Privacy Policy

This Privacy Policy explains how Nurik, LLC ("we" or "us") collects, uses, and protects your information when you use Music Theory Bootcamp at musictheorybootcamp.com (the "Service").

Information You Give Us

When you create an account we collect:

• Your name and email address. The email is your login and how we reach you about your account.
• Your password. We never store it. It is hashed with bcrypt before it is saved, and the original cannot be recovered from what we keep, by us or by anyone else.
• Support messages. If you open a support ticket, we store the subject, your message, and our replies.
• Reviews. If you choose to leave a review, we store your rating, anything you wrote, and whether you gave permission to publish it. Leaving one is optional and you can decline the prompt permanently.

Information We Record As You Use the Course

• Your progress. Which days you have passed and when, so the course can unlock the next day and show you where you are.
• Basic activity events. Sign ups, logins, lesson views, lesson completions, and enrollment steps. We use these to see which lessons people finish and which ones they get stuck on, so the course can be improved.
• Page views. When a page is opened we record which page it was, and the website that linked you to us if there was one. We record the page address only, never the full web address you came from. If you are signed in, the view is linked to your account; if you are not, it is anonymous and nothing is stored that identifies you or your device.

We do not use advertising trackers, third party analytics scripts, or tracking pixels. All of the above is counted by our own software on our own servers, and none of it leaves them. We do not build a profile of you, we do not follow you to other websites, and we have nothing to sell to anyone who would. Fonts are served from our own servers, so loading a page does not tell any font provider that you visited.

Cookies

We use a single cookie, mtb_session, to keep you signed in. It holds a signed token identifying your account, is marked HttpOnly so scripts on the page cannot read it, and expires after 30 days. There are no advertising or analytics cookies. If you block it you will not be able to stay signed in.

Separately, the site uses your browser's session storage to remember which pages this tab has already been counted for, so that moving back and forth between tabs is not counted as new visits. It holds no identifier, it is never sent to us, and your browser discards it when you close the tab.

How We Use Your Information

• To create and secure your account and keep you signed in
• To save your progress and unlock lessons as you pass each day
• To answer your support tickets
• To understand which parts of the course work and which need improving
• To contact you about your account, your access, or a review request
• To meet legal, tax, and accounting requirements

Who We Share It With

We do not sell your personal information. We share it only with the providers needed to run the Service:

• Railway, which hosts the application and the database on servers in the United States.
• Stripe, if and when paid enrollment opens. Payments would be handled entirely on Stripe's systems. Card numbers never reach our servers and we never store them.
• Legal authorities, where we are required by law to disclose information.

How Long We Keep It

We keep your account and progress for as long as your account exists, so that returning to the course later still shows your place. If you ask us to delete your account we remove your personal information, your progress, your tickets, and your review. We may keep records we are legally required to retain.

Data Security

The Service is served over HTTPS, passwords are hashed, and session cookies are HttpOnly. We take reasonable administrative, technical, and physical measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Choices

• Request a copy of the personal information we hold about you
• Request that we correct or delete it
• Decline the review prompt permanently, using the link inside it
• Opt out of account emails, though we may still need to contact you about your access

To exercise any of these, email us using the details below.

Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it. Learners under 18 should have a parent or guardian agree to these terms on their behalf.

Changes to This Policy

We may update this policy from time to time. The current version will always be posted on this page with the date it was last updated.

Contact Us

Nurik, LLC
201 Rue Beauregard STE 202
Lafayette, LA 70508
hello@nurik.ai