Privacy Notice

Sonely makes studio management software for music teachers and music schools. When this notice says "we" or "us", it means Sonely. You can reach us at hello@sonely.co.

From studios

When a studio signs up, we collect the owner's name and email address, the studio's name, region, time zone and language, any referral code, and a password, which we store only as a hash. For each teacher or staff login the studio adds, we keep their name, email address and what they're allowed to do. For the studio's membership we keep its seats and billing history; the payment processor that takes membership payments holds the card details.

From families, through their studio

Studios keep records about their students and families in Sonely: names, birthdays, contact details and addresses, lessons and attendance, notes, repertoire and practice logs, the files they upload, invoices and payments. Families can add some of this themselves in the family portal, such as practice logs, recordings and payment methods. We hold this information for the studio, as described below.

When you pay a studio online

Payments go through the studio's own Stripe or PayPal account. Card and bank details are typed into the processor's own fields and held by the processor, never by Sonely. We keep a reference to a saved method, such as its brand and last four digits, and each payment's amount and status.

From visitors to this website

This website sets no cookies and runs no analytics or advertising trackers. If you send us a form, such as the newsletter sign-up or the contact form, we receive what you type into it. Like any website, the servers that deliver it receive technical details with each request, such as your IP address and browser.

When you use the app

We keep your sign-in sessions, with the device and browser each came from, so you can see them and sign them out. We record failed sign-in attempts to stop people guessing passwords, and we keep logs of what the app sends for the studio, such as emails, texts and webhooks.

• To run Sonely: sign you in, keep your studio's records, send the emails and texts the studio asks for, and take payments through the studio's processor.
• To keep Sonely safe: stop abuse, slow down repeated sign-in attempts and look into problems.
• To bill studios for their membership and to answer questions.
• To send product news, only if you asked for it. You can ask us to stop at any time.

We don't sell personal information, and we don't use families' information to advertise to them.

For the information studios keep in Sonely, the studio is in charge: it decides what to keep and why. In data protection terms, the studio is the controller and Sonely is its processor.

We use that information only to provide Sonely to the studio, as the studio asks. We look at it only to help the studio when it asks us to, to keep the service working and safe, or when the law requires it. Each studio's records are kept apart from every other studio's.

If you're a parent or student, your studio's own privacy notice tells you how it uses your information, and your studio is the first place to ask about it. If you write to us instead, we'll pass your request to the studio and help it answer.

We share personal information only with services that help us run Sonely, and only what each one needs:

• Payment processors. Stripe and PayPal take families' payments into each studio's own account, under their own terms. A payment processor also takes studios' membership payments.
• Email and text message delivery. Providers that deliver the emails and texts Sonely sends.
• Bot protection. Forms on studio websites use Cloudflare Turnstile to check that the sender is a person.
• Maps and receipts. OpenStreetMap finds the address a studio types for the map on its website, and a text-recognition service reads the receipts a studio uploads for its expenses.
• Hosting and storage. The providers whose servers run Sonely and keep its files.
• Tools a studio connects. When a studio creates an API key, adds a webhook, connects Zapier or adds analytics to its website, the information it chooses goes where the studio sends it.

We may also share information when the law requires it, or to protect someone's safety.

This website sets no cookies and runs no analytics or advertising trackers. The Sonely app uses a cookie to keep you signed in and remembers a few choices in your browser, such as your language. A studio may add its own analytics to its website. Our cookie policy lists them all.

Each studio's records are kept apart, sign-in can ask for a two-factor code, and payment details stay with the payment processor. Our security page explains how.

We keep a studio's information while it uses Sonely. When a membership ends, the studio's records stay so it can come back, and nothing in them changes. A studio can ask us to delete its account and its records at any time.

Some things go sooner: failed sign-in records after a day, webhook delivery logs after 30 days, and demo studios, with everything in them, 48 hours after they're made.

You can see and correct most of your own details in Sonely. You can also ask us for a copy of the information we hold about you, to correct it, to delete it, or to stop using it for something: write to hello@sonely.co.

If your information is in Sonely because a studio keeps it, ask the studio first; we'll help it answer. Depending on where you live, you may also be able to complain to a data protection authority.

Many music students are children. Their information is entered and managed by their studio, usually with a parent, and a studio may give a student their own login to the family portal. Children can't sign up for Sonely on their own, and we don't market to them.

If we change this notice, we'll update this page and the date at the top, and tell studio owners about changes that matter to them.

For questions about this notice or your information, write to hello@sonely.co.