Privacy Policy

Effective October 18, 2026

Maestro's Sidekick ("the app", "we") is a classroom tool for band and music directors. Teachers use it to take attendance, assess students, build seating charts, plan lessons, and communicate with students and families. This policy explains what information the app handles, why, and the choices you have.

In short: the app uses your information only to provide its features to you. We don't sell data, show ads, or use Google user data to train AI models. You can delete your data at any time.

Who uses the app

Accounts are for teachers, plus assistant teachers a teacher invites. Students and families don't create accounts or sign in. A student may view their own progress page, and a class "showcase" page, if their teacher shares the link. If their teacher turns it on, students can also send a classmate a short affirmation from their page. Students and families may receive emails their teacher sends through the app.

Teachers use the app on behalf of their school. The student information they enter or import belongs to the teacher and school. We handle it only to provide the service, following the teacher's instructions.

Information the app handles

Your account

When you sign in with Google, we receive your name, email address, and profile picture to create and identify your account.

Information you enter or import

Classes, schedules, and marking periods.
Student rosters: names, preferred names, instruments, grade, school ID numbers, student and guardian email addresses, guardian names, and birthdays.
Classroom records you create: assessment scores and notes, attendance, hall passes, behavior and leadership notes, accommodation (IEP) notes, instrument inspections, seating charts, curriculum plans, lesson agendas, theory quizzes, exit tickets (including students' own ratings of how well they understand a lesson), and newsletters.
Files you upload or choose, such as event flyers (PDF), quiz images, and play-along tracks.

Information students send from their page

Affirmations (only when the teacher turns them on): the classmate's name as the student typed it, a short message (up to 300 characters), and the reward they chose. Each one goes only to their teacher first. The teacher approves it, declines it, or sends it back with a note, and only approved affirmations appear on the classmate's page. Students can send a limited number each week.
Student number (only when the teacher locks progress pages): a student types their school ID number to open their own page. Their device turns it into a scrambled code (a one-way hash) to find their page. The number itself isn't stored or sent anywhere.
Video assessments: students may record themselves playing and turn the video in through their teacher's Google Classroom assignment or a Google Form the app created for that teacher. The videos stay in the teacher's Google Classroom and Google Drive. The app opens them only so the teacher can watch and assess them, and doesn't copy them anywhere else.

Information we do not collect

The app doesn't use advertising, analytics, or tracking services. It doesn't read your email, and it can't see Google Drive files you haven't chosen or created through the app.

Google user data

If you connect Google, the app asks for these permissions. Each one is used only for the purpose listed.

Permission	What the app does with it
Google Classroom courses (read-only) `classroom.courses.readonly`	Lists your courses so you can choose which ones to import and keep in sync.
Classroom rosters and student emails (read-only) `classroom.rosters.readonly`, `classroom.profile.emails`	Imports student names and email addresses into your class roster, and adds new students when you re-sync.
Classroom coursework `classroom.coursework.students`	Posts theory and playing assignments you create to your Classroom course, sets the due date you choose, posts grades when you send them, and lists the videos students turned in on those assignments so you can watch and assess them.
Google Forms `forms.body`, `forms.responses.readonly`	Creates the Google Form for a theory quiz, assignment, or exit ticket you build, and reads students' responses to those forms so the app can record their scores, show you their answers, and list videos students uploaded to the app's video forms. Once a day it checks your open assignments for late responses and shows you a count; it never records them without you.
Send email as you `gmail.send`	Sends emails you write or approve (assessment feedback, letters to families, newsletters) from your Gmail account. The app can't read, search, or delete your email.
Google Drive files you choose or create with the app `drive.file`	Opens files you pick with Google's file picker (such as play-along tracks and recordings you attach to curriculum cards or play in the seating chart jukebox), keeps the app's "Maestro Audio" folder in your Drive for those files, and manages the forms the app created. It has no access to your other Drive files.

To keep you connected to Google between sessions, our server stores an encrypted Google connection token (a refresh token) for your account. Only our server can read it. It is used only for the Google actions you start in the app and the once-a-day late-submission check of your own assignment forms, and it is never shared. When you sign out, it is revoked and deleted (the automatic sign-out after a long period of inactivity keeps it, so you don't have to reconnect the next morning). You can also remove the app's access at any time in your Google Account under Security → Third-party access. The short-lived access token the app uses for each Google request is kept in your browser.

Limited Use. Maestro's Sidekick's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used to develop, improve, or train generalized artificial intelligence or machine learning models.

AI features

Some features use AI to draft text for you, such as newsletters, student snapshots, progress-report letters, learning targets, and quiz questions. When you use one, the information needed for that draft (for example, a student's first name, scores, and your notes) is sent through our server to Anthropic's Claude API to generate the text.

Anthropic processes this data only to return the response. Under its commercial terms, it doesn't use it to train its models. AI features are optional: nothing is sent unless you start one. Always review AI-written text before you send or share it.

How information is shared

We don't sell or rent personal information, and we don't share it for advertising. Information is shared only:

With service providers that run the app: Google Firebase and Google Cloud (sign-in, database, file storage, hosting, and server functions), Google Workspace APIs (the Classroom, Forms, Gmail, and Drive features above), and Anthropic (AI features).
With assistant teachers you invite: they can see and work with the classes you share with them.
On progress pages you publish: anyone with a student's private page link (and their student number, if you lock pages) can see that student's own page: their nickname (or first name if no nickname is set), instrument, rank, badges, progress, the work and notes you share with them, and affirmations you approved. Classmates' nicknames appear on the class progress graph. If you publish a class showcase page, anyone with its link can see each student's nickname, instrument, rank, badges, and progress. Taking pages down removes this information from the links. Saved and year-end copies are visible only to you, and older public copies stay at their links until you delete them in Settings.
When required by law, or to protect the safety of users or the service.

Where information is stored and how it's protected

Data is stored in Google Cloud's United States region (us-central1). It's encrypted in transit and at rest. Access is limited to your signed-in account and the assistant teachers you invite, and it's enforced by database security rules.

Keeping and deleting your information

Your data is kept while your account is active.
You can delete your data in the app at any time: Settings → Data → Reset data.
To delete your account and all of its data, email us at the address below. We'll delete it within 30 days.
You can remove the app's access to your Google account at any time at myaccount.google.com/permissions.

Students and children

The app is used by teachers acting for their school. Students don't create accounts. The only information students enter directly is described under "Information students send from their page" above, and it goes to their teacher. The teacher and school are responsible for any consent their policies or laws (such as FERPA or COPPA) require. If you're a parent and have a question about your child's information, please contact your child's teacher or school. You may also contact us.

Browser storage

The app stores small amounts of information in your browser, such as your session and display preferences, so it works properly. It doesn't use advertising or tracking cookies.

Changes to this policy

If we change this policy, we'll update the date above. If a change affects how we use Google user data or student information, we'll tell users in the app before it takes effect.

Contact

Questions or deletion requests: support@maestrosidekick.com