Privacy policy

Tutti Studio (“Tutti”, “we”) runs this website and app. Questions about privacy go to hello@tuttistudio.app.

A teacher sets up their studio and adds their students and families. Tutti stores that information so the teacher can run lessons and invoices, and so the family can see their own practice plan. Each studio's information is kept separate: a family sees only their own children, and a teacher sees only their own studio.

• Teachers: name, email, password (stored securely by our login provider; we never see it), studio name and state, and optionally an ABN, GST status and bank account details for invoices.
• Students: name, instrument, level, and optionally date of birth; weekly lesson time and price; lessons, lesson notes and practice plans written by their teacher; practice they log; and their practice companion.
• Parents and adult students: name, email and optionally phone number, plus the invoices sent to them and whether they've been paid.
• Payments: card details are entered on Stripe's pages and held by Stripe. Tutti never sees or stores card numbers.
• Usage: anonymous page-view counts (no cookies, nothing that identifies you) and technical logs needed to keep the service running and secure.

Children don't need an email address: they use Tutti through a login link sent to their parent.

• To run the service: calendars, lesson notes, practice tracking and invoices.
• To send emails the service needs: login links, invites, lesson notes, a weekly practice summary for parents, and invoices and reminders.
• To bill teachers for their subscription, and to let families pay their teacher by card.
• To fix problems and keep accounts secure.

We don't sell personal information, show ads, or use it to market other products.

We use a few service providers to run Tutti. They may only use the information to provide their service to us.

• Supabase: our database and logins. Data is stored in Sydney, Australia.
• Vercel: hosts the app (in Sydney) and counts anonymous page views.
• Resend: sends our emails, so email addresses and email content pass through it.
• Stripe: handles teacher subscriptions and family card payments.

Some of these providers are based overseas, so information may be processed in the United States and Japan (where our emails are sent from) as well as Australia.

We use cookies only to keep you logged in. The app also saves a running practice timer and whether you've dismissed the “add to home screen” tip in your browser's own storage. There are no advertising or tracking cookies.

We keep a studio's information while its account is open. A teacher can remove a student at any time, which deletes that student's lessons, notes and practice history; their parent's record and invoices stay, because teachers may need invoices for their records. To close a studio and delete its information, email us.

Families can ask their teacher to correct or remove their details, or contact us directly at hello@tuttistudio.app. We'll respond within 30 days. If you're not happy with how we handle a privacy concern, you can complain to the Office of the Australian Information Commissioner.

Information is encrypted in transit, access is limited to each studio and family, and passwords are handled by our login provider. No system is perfectly secure; if a breach is likely to cause serious harm, we'll tell the people affected and the regulator.

If we change this policy in a way that matters, we'll email teachers before it takes effect. See also our terms of use.