Children’s Privacy Notice — Cadence

Effective date: September 1, 2026

Consent notice version: parent-2026-09-01

This notice is for a parent or guardian before they grant consent for a child to use certain Cadence features. It supplements, and does not replace, the studio’s own privacy notice or the Cadence Privacy Policy. The studio has the direct relationship with the family and determines how it uses family and student information in Cadence.

Parents create and use family accounts. The primary parent account holder may review this notice and grant or revoke consent separately for each child and feature. Cadence records the notice version, typed signature, date and time, IP address, browser information, and a server-side verification basis for an online grant. An online grant is accepted from the authenticated primary parent account after the parent reviews the notice, chooses the relevant scope, and enters their typed signature. A saved payment method is not used as a consent-verification method.

Cadence’s controls are designed to support a studio’s consent process. They do not determine whether a particular studio’s use satisfies every legal requirement. The studio remains responsible for its own notices and practices, and Cadence remains responsible for obligations that law imposes directly on Cadence.

2. The choices you can make

Consent is separate for each of these features:

Student app access: lets a child use a PIN to log in, record practice, and use gamification features such as XP, badges, and streaks.
Practice recordings: lets a child upload practice audio or video for playback by authorized family members and the child’s studio.
Student-initiated messaging: lets a child send messages to studio staff.
Lesson transcription: lets the studio create a text transcript of a lesson. Source audio is processed on Cadence-operated infrastructure and is deleted after transcription.

You may grant or revoke each permission in the family portal. Refusing or revoking one of these permissions does not remove basic studio services such as scheduling, billing, attendance, or teacher-created teaching records. A studio owner or administrator may separately record supported offline consent.

3. Information about children

Depending on the features you or the studio enable, Cadence may process a child’s name or display name, optional nickname, birthdate, instrument, school, one-way hashed PIN, scheduling and attendance information, assignments, practice and gamification activity, messages, practice recordings, and lesson transcript text. The studio may also record teaching notes and lesson-progress information as part of its ordinary teaching records.

We use this information to provide the studio’s music lessons and related administration, including family access, scheduling, learning and practice tools, communications, billing support, security, and customer support. We do not sell student information, use it for advertising or cross-context behavioral advertising, or use it to train external AI models.

4. Who receives information

Information is available to the relevant studio and its authorized staff, parents or family accounts, and students as configured by the studio. If a studio enables a leaderboard, authenticated Cadence users in that studio may see each participating child’s rank, score, and the display name selected by the studio. The display name may be the child’s full display name, first name and last initial, nickname, or pseudonym. You can ask your studio to opt your child out; opting out removes the child from leaderboard results. We also use service providers to host, store, secure, support, and deliver Cadence, including DigitalOcean, Cloudflare, Stripe, Resend, Google Calendar (when a staff member connects it), and Sentry. Our current providers are listed in the subprocessor list.

Lesson audio is not sent to a third-party transcription, speech-to-text, or AI provider. Cadence uses no advertising cookies, advertising pixels, or marketing analytics. Cloudflare Turnstile protects public forms and may process IP address and browser signals for security.

5. How long we keep information

We keep information only as long as reasonably necessary for the purposes in this notice, the studio’s instructions, and legal or recordkeeping obligations. Our current retention periods include:

lesson transcript text: 30 days by default; source audio is deleted after transcription;
practice recordings: while the child is active and for no more than 90 days after the child is marked inactive, unless deleted sooner;
messages and attachments: one year, or shortly after a child is marked inactive, subject to a 48-hour reversal period for accidental deactivation;
consent evidence: the family’s relationship with the studio plus five years;
financial and tax records: seven years from the transaction or invoice date;
backups: up to seven days after deletion from active systems.

Completed student-erasure requests are subject to the Privacy Policy’s 30-day grace period and limited exceptions for legal, accounting, security, and professional teaching records.

6. Your privacy requests

You may use the family portal to submit a deletion request. You may also ask your studio, or contact Cadence at [email protected], to request access to, correction of, or deletion of your child’s information. We may need to verify your identity and authority before acting on a request. Cadence does not provide a general self-service data-export tool.

Because the studio controls family and student information, contacting the studio first is usually the fastest way to address a request. Cadence assists studios with valid privacy requests as required by its agreement and applicable law.

7. U.S. service, processing locations, and changes

Cadence offers the Service to U.S. studios. Our primary application and database infrastructure are hosted in the United States. Limited processing by our infrastructure providers may occur through their global networks or in locations determined by their service configuration, including Cloudflare’s network and object-storage services. See our subprocessor list for current provider and location information.

If we expand the Service to other regions or undertake processing that requires additional transfer safeguards, we will update our privacy notices and implement the required safeguards before that activity begins.

We may update this notice from time to time. We will post the revised notice, update its effective date, and provide additional notice of material changes when required by law.