Effective Date: March 6, 2026
Last Updated: April 19, 2026
Harmonize LLC ("Harmonize," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Harmonize platform, including our website, mobile applications, and related services (collectively, the "Service").
By using the Service, you consent to the practices described in this Privacy Policy.
Teacher Data:
Parent/Guardian Data:
Student Data:
Student data is provided by their teacher or parent/guardian, not collected directly from students.
Content You Upload:
Dispute Data:
When you use the Service, we may automatically collect:
For each electronic signature within the Service, we collect:
For each SMS consent, we record:
Mobile opt-in information and phone numbers collected for SMS communications will never be shared with, sold to, or transferred to third parties or affiliates for marketing or promotional purposes.
SMS to contacts without prior consent: If a contact's phone number is provided by a teacher without an active SMS consent record (either teacher attestation or direct opt-in), Harmonize does not send SMS communications to that number. The contact must provide explicit consent — by signing in to their portal, opting in through a teacher-initiated consent flow, or replying START to an initial message — before SMS delivery is enabled.
When you use AI-assisted features, we collect:
We use the information we collect to:
We do not sell your personal information.
Harmonize uses Stripe, Inc. to process all payments. We do not store, collect, or have access to:
We do store:
All sensitive financial data is handled by Stripe in compliance with PCI-DSS Level 1 standards. For more information, see Stripe's Privacy Policy.
ACH bank account verification is processed via Plaid. Plaid collects bank credentials directly — Harmonize receives a verified bank account token, not your bank credentials. Plaid's collection and use of your data is subject to Plaid's Privacy Policy.
Teachers may record offline payment methods (cash, check, or other) within the platform. Offline payments are not processed through Harmonize, and no financial data is transmitted or stored for these transactions beyond the teacher's records.
Harmonize offers AI-assisted features powered by third-party large language model (LLM) providers — OpenAI, Anthropic, Google, and Cerebras — accessed exclusively via their API endpoints.
What is sent to AI providers:
What is NOT sent to AI providers:
Data processing safeguards:
Harmonize does not allow users under 13 to access the Service. The Service is designed for use by adult teachers and parents/guardians.
Student access to the Service is initiated by the teacher or parent/guardian who adds the student's contact information (such as a phone number or email address). Teachers and parents/guardians are responsible for not granting platform access to children under 13. If a student's birthdate on record indicates they are under 13, magic link login access is blocked.
Student information — including names, lesson details, and progress records of minors — is provided to Harmonize by the student's teacher or parent/guardian. This information is used solely to provide the Service (scheduling, progress tracking, and billing).
Parents' Rights:
If we discover that we have inadvertently collected personal information directly from a child under 13 without verified parental consent, we will delete that information promptly.
We do not sell your personal information. We may share your information with:
We use third-party services to operate the platform:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe ⁎ | Payment processing and payouts | Transaction data, payer info |
| Twilio ⁎ | SMS message delivery | Phone numbers, message content |
| Firebase / Google Cloud ⁎ | Infrastructure, database, and authentication | All service data (encrypted at rest and in transit) |
| Plaid | ACH bank account verification | Bank account tokens |
| PostHog | Product analytics | Usage data, anonymized interactions |
| Sentry | Error monitoring and session replays | Error context, session recordings |
| OpenTimestamps | Signature timestamp verification | Document hashes (no PII) |
| OpenAI, Anthropic, Google, Cerebras ⁎ | AI features (via API) | Conversation context, relevant user data |
| Vercel | Website hosting | Web traffic data |
⁎ These services may receive student contact information (such as name, phone number, email, or lesson details) when necessary to perform their function — for example, to send SMS reminders, process payments that reference a student's lessons, or provide AI-assisted scheduling. Services without this marker do not receive student-identifying information.
These providers only access your data as necessary to perform their services and are bound by their own privacy policies and, where applicable, data processing agreements.
We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
If Harmonize is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We may use advertising and marketing tools — such as tracking pixels, conversion APIs, and retargeting tags — to measure campaign performance and reach prospective users. These tools may share anonymized or pseudonymized usage data (such as page visits or feature interactions) with advertising platforms. We do not sell your personal information to advertisers.
We implement reasonable technical and organizational measures to protect your information, including:
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
In the event of a data breach affecting your personal information, we will notify affected users without unreasonable delay and in compliance with applicable state and federal law. Notification will include the nature of the breach, the types of data potentially affected, and steps you can take to protect yourself.
Depending on your location, you may have the following rights regarding your personal information:
To exercise any of these rights, contact us at privacy@harmonize.app. We will respond to your request within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To submit a request, email privacy@harmonize.app or use the contact information in Section 13.
The Service is operated in the United States. All data is stored on US-based infrastructure (Google Cloud / Firebase). By using the Service from outside the United States, you consent to the transfer and processing of your data in the United States.
We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service at least 30 days before the changes take effect. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
If you have questions or concerns about this Privacy Policy or our data practices, contact us at:
Harmonize LLC