Privacy Policy
Last updated: October 25, 2026
Your privacy matters to us. Music with Kira is a small, independent business run by Kira Rappaport in Los Angeles, California. In this policy, "Kira," "we," and "us" mean Kira Rappaport doing business as Music with Kira. This policy explains what information we collect through this website (the "Site") and in connection with our classes and events, how we use it, and the choices you have.
Our basic principles:
- We only ask for information we actually need.
- We keep information only as long as we have a reason to.
- We don't sell your information, we don't run ads, and we don't track you around the web.
- We explain all of this in plain language.
What this policy covers
This policy applies to information we collect when you visit the Site or email us about classes, private classes and parties, teacher workshops, family concerts, or anything else. It doesn't cover third-party sites and services that we link to or embed (see "Links and music services" below).
Information you give us
- Email and class registration: If you email us, or register for or RSVP to a class, we receive your email address and whatever you choose to tell us, such as your name, your child's first name and age, and which class you'd like to join. Please don't send us information you'd rather keep private, such as sensitive health details, unless it's needed to help your family take part.
- Payments: Class payments are arranged directly with Kira. The Site itself doesn't process payments or collect card numbers.
Information collected automatically
Our Site is delivered through Cloudflare, a web infrastructure provider. As with almost every website, standard technical information is processed to deliver the Site and keep it secure, such as your IP address, browser type, device type, the pages you request, and the date and time.
We use Cloudflare Web Analytics to understand how many people visit the Site and which pages they look at, so we can see what's useful and improve it. Cloudflare describes this as a privacy-focused analytics service: it doesn't use cookies or similar browser storage for analytics, and it doesn't build profiles of individual visitors or track you across other websites. It reports aggregate information such as page views, referring sites, country, browser, and device type. You can learn more in Cloudflare's privacy policy.
We don't use advertising trackers, social media pixels, or Google Analytics on the Site. The one third-party feature that loads from another company's servers is the embedded Spotify player on the homepage, described under "Links and music services" and "Cookies" below.
Information about people who edit the Site
The small number of people who help edit the Site sign in with their Google accounts. For them, we receive the email address of that Google account to confirm they are allowed to make changes. Visitors don't need an account and can't sign in.
How we use information
- To reply to your messages and questions.
- To run our classes and events, for example confirming your RSVP and letting you know about schedule, weather, or location changes.
- To arrange private classes, parties, workshops, and concerts.
- To understand how the Site is used, using aggregate analytics, and to improve it.
- To keep the Site secure and prevent spam and abuse.
- To keep reasonable records and to comply with the law.
We only send you messages about things you've asked us about, or that relate to a class you've signed up for.
Legal bases (for visitors in the European Economic Area, Switzerland, and the UK)
We use your information because it's needed to respond to you or to provide the classes and services you ask for; because we have a legitimate interest in running and securing a small business and the Site; because the law requires it; or because you've given us your consent.
How we share information
We don't sell your personal information, and we don't share it for advertising. We share it only in these limited cases:
- Service providers: Companies that help us run the Site and communicate with you, only as needed to do their job. These are Cloudflare (hosting, security, aggregate web analytics, and storage of the Site's content) and Google (email, and sign-in for people who edit the Site).
- Legal and safety: If we believe in good faith that disclosure is required by law, such as in response to a valid court order, or is necessary to protect someone's safety or rights.
- Business transfers: If the business were ever sold or transferred, your information might transfer with it, and this policy would continue to apply.
- With your consent: When you ask or allow us to share it.
- De-identified information: Information that can't reasonably identify you.
We never publish your messages or your children's information.
Links and music services
The Site links to services such as Spotify, Apple Music, YouTube, YouTube Music, and Facebook so you can listen to Kira's albums or follow along. If you follow a link, that service's own terms and privacy policy apply, and it may collect information about you.
The homepage also includes an embedded Spotify player, so you can listen to Kira's music without leaving the Site. The player is provided and operated by Spotify, not by us. When the player loads, your browser connects to Spotify, which may receive information such as your IP address, device and browser details, and how you interact with the player, and may set its own cookies or use similar technologies on your device. Spotify handles this information under its own policies, and we don't control it or receive it. You can learn more in Spotify's privacy policy and Spotify's cookie policy.
Cookies
We don't set cookies for visitors to track you or personalize ads, and our analytics (Cloudflare Web Analytics) works without cookies. The Spotify player on the homepage is the exception: Spotify may set its own cookies and use similar technologies when the player loads, which we don't control (see "Links and music services" above). When someone who edits the Site signs in, we use a secure cookie that is strictly necessary to keep them signed in. Our service providers may use technical storage in your browser to deliver the Site securely. You can set your browser to block or delete cookies; the Site will still work, though the Spotify player may not.
How long we keep information
We keep messages and class correspondence for as long as we need them to respond to you, run the class you've joined, and keep reasonable records, and then we delete them or you can ask us to delete them sooner. Technical logs kept by our hosting provider are kept for the periods that provider sets.
Children's privacy
The Site is intended for parents, caregivers, and teachers, not for children. We don't knowingly collect personal information directly from children under 13. When we learn a child's name or age, it's because a parent or caregiver gave it to us to arrange a class, and we use it only for that purpose. If you believe a child has sent us personal information through the Site, email us and we'll delete it.
Security
No online service is 100% secure, but we take reasonable steps to protect information against unauthorized access, use, alteration, or destruction. Access to the Site's editing tools is limited to approved people who sign in with their Google accounts.
Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you;
- correct it;
- delete it;
- give you a copy of it in a portable format; or
- stop using it for a particular purpose.
If you're in the European Economic Area, Switzerland, or the UK, or in a US state with a privacy law such as California, you may have additional rights under local law, including the right to object to or limit certain uses, and the right not to be treated differently for exercising your rights. We don't sell or share personal information for advertising, so there is nothing to opt out of in that respect. You can also opt out of any messages from us at any time by telling us. If you're in the EEA, Switzerland, or the UK, you can also complain to your local data protection authority.
To make a request, email kirarappaport@gmail.com. We may need to confirm it's really you, for example by replying from the email address we have on file. If we decline a request, we'll explain why in writing, and you can appeal by replying to our message. If your appeal is denied and you live in a US state that allows it, you may contact your state attorney general.
Where information is processed
Kira is based in the United States, and our service providers may process information in the United States and other countries. By using the Site or contacting us, you understand that your information may be transferred to and processed in those places.
Changes to this policy
If we make changes, we'll post the updated policy here and change the "Last updated" date at the top. If the changes are significant, we'll try to let you know in another way as well, such as by email if you're in touch with us about a class.
How to reach us
Questions about this policy or your information? Email Kira at kirarappaport@gmail.com or write to Music with Kira, Los Angeles, CA.
Credit and license
This policy is adapted from the Privacy Policy of Automattic Inc., which is available on GitHub under a Creative Commons Attribution-ShareAlike 4.0 license. We changed it substantially to describe Music with Kira's own practices. This adapted policy is likewise available under the same Creative Commons Attribution-ShareAlike 4.0 license.