export/import a local v3 JSON backup at any time without using cloud storage.

🔍 Transparency: AI Control Endpoints

For fairness and safety, the app calls a small set of serverless endpoints that manage AI usage. These do not store your content and are only used to check status, reserve, confirm, or refund credits:

• GET /.netlify/functions/ai-status: kill switch + credits
• POST /.netlify/functions/reserve-credit: reserve a credit
• POST /.netlify/functions/confirm-usage: log success
• POST /.netlify/functions/refund-credit: refund on failure

📁 Your Control & Portability

• You can export all your practice data, repertoire, and goals at any time.
• You can import previous data or example files.
• The app includes a Soft Reset (clears practice data) and Factory Reset (clears everything).
• AI usage logs can be reset manually via the Debug tools in the app.

📋 Additional Privacy Disclosures

❓ Questions?