Privacy Policy

1. Who We Are

Sound Cannon LLC operates SoundCannonU at soundcannonu.com. This Privacy Policy explains how we collect, use, store, and protect personal information when you use our platform.

SoundCannonU is sponsored by XME Inc. The "Powered by XME Inc." notice identifies that sponsorship. XME Inc. does not receive student personal information from us for advertising, marketing, or independent commercial use unless we clearly disclose that practice and obtain any consent required by law.

If you have questions about this policy, please contact us at mr.richjohnson@gmail.com.

2. Information We Collect

Parent accounts: When you create a parent account, we collect your name, email address, and a hashed version of your password (we never store passwords in plain text).

Student accounts: Students are added by parents. We collect the student's display name and a chosen username (we do not require students' real names or email addresses). We also track learning data including lesson completions, XP earned, badges, streak data, and saved beat patterns.

Student-created content and interactions: We may store beat patterns, leaderboard activity, friend or interaction requests, reactions, and other limited activity created while using the Platform.

Contact and support: If you send us a message, we collect the name, email address, subject, message, and related information you choose to provide so we can respond.

Automatically collected:

• Session data via HTTP-only session cookies to keep you logged in
• Last active timestamp to maintain your streak
• Lesson completion events and activity logs
• Cookie consent preferences
• Basic technical information that servers commonly log, such as IP address, browser type, requested page, and error data, for security and troubleshooting

3. How We Use Your Information

• Provide and operate the educational platform and Beat Lab
• Track learning progress, award XP and badges, maintain streaks
• Send password reset emails to parent email addresses when requested
• Allow parents to monitor their child's progress
• Respond to contact form submissions and support requests
• Display leaderboard rankings (by username, not real name) among students
• Improve the platform based on aggregate, anonymized usage patterns
• Maintain platform security, prevent abuse, debug errors, and enforce our Terms
• Comply with legal obligations and respond to lawful requests

We do not sell, rent, share, or disclose your personal information to third parties for advertising or marketing purposes. We do not use your data to build advertising profiles.

4. Cookies

We use a small number of cookies to operate the platform. Here is exactly what we use and why:

5. How We Share Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not knowingly sell or share the personal information of children under 16.

We may share limited information only in these circumstances:

• Parents and guardians — parent accounts can view and manage their students' progress and account information
• Service providers — vendors that help us host the site, store data, send email, secure the platform, or provide embedded content, under instructions to use information only for our service
• Legal and safety — when we believe disclosure is required by law, necessary to protect users, or needed to enforce our Terms
• Business transfers — if we are involved in a merger, acquisition, financing, reorganization, or sale of assets, subject to this Privacy Policy or a policy with materially similar protections
• Sponsor reporting — we may share aggregate, de-identified statistics with XME Inc. or other sponsors, such as lesson usage or overall program reach, but not student names, parent emails, passwords, or child contact information

6. Third-Party Services

• YouTube (Google) — embedded video player for lessons. Subject to Google's privacy policy. We use the YouTube embed with privacy-enhanced mode where supported.
• Google Fonts — fonts are loaded from Google's CDN (fonts.googleapis.com). Google may log the request. We may self-host fonts in a future update to eliminate this.

We do not integrate with social media platforms, advertising networks, or any data brokers.

7. Data Retention

Account data is retained as long as the account is active. If you request deletion of your account or your child's account, we will delete all associated personal data within 30 days of the request. Activity logs are retained for up to 90 days. Beat patterns saved by students are deleted immediately upon account deletion.

8. Parent Rights (COPPA)

As the parent or guardian of a student on SoundCannonU, you have the right to:

• Review the personal information we have collected from your child
• Request correction of inaccurate information
• Request deletion of your child's account and all associated data
• Refuse further collection or use of your child's information (by deleting the account)

To exercise any of these rights, email us at mr.richjohnson@gmail.com. We will respond within 30 days. We may need to verify your identity as the parent before completing the request.

9. U.S. State Privacy Rights

Depending on where you live, you may have the right to request access, correction, deletion, portability, restriction, or confirmation about whether we process your personal information. You may also have the right to opt out of sale, sharing for targeted advertising, or certain profiling. We do not sell personal information or share it for targeted advertising.

To exercise privacy rights, email mr.richjohnson@gmail.com. We may need to verify your identity before responding. You may appeal a decision by replying to our response and writing "Privacy Appeal" in the subject line.

10. Security

• All passwords are hashed using bcrypt — we never store plain-text passwords
• Session cookies are HTTP-only and SameSite=Lax, preventing common web attacks
• All pages are served over HTTPS to encrypt data in transit
• Database access is restricted to server-side PHP code only — no direct client access

No security system is perfect. While we implement industry-standard protections, we cannot guarantee absolute security of data transmitted over the internet.

11. International Users

SoundCannonU is operated from the United States. If you access the Platform from outside the United States, your information may be processed and stored in the United States, where privacy laws may differ from those in your location.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered parents by email of any material changes at least 14 days before they take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For privacy questions, data requests, or concerns about your child's data: