Privacy and safety

Ostinato holds children’s practice, notes and recordings, so we’ve built it to be careful with them from the start. Here’s the short version.

In the app

• Stored in the UK. Practice, notes, messages and recordings are kept in the UK, with Google Firebase. Firebase’s sign-in service runs globally, so email addresses may also be processed in the US, with the safeguards UK law requires.
• Only the right people. Families see only their own child; teachers see only their own pupils. This is enforced on our servers, not just in the app, and checked by automated tests.
• Recordings stay private. They can’t be reached by link, and they’re automatically deleted a year after they’re made.
• No ads, no tracking, no analytics. Nothing about children is used for anything except their practice.
• Follows the Children’s Code. Private by default, no profiles, no sharing, no profiling, no nudges to use it more.
• No family passwords. Families join from an invitation and sign in with a code we email them. Sessions end after 30 days.
• In your control. Families can delete their account in the app. Teachers can remove access, messages or recordings, download a pupil’s data for their family, or delete a pupil entirely.

Who’s responsible: each teacher decides to use Ostinato for their pupils, so they’re the data controller; Ostinato looks after the data for them as their processor. Read the full privacy notice for families and the terms for teachers.

On this website

This site doesn’t use cookies, analytics or anything that tracks you. It’s hosted by Google Firebase, which keeps routine technical logs (such as IP addresses) for a limited time to run and protect the service. If you email us, we use your email address only to reply.

Questions

Email hello@ostinatoapp.co.uk. Ostinato is run by Alex Scrowther, a sole trader in the UK.