Privacy Policy

This placeholder is published for transparency during early access; a counsel-reviewed policy will replace it before public launch. The commitments it will formalize are ones the product already implements:

• This website: no third-party trackers, no analytics cookies, self-hosted fonts. The contact form sends exactly what you typed, when you submit it, and nothing else.
• Children's data: students sign in with PINs, not email addresses. Student-scoped sessions are technically restricted beyond staff sessions, with COPPA-motivated database policies.
• Lesson audio: lesson transcription is processed only on our own servers, by a dedicated worker process. It is never sent to any third-party transcription or AI service, and it is never placed in cloud storage. The audio is deleted as soon as the transcription job finishes, whether it succeeds or fails.
• Practice recordings: these are a different thing — student-uploaded practice recordings are stored in our cloud object storage, private to that student's studio and family, and reachable only through signed, time-limited links for authorized signed-in users. They're permanently deleted when a user deletes them or through a data-deletion request.
• Payments: card details go directly to Stripe; we never see or store card numbers.
• Tenant isolation: each studio's data is segregated by database-level row security, not just application logic.