Last updated: 22 September 2026
Audible Genius makes music-production software and courses. This policy explains what personal information we collect, why, who we share it with, and what you can do about it. We have tried to write it in plain English rather than legalese.
Who we are
Audible Genius, LLC
6731 Frontier Dr. #1011
Springfield, VA 22150
United States
For anything in this policy, email [email protected].
Audible Genius, LLC is the data controller for the personal information described here — meaning we decide what is collected and why.
What this policy covers
This one policy covers all of our properties:
- audiblegenius.com et syntorial.com — our websites and checkout
- learn.audiblegenius.com — the Building Blocks web app
- account.audiblegenius.com — your account portal
- studio.audiblegenius.com — the in-browser studio
- community.audiblegenius.com — the community forum
- Syntorial for Mac, PC and iPad — our desktop and tablet applications
- Our newsletter, support channels and affiliate program
It does not cover other companies’ websites we link to. If you follow a link to YouTube, Reddit or anywhere else, that company’s policy applies once you land there.
What we collect
You give us directly:
| Ce que | When |
|---|---|
| Name and email address | Creating an account, buying, signing up for the newsletter, contacting support, applying for an educational discount or the affiliate program |
| Password | Creating an account (stored only as a cryptographic hash — we cannot read it) |
| Billing details, including payment information | Buying something. Card details go to our payment processor, not to us — see below |
| Shipping address | Ordering merchandise |
| Whatever you write | Support tickets, forum posts, form submissions |
| Bank or PayPal details | Only if you are an affiliate being paid commission |
Collected automatically when you use our sites and apps:
| Ce que | Why it exists |
|---|---|
| IP address, browser, device and operating system | Serving the site, security, fraud and abuse prevention |
| Pages viewed, clicks, scroll depth, session length, referring URL | Understanding what works and what doesn’t |
| Cookies and similar tracking technologies | Analytics, advertising measurement, keeping you signed in, remembering a coupon |
| Course progress — lessons opened, completed, scores, time spent | Syncing your progress across devices, and understanding where the course is too hard |
| Purchase and entitlement records | Knowing what you own so the software unlocks |
From third parties: our payment processor tells us about your order; advertising platforms tell us (in aggregate) that an ad led to a visit; the Apple App Store tells us you bought Syntorial for iPad.
What we deliberately do not collect: we do not store your card number, we do not ask for information about your health, race, religion, politics, or sexuality, we do not ask your date of birth, and we do not knowingly collect anything from children under 13.
How you sign in
There are four ways to get into your account, and they collect different things:
| Method | What happens |
|---|---|
| Email and password | We store your email address and a cryptographic hash of your password. We never store the password itself and cannot read it. |
| Sign in with Google | Google confirms your identity to us and sends us your name, email address and profile picture. Google never gives us your password, and we cannot see anything else in your Google account. Google will know you have an account with us. |
| Sign in with Facebook | The same arrangement with Meta: they confirm your identity and send us basic profile details. We cannot post anything or read your activity, and Meta will know you have an account with us. |
| Emailed sign-in link | We send a single-use link to your email address instead of asking for a password. |
We record which of these you used, so that the sign-in screen can offer you the right option next time. If you signed up with Google or Facebook and would rather not use them, email us and we will switch your account to an email and password.
Why we use it
- To provide the product — creating your account, unlocking what you bought, syncing progress between your devices, providing support.
- To take payment — processing orders, refunds and invoices through our payment processor.
- To email you — receipts and account notices (which you cannot opt out of while you have an account), and our newsletter and product announcements (which you can, at any time).
- To improve the course — analysing which lessons people struggle with. This work uses a pseudonymous learner identifier and no email addresses.
- To market — measuring whether our advertising works, and showing ads to people who have visited us. This is the part most likely to be what you want to opt out of; see Your choices.
- To keep things working and honest — security, fraud prevention, bot filtering, debugging.
- To meet legal obligations — tax and accounting records, and responding to lawful requests.
Legal bases (for users in the EU, EEA and UK)
We process your information on one of these grounds:
- Performance of a contract — everything needed to deliver software you bought and run your account.
- Consent — the newsletter, and advertising and analytics cookies. You may withdraw consent at any time.
- Legitimate interests — security, fraud prevention, and understanding how our course is used, balanced against your rights.
- Legal obligation — keeping financial records and answering lawful requests.
Who we share it with
We do not sell your personal information for money. We do share it with the companies below, either because they run part of our service for us, or — in the case of the advertising platforms — because measuring advertising counts as “sharing” or “targeted advertising” under several US state privacy laws.
Running the product:
| Company | What they do |
|---|---|
| Amazon Web Services | Backend servers and storage for your course progress |
| MongoDB Atlas | The database holding your account and progress |
| Cloudflare | Content delivery, DNS, edge computing, and bot protection on our forms |
| Kinsta | Hosting for audiblegenius.com and syntorial.com |
| Meteor Cloud | Hosting for learn.audiblegenius.com |
| WeWeb | Runs your account area at account.audiblegenius.com — account management, billing and subscription details |
| ProductLift | The community forum |
| Google Cloud (BigQuery) | Our course-analytics warehouse — pseudonymous learner data, no email addresses |
| AiTable | Internal work tracking, and the intake forms for educational discounts and academic pilots |
| ActivePieces | Our automation platform. Contact form submissions are sent to it, along with order and account updates. |
Payments and fulfilment:
| Company | What they do |
|---|---|
| FastSpring | Our Merchant of Record. They take payment, hold billing details, and issue refunds. Card details go to them, never to us. |
| Apple | In-app purchases of Syntorial for iPad |
| PayPal, Wise | Paying affiliate commissions |
Merchandise. Our merch store is operated by Printify, not by us. When you buy merchandise you are dealing with Printify, who decide how your order and shipping information are handled — their privacy policy governs that purchase, not this one.
Email, support and customer records:
| Company | What they do |
|---|---|
| Zoho (CRM, Campaigns, ZeptoMail, Desk, Mail) | Customer records, our newsletter, transactional email such as receipts and password resets, and support tickets |
| Teamwork.com | Our older support ticketing system, being retired |
| Referly | Our affiliate program — applications, referral tracking and commissions. Affiliate email is delivered through Mailgun under Referly’s account. |
Analytics and advertising — these are the ones that involve tracking:
| Company | What they do |
|---|---|
| Google Analytics | How people use our sites |
| Google Tag Manager | Delivers the tags listed here |
| Google Ads | Measures whether our ads led to a sale, and supports retargeting |
| Meta (Facebook) Pixel | Same, for Facebook and Instagram advertising |
| Reddit Pixel | Same, for Reddit advertising |
| YouTube | Embedded videos on our pages set cookies when you watch |
| Cloudflare Web Analytics | Measures page views and referrers on audiblegenius.com |
Content and fonts — these see your IP address because your browser fetches files from them:
| Company | What they do |
|---|---|
| Vimeo | Hosts course videos embedded in Building Blocks and the studio |
| Google Fonts | Serves the typeface our sites use |
| Font Awesome (Fonticons) | Serves the icons in the course apps |
| Cloudflare and jsDelivr CDNs | Deliver shared code libraries our apps use |
Monitoring and reviews:
| Company | What they do |
|---|---|
| Monti APM | Watches the course apps for errors and slow pages. Receives anonymized IP addresses, your browser details, your account id if you are signed in, and JavaScript error reports including the page the error happened on. |
| Repuso (OnClick Solutions Ltd) | Serves the star-rating badge on syntorial.com. Sees your IP address, browser and device details when the badge loads. Based in Israel; their servers are in the United States. |
| Google reCAPTCHA | Protects our contact form from spam. Loads when you open the form and sets Google cookies. |
| Meteor Galaxy | Hosts the course apps. All traffic passes through them, so they see every request. |
| Cloudflare R2 | Stores shared studio sessions, including the artist name you choose when sharing one. |
Our embedded players. The interactive players we embed in our own pages — and that you may encounter on other sites — send usage data to Cloudflare Analytics Engine, which we copy daily into Google BigQuery. We record the page the player was embedded on, your browser, and the country Cloudflare infers from your connection. The player itself sets no cookies. On our own websites, that activity is joined to your existing Google Analytics identity for that visit.
We also disclose information where the law requires it, or to establish or defend legal claims.
Where your information goes
We are a US company and most of our suppliers are in the United States, so if you are outside the US your information will be transferred there. The US does not have an equivalent data-protection regime to the EU or UK. Where we transfer personal information out of the EEA or UK, we rely on the European Commission’s Standard Contractual Clauses or an equivalent safeguard in our agreements with those suppliers.
How long we keep it
| Type | Retention |
|---|---|
| Account and course progress | For as long as you have an account, and then until you ask us to delete it |
| Purchase and tax records | Seven years, because accounting law requires it — this survives an account deletion |
| Support tickets | Three years |
| Newsletter subscription | Until you unsubscribe |
| Analytics data | Up to 26 months in Google Analytics; our own course analytics are kept pseudonymously without an expiry |
| Server and security logs | Up to 12 months |
Your rights
Everyone, wherever you live, can ask us to: tell you what we hold about you; correct it; delete it; give you a copy in a portable format; or stop sending you marketing. Email [email protected]. We will answer within 30 days, and we will not charge you or treat you worse for asking.
We need to be confident you are who you say you are before we act, so we may ask you to confirm from the email address on the account.
If you are in the EU, EEA or UK, you additionally have the right to object to processing based on legitimate interests, to ask us to restrict processing, to withdraw consent at any time, and to complain to your national data protection authority.
If you are in California, you may also ask us to stop sharing your information for cross-context behavioral advertising, and to limit the use of sensitive personal information.
If you are in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island or Montana, you may also opt out of processing for targeted advertising and profiling, and appeal if we refuse a request.
If you are in Brazil, under the LGPD you may additionally ask us to confirm whether we process your information, anonymize or block unnecessary data, learn who we have shared it with, and know the consequences of refusing consent.
Your choices
- Marketing email — every newsletter has an unsubscribe link, or email us.
- Advertising and analytics tracking — email [email protected] and we will opt you out. We are building a self-service control and will link it here when it exists; until then a person handles each request.
- Cookies — your browser can block or delete cookies. Blocking them will break signing in.
- Closing your account — email us and we will delete your account and course progress, keeping only what tax law requires.
Children
Our products are not aimed at children under 13 and we do not knowingly collect their information. If you believe a child has given us personal information, email us and we will delete it.
Security
We use encryption in transit, store passwords only as hashes, restrict internal access to the people who need it, and keep our systems patched. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects you, we will tell you and the relevant authority as the law requires.
Changes
When we change this policy we will update the date at the top. If a change materially affects how we use your information, we will tell you directly rather than relying on you noticing. Where a change needs your consent, we will ask for it.