Sonata — a product of North Seattle Music Lessons LLC · Last updated: July 19, 2026
Sonata helps independent music teachers turn their lessons into clear summary emails for parents. This policy explains, in plain English, what data Sonata handles, where it goes, how long it stays, and the choices you have. We lead with this because privacy is the product, not a footnote to it.
If you have any question this page doesn't answer, email cj@usesonata.com and a human (the founder) will respond.
Who we are
Sonata is operated by North Seattle Music Lessons LLC, based in Washington State, United States. Throughout this policy, "Sonata," "we," "us," and "our" refer to North Seattle Music Lessons LLC. "You" refers to the teacher using Sonata.
The short version
- Lesson audio is uploaded, transcribed by OpenAI, and deleted from Sonata's server immediately after the transcript comes back — within seconds.
- The transcript and summary live in your account, visible only to you.
- If you connect Google Drive, a copy of each summary is saved to a folder in your own Drive, under your control. Sonata uses a narrow permission that can only see files it creates.
- We do not sell, share, or use your data to train AI.
- You can delete your data at any time by emailing us.
What data we collect
Account information. When you sign in with Google, we receive your name, email address, and basic profile information (via the openid, email, and profile permissions). We use this to create and identify your account.
Studio and student information you enter. Student names, lesson days, instruments, parent email addresses, and any notes you choose to add. You enter this; we store it so you can run your studio.
Lesson audio and transcripts. When you record a lesson (or dictate a summary), the audio is processed as described below. Transcripts and the summaries generated from them are stored in your account.
Email addresses you send to. When you send a summary to a parent, we process the recipient address you provide so the email can be delivered.
Gmail connection (optional). If you connect Gmail for sending, we store your connected Gmail address and the authorization tokens Google issues, encrypted at rest. We use these only to send the emails you choose to send.
We do not collect payment card numbers, government IDs, or any special-category data beyond what you voluntarily enter in lesson notes.
How lesson audio is handled
When you record a lesson or dictate a summary, here is the exact path:
- The audio is captured in your browser and uploaded to Sonata's server.
- Sonata sends the audio to OpenAI's API for transcription.
- Once the transcript returns, the audio is deleted from Sonata's server immediately. It is not stored in a database or saved anywhere on our end.
- The transcript and summary land in your account, visible only to you.
- You decide what goes to the parent. Nothing is ever sent without your action — you press send.
- If a recording fails to transcribe, Sonata gives you a one-time download link to save the audio to your own device. After you close that screen, nothing is held on our end.
About OpenAI: Under OpenAI's standard API terms, API audio and text are not used to train OpenAI's models. OpenAI may retain API inputs and outputs for up to 30 days for abuse monitoring, then deletes them. This is OpenAI's standard policy across all API customers. Their full policy is published at platform.openai.com.
How we use Google services and your Google data
Sonata's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Sign-in (openid, email, profile). Used solely to authenticate you and create your account. We do not use this for advertising or share it with third parties.
Google Drive (drive.file). If you choose to connect Google Drive, Sonata requests the drive.file permission. This is a narrow, per-file scope: Sonata can only see and manage the files and folders it creates — a "Lesson Archives" folder and the lesson summary documents it saves there. Sonata cannot see, read, or access any other file in your Google Drive. Connecting Drive is entirely optional.
Gmail sending (gmail.send). If you choose to connect Gmail, Sonata requests the gmail.send permission so the lesson-summary emails you write can be sent from your own Gmail address — so parents see the email coming from you, not from a stranger's server. This permission is send-only: Sonata cannot read, see, or access your inbox, your contacts, or any existing message. It is used for exactly one thing — delivering an email after you press send — and nothing is ever sent without your action. Connecting Gmail is entirely optional; teachers can use their own SMTP settings instead.
What we do with Google data: We use it only to provide Sonata's features to you (signing you in, sending the emails you write, and saving lesson summaries to your Drive folder if you connect it). We do not use Google user data for advertising, we do not sell it, we do not transfer it to third parties except as needed to provide the service or as required by law, and we do not use it to train AI or machine-learning models.
Disconnecting and revoking. You can disconnect Google Drive or Gmail from Sonata's Settings at any time. When you disconnect, Sonata revokes its access on Google's side and clears the stored authorization from our database. You can also review and revoke Sonata's access directly at myaccount.google.com/permissions.
How your data is stored and protected
Google authorization tokens are encrypted at rest using industry-standard AES-256-GCM encryption. Your data is stored on managed cloud infrastructure (database and hosting providers) under their security controls. Lesson audio is never stored — it is deleted immediately after transcription as described above.
Who can see your data
| Role | Can see |
| You (the teacher) | Every lesson you've recorded — transcript, summary, notes. You can edit, delete, or re-send anything. |
| The parent | Only the summary email you choose to send. Optionally, if you grant it per family, a Google Drive folder of summaries. |
| The student | Whatever you choose to share. Students do not have logins by default. |
| The founder (CJ) | Technical access to the database to operate the product (bug fixes, support). We do not read your summaries as routine practice. |
| Anyone else | Nothing. No advertisers, no data brokers, no partners. |
What we don't do
- We don't sell your data. Sonata is a tool, not a data business.
- We don't share lesson content with anyone outside the parent emails you choose to send.
- We don't train AI on your lessons — not OpenAI's models, not anyone's.
- Sonata never sends an email you didn't initiate. You press send. Always.
How long we keep things
| Data | Retention |
| Audio on Sonata's server | Deleted immediately after transcription |
| Audio at OpenAI | Up to 30 days for abuse monitoring, then deleted (OpenAI's policy) |
| Transcripts and summaries | Kept while your account is active |
| Google Drive copy | Lives in your Drive folder, under your control |
| If you delete your account | All Sonata-side data removed within 30 days |
To delete your data at any time, email cj@usesonata.com. It comes to the founder, who will confirm and delete it personally.
A note about minor students
Most music students are under 18, which makes lesson audio sensitive. Sonata is a tool used by the teacher; the teacher is responsible for obtaining consent from families before recording. Sonata provides language teachers can use to ask families for permission, and recording is always optional — a dictation mode produces the same summaries without capturing a full lesson. Teachers are responsible for complying with the recording-consent and student-privacy laws that apply in their location.
If you are a parent with questions about how your child's teacher uses Sonata, start with the teacher, or email cj@usesonata.com.
Your rights and choices
- Access and correction: You can view and edit your studio and lesson data in the app at any time.
- Deletion: Email cj@usesonata.com to delete your account and associated data.
- Disconnect Google: Disconnect Drive or Gmail in Settings, or revoke access at myaccount.google.com/permissions.
- Email: You control which parent emails are sent; Sonata never sends without your action.
Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, notify you. Continued use of Sonata after changes means you accept the updated policy.
Contact
North Seattle Music Lessons LLC
Email: cj@usesonata.com
Web: usesonata.com
Sonata is built by a music teacher, for music teachers. If something here isn't clear, ask. We'd rather over-explain than leave you guessing.