Privacy
What Studio in Hand holds, who else sees it, and what you can do about it.
Last updated November 3, 2026.
Two different responsibilities
Studio in Hand is software that music teachers use to run their studios. A studio decides which families it teaches and what to record about them. This app holds that information for them.
So there are two people responsible for your information, and they are responsible for different things. The studio decides what to collect and why. Studio in Hand keeps it safe, does what the studio asks with it, and uses it for nothing else.
If you are a parent or a student, your studio is the first place to ask about your information. If they need something from us to answer you, we will give it to them.
What is held
About a teacher: their name and email address, their studio’s name, its timezone, the settings they choose, and a scrambled form of their password. The password itself is never stored and cannot be recovered — only replaced.
About a family: the family name, the adults’ names and email addresses, and a phone number and postal address where the studio has entered them.
About a student: their first and last name, their instrument, when they started and stopped, their lessons, practice recorded by them or a parent, notes their teacher writes, and any badges earned. A date of birth only if the studio enters one.
About money: invoices, payments, credits, refunds and the fees a studio pays to be paid online.
Card and bank details are never held by Studio in Hand. They are entered on Stripe’s own pages and stay with Stripe.
Children
Most students in a music studio are children, and their names, lessons and practice are in this app because their teacher put them there.
A student can also have a login of their own — but only a parent can create one. The invitation is sent by the parent, from inside their own account, and the app records who sent it and when. A teacher cannot make an account for somebody’s child, and neither can we. That is the whole reason the invitation works the way it does.
A student’s login can see their own lessons, their own practice and their own badges. It cannot see invoices, payments or anything to do with money, and it cannot see another student — not because those things are hidden from the page, but because the account is refused at the door.
The parent who created the login can end it at any time, from the same screen they made it on. They do not have to ask the studio or us.
Nothing in this app is advertised to children, and nothing about a student is used to build a profile of them.
Who else sees it
Four companies hold some of this information in order for the app to work. They are named here rather than described, so you can look them up.
| Who | What they do | What they hold |
|---|---|---|
| Render | Runs the app and holds the database and its backups. | Everything the app stores. |
| Stripe | Takes payments and holds card and bank details. | A payer’s name, email, and the payment details they enter on Stripe’s own pages. Also the invoice number and amount, so the studio can tell what was paid. |
| Resend | Delivers the email this app sends. | The address a message goes to, and the message itself. |
| Better Stack | Watches whether the app is up, keeps its logs, and collects faults. | Server logs, and faults with the studio’s name attached. Requests and signed-in users are stripped from faults before they are sent. |
Nobody else. Information from this app is never sold, never rented, never used to advertise anything, and never handed to anyone for their own purposes.
Email and notifications
The app emails invoices, lesson reminders, and messages a studio chooses to send. Those go to the addresses the studio has entered.
A parent or teacher can also turn on notifications on their phone. Those are delivered by the browser’s own notification service and carry only what is on the screen of the message.
How long it is kept
A studio’s information is kept for as long as the studio exists. Billing records stay while the studio does, because a studio needs its own history.
When a studio deletes itself, everything of theirs goes. What survives is a single line recording that a studio was deleted, when, by which email address, and how many rows went — naming no family, no student and no child.
Getting a copy, and getting rid of it
A studio can download everything this app holds about them, in one file, from Settings. It covers every family, lesson, bill, payment and note.
A studio can also delete itself, from the same place. The owner has to type the studio’s name, and the subscription is canceled at Stripe first — a studio deleted while its card is still being charged has nobody left to notice.
A parent can download what the app holds about their own family, and can end their child’s login themselves.
Keeping it safe
Every studio’s information is separated inside the database itself, by the database, rather than by the app remembering to ask the right question. One studio cannot read another’s even if the app asks wrongly.
Passwords are stored scrambled and cannot be read back. Everything travels encrypted. The database is backed up, and the backups have been tested by restoring one.
When something goes wrong, the fault is recorded so it can be fixed — with the request it happened during, and the identity of whoever was signed in, deliberately stripped out before it is sent anywhere.
No system is perfect, and a promise that one is would be worth nothing.
Where this is
The app and its database run in the United States, and the companies above are United States companies. If you use it from elsewhere, your information is held in the United States.
Changes
If this document changes in a way that matters, the date at the top changes and studios are told by email. Minor corrections do not move the date, because a date that moves every week teaches people to ignore it.
Asking about any of this
Write to privacy@studioinhand.com.
If you are a parent or a student, your studio can answer faster than we can, because the information is theirs. Write to us if they cannot.