Privacy Policy
Last updated: October 18, 2026
MusioStudio is software that music teachers use to run their studios. Students record short practice takes, their teacher listens and replies, parents follow along, and lessons are booked and reminded about in one place. This policy explains what we collect, why, who can see it, and what you can ask us to do about it.
It is written to be read, not to be survived. If anything here is unclear, write to us at [[OPERATOR EMAIL]] and we will answer in plain words.
Who we are
MusioStudio is operated by [[OPERATOR LEGAL NAME]].
- Post: [[OPERATOR POSTAL ADDRESS]]
- Phone: [[OPERATOR PHONE]]
- Email: [[OPERATOR EMAIL]]
Each studio on MusioStudio is run by its own teacher. The teacher decides who joins their studio, what work is set and when lessons happen; we provide and operate the software that holds it. Both of us are responsible for the information described here, and you can reach us at the address above about either.
What we collect
From the teacher, when a student joins: the student's first and last name, an email address, and optionally a mobile number. A parent may supply the student's email address instead of the teacher, in which case the teacher does not see it.
From the student, as they use the app: audio recordings of them playing their instrument; photographs of written work, where a lesson asks for one; written practice notes; their progress through the work set for them; and the result of setting up their microphone (whether the level was right, and the name of the microphone their device reports).
For lessons and bookings: each student's lesson length, whether lessons are online or in person, and a meeting link if the teacher gives one; the weekly lesson time; and the history of requests, skips, moves, cancellations and makeup credits. A teacher's teaching hours and days off are kept with their studio.
From the teacher, about themselves: their name and email address, and — only if they choose to sign in with Google or connect Google Calendar — the information described under Google accounts and Google Calendar below. A teacher may also dictate notes by voice; that audio is turned into text and is not kept.
If anyone reports a problem: what they wrote and the version of the app they were using. An adult may attach a screenshot. A student under 18 cannot.
Automatically, whenever anyone signs in: a sign-in identifier, the device token if notifications are switched on, an IP address, and the date they were last active. This is the ordinary machinery of keeping someone signed in and sending the notifications they asked for.
We do not collect a date of birth, a home address, a location, a payment detail from any family, or anything at all from a student that a lesson has not asked for.
What we use it for
- To run the lessons: setting work, receiving takes, returning a teacher's reply.
- To book lessons and keep everyone on time: weekly times, skips, moves, makeups, a reminder the day before, and a Join button for online lessons.
- To tell a family what has happened — a review came back, a lesson moved — through the emails and notifications they can control on their Notifications page.
- To keep the service working and secure, and to fix what someone reported.
We do not use any of it for advertising. There is no advertising on MusioStudio, no ad network, no analytics service, and nothing that follows a visitor to any other website. We do not sell personal information, and we do not share it with anyone for their own purposes.
Who else can see it
Inside a studio: the teacher sees their own students' work and lessons. A parent sees the work and lessons of the children they are linked to. A student sees their own. One family never sees another family's lessons — only that a time is taken.
Nobody else, unless a family asks for it. A studio can run an optional practice board that shows first names and practice counts to the other families in that same studio. It is off unless the teacher enables it, off again unless the family opts in, and for a student under 18 only a parent can opt in. A family can leave at any time.
Our service providers, who process information on our instructions and may not use it for anything of their own:
| Who | What they do | What they hold |
|---|---|---|
| Google (Firebase, Google Cloud) | Sign-in, database, file storage, notifications, scheduled jobs and reminders | Everything described above |
| Google Cloud Speech-to-Text | Turns a teacher's dictated notes into text | The teacher's dictation, only while it is converted |
| Resend | Sends our email | Names and email addresses on the messages we send |
A student's recordings never leave Google Cloud Storage. They are not sent to any transcription, analysis or artificial-intelligence service, and they are not used to train anything. They are played back by the student, their teacher, and the parents linked to that student, and by nobody else.
We will also disclose information if the law requires it, or to protect the safety of a person or the security of the service.
Google accounts and Google Calendar
This section is about information we receive from Google, and it applies only to teachers who choose to use it. Students and parents never connect a Google account to MusioStudio.
Signing in with Google. If a teacher signs in with Google, Google tells us their name, email address and a Google account identifier. We use these only to sign them in.
Connecting Google Calendar. A teacher can connect their own Google Calendar from their Schedule settings. If they do, MusioStudio:
- adds, changes and removes the lesson events it created, so the teacher's lessons appear in their calendar and move when a lesson moves. It never changes or deletes any other event;
- reads when the teacher is busy, so families are never offered a lesson time that clashes with something else in the teacher's calendar. We look only at whether a time is taken; the titles, descriptions and guests of the teacher's other events are not stored;
- stores the connected Google address, a sign-in token from Google that lets the connection keep working, and the identifier of each lesson event it created — plus a Google Meet link, if the teacher turns Meet links on.
This information is used only to keep the teacher's lessons and calendar in step. It is never shown to students or parents (apart from a Meet link for their own lesson), never shared or sold, never used for advertising, and never used to train any artificial-intelligence model. Nobody at MusioStudio reads it except where the teacher asks us to help, where the law requires it, or to keep the service secure.
MusioStudio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting. A teacher can disconnect at any time from Schedule › Settings. That revokes our access with Google straight away and deletes the stored token; the teacher chooses whether their upcoming lesson events are removed from their calendar or left there. Access can also be removed from the Google side at myaccount.google.com/permissions.
Children under 13
MusioStudio is used by children, and their information is treated with the extra care the Children's Online Privacy Protection Act requires.
We ask for a parent's permission before a child under 13 records anything. We email the parent at the address their studio holds for them, explaining exactly what we would collect and why, with a single link. Clicking that link is the permission, and we send a confirmation straight back to the same address — so if anyone else ever clicked it, the parent would know.
It is given once, before the child starts, and covers every recording from then on rather than being asked again at each lesson. Until it is given, the child cannot record: our system refuses the work, not merely the button.
If we later want to do something materially different with a child's information, we will tell the parent and ask again.
A parent can say no, and can change their mind later. Permission can be withdrawn at any time — see Your rights as a parent below. We will stop collecting that child's information and delete what we hold. A child cannot take part in lessons without it, because recording is how the lessons work — that is the only consequence.
We ask children for as little as possible. No child is asked for anything beyond what their lesson needs, and nothing a child submits is ever made public. Students under 18 never send video. A child under 18 cannot book, skip or move a lesson — a parent does that — and cannot attach a screenshot to a problem report.
We do not knowingly let a child make information public. There is no open chat, no public profile, and no posting anywhere that anyone outside the studio can see.
How long we keep it
We keep a student's work while they are studying, because the point of it is to be looked back on.
- Recordings and submitted work: kept while the student is active in a studio, and for 12 months after they become inactive, then deleted.
- Lesson bookings (times, skips, moves, makeups): kept with the student's record, on the same terms.
- Account details (name, email, mobile): kept while the account exists.
- A Google Calendar connection: the token is deleted the moment the teacher disconnects.
- When a family or teacher asks us to delete an account, we delete it and everything under it within 30 days.
We do not keep a child's personal information indefinitely.
Your rights as a parent
If your child uses MusioStudio, at any time you may:
- see everything we hold about them;
- have it deleted;
- withdraw your permission and stop any further collection.
Withdrawing takes one press and happens immediately — sign in, open Notifications, and use Withdraw permission under your child's privacy. Your child stops being able to record that second, their teacher is told, and we email you a confirmation.
For the other two, write to [[OPERATOR EMAIL]] from the address your studio has on file for you, or ask your teacher, who can pass the request on. We check that we are dealing with the child's parent before we act — deleting is permanent, so we would rather be sure — and we will not make that harder than it needs to be. We answer within 30 days.
How we protect it
Every recording, photograph and document is held in access-controlled storage and served only to a signed-in person the rules allow. Nothing is in a public folder and nothing is reachable by guessing a web address. Booking and calendar information is reachable only through our own server, never directly from a browser, and Google sign-in tokens are held only on the server. Access rules are tested automatically on every change. We limit who inside our own organization can reach any of it, and we choose service providers who commit in writing to protecting it.
No system is perfect, and we do not pretend otherwise. If something goes wrong that affects you, we will tell you.
Changes to this policy
If we change how we handle children's information, or Google user data, in a way that matters, we will tell the people affected directly rather than quietly updating this page, and where the law requires it we will ask permission again.
Contact
[[OPERATOR LEGAL NAME]] [[OPERATOR POSTAL ADDRESS]] [[OPERATOR PHONE]] [[OPERATOR EMAIL]]