The short version
Studio Baton is software that music teachers use to run their studios. Teachers enter information about their students — including children — so they can track lessons, homework, and payments.
We do not sell your data. We do not advertise. We do not use student information to train anything. Teachers own their studio's records. We store them and keep them available to the teacher and to the families that teacher approves.
If you are a parent and want to know what is stored about your child, ask your child's teacher first — they control that record. If you cannot reach them, contact us and we will help.
Who is responsible for what
The teacher is the data controller. The teacher decides which students to enroll, what information to record about them, and who in the family can see it. The teacher is responsible for obtaining any consent required from a parent or guardian before entering a child's information into Studio Baton — normally as part of their own studio enrollment or registration process.
Studio Baton is the data processor. We store and process that information on the teacher's instruction and for the purpose of running their studio. We do not decide what goes in, and we do not use it for our own purposes.
If you are a teacher using Studio Baton, that responsibility is yours. It is stated again in our Terms of Service.
What we collect
From teachers, when you create an account
- Name and email address
- Studio name
- Password (stored by Google Firebase Authentication; we never see it)
From teachers, about their students
- Student first and last name
- Instrument, lesson day and time, lesson length, lesson fee
- Date of birth or age, school and grade
- Start date and, if applicable, end date
- Whether the student is under 18
- Parent or guardian name, phone number, and email address
- Lesson attendance, lesson notes, and homework assignments
- Payment status, amounts recorded, and payment method noted by the teacher
- Any free-text notes the teacher chooses to add
From students and parents who create their own account
- Name and email address
- Password (as above)
- Messages sent through the in-app chat
From anyone who fills in a teacher's enrollment link
The enrollment form is open to the public so a family can submit their details without an account. It collects the student information listed above and sends it to that teacher for approval. We do not use it for anything else.
Automatically
Very little. Studio Baton does not run analytics, advertising trackers, or third-party scripts beyond the ones needed to load the app. We store a small amount of information in your browser or on your device so you stay signed in and so the app works when your connection drops.
If you turn on Biometric Unlock, the fingerprint or face data never leaves your device and is never sent to us. Your device stores a credential locally and only tells the app "yes, this is the same person." We never receive or store biometric information.
Children's information
Studio Baton holds information about minors, and we treat it as the most sensitive thing in our database.
- Children do not sign up for Studio Baton on their own initiative. A teacher enters a student's record, or a family submits it through that teacher's enrollment link.
- We do not show advertising to anyone, and we do not build profiles of children.
- A student or parent account can only see that one family's own records. It cannot see other students in the studio, the studio's finances, or anything else.
- Teachers are responsible for obtaining parental consent before entering a child's information, as described above.
Studio Baton is designed for and directed at adult music teachers. It is not a general-audience app for children, and we do not knowingly allow a child under 13 to create an account without a parent or guardian setting it up and supervising its use.
Where it is stored and who can see it
Your studio's data is stored using Google Firebase (Firestore and Firebase Authentication), operated by Google LLC. Google acts as our infrastructure provider and processes the data on our behalf. Their privacy practices are described at firebase.google.com/support/privacy.
Access is limited by database security rules:
- A teacher can read and write only their own studio's records.
- A family with an approved account can read only their own student's record, lesson notes, and chat thread. They cannot write to it.
- No teacher can see another teacher's studio.
A very small number of people working on Studio Baton can technically access the database for support and maintenance. We access studio data only when necessary to fix a problem, and we do not browse it.
What we never do
- Sell or rent your information, or a student's information, to anyone
- Show you advertising, or let anyone advertise to you through Studio Baton
- Use student names, lesson notes, or family contact details to train machine learning models
- Share your data with other teachers or studios
How long we keep it
- While your account is open, we keep your studio's records so you can use them.
- When a teacher deletes a student, that student's profile and lesson notes are removed from the active studio.
- When you close your account, we delete your studio's data within 30 days of completing your request, except for anything we are required to keep by law.
- Payment records may be retained for up to 7 years, because teachers and we may need them for tax and accounting purposes.
Your rights, and how to delete your account
You can ask us to:
- Tell you what information we hold about you or your child
- Correct anything that is wrong
- Delete your account and its data
- Send you a copy of your data in a portable format
Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act or similar state legislation.
To delete your account and data, see our Close Your Studio page, or email support@studiobaton.app from the address on your account. You can also start the request from inside the app under Settings → Close My Studio.
Please be aware: data export and account deletion are currently handled manually by a person, not by an automatic self-service button. We respond to requests within 30 days. We would rather tell you that plainly than imply a button exists that does not.
Parents: the fastest route is your child's teacher, who controls that record directly. If that is not possible, write to us.
Security
We protect your data with database-level access rules, encrypted connections, and password authentication managed by Google Firebase. No system is perfectly secure, and we will not claim otherwise. If we ever become aware of a breach affecting your studio's data, we will tell you promptly and tell you what was affected.
Changes to this policy
If we change this policy in a way that matters, we will tell you in the app and by email before the change takes effect. We will not quietly reduce your protections.
Contact
Questions about this policy, or a request about your data: