Short bursts. Real progress.
Stuckato is used by children. This page is written to be read by a parent in five minutes, not by a lawyer. If anything here is unclear, that is our fault and we want to know.
Last updated 22 September 2026.
| What | Why it exists |
|---|---|
| Your email address | It is how you sign in. There is no password; we email you a link. It is not used for marketing. |
| A display name | So your teacher knows whose week is whose. A first name is enough. |
| Instrument and level | So the week is written for the right instrument. |
| The teacher's weekly note | What to work on, what to prepare, and minutes a day. Written by your teacher. |
| Your sessions | Which sessions you started and finished, how many minutes, and which day. |
| What you ticked | The items from the work list you say you practised. |
| Optional sentences | A line about how it went, if the pupil chooses to write or dictate one. |
| Two weekly ratings | How ready you feel for the lesson, and how much you wanted to practise. Both 1 to 5. |
| Audio recordings | Only when someone chooses to record: the teacher's passage, or a pupil's play-through. Stored in the studio's folder. |
| Backing tracks | Only if the teacher switches them on and the pupil keeps a track: the pupil's recording plus the chords and style chosen, in a private folder only the pupil, the account holder and their teacher can open. Up to five a week. The backing itself is made on the device; no audio is sent anywhere to make it. A teacher's exam accompaniment is stored privately too, for their studio only. If the teacher links a backing track on YouTube instead, it plays in YouTube's privacy-enhanced player (youtube-nocookie.com), so YouTube receives what any embedded video sends; nothing about the pupil is passed to it, and nothing is copied from YouTube. The pupil's recording with it (audio, or video for adults who choose it) is stored the same private way. |
| A cloned teaching voice | Only if a teacher opts in, and only of the teacher. Never of a pupil. Removable from the app. |
That is the complete list. If you want to see your own copy of it, ask your teacher or email us and we will send it.
Your teacher, for their own pupils only. This is enforced by the database itself, not by a promise in the app: every row carries a rule saying it can only be read by the pupil it belongs to or the teacher of their studio.
Us, only when we have to. Emre can reach the database because he maintains it. We look at an individual account only to fix a fault someone has reported, and we do not read pupils' sentences for interest.
Nobody else. No other pupil, no other teacher, no school, no advertiser, no data broker.
Stuckato is a small operation, so it is built on services other people run. Each one only sees the part it needs to do its job.
| Service | What it handles |
|---|---|
| Supabase | The database, sign-in and audio storage. This is where your practice data actually sits. |
| Vercel | Serves the website and runs the small functions behind it. |
| Resend | Sends the sign-in link and reminder emails. It sees your email address. |
| Anthropic | Turns the teacher's note into the week's sessions. It sees the note and the pupil's first name, not your email or your history. |
| ElevenLabs | Only if a teacher opts into a cloned voice. It sees that teacher's recordings. |
The backing-track instruments are recordings that come with the app and play on your device: the Salamander Grand Piano by Alexander Holm, and cello, violin and guitar from tonejs-instruments by Nicholaus Brosowsky, both under CC BY 3.0. No service is involved in making a backing.
While the account exists, so that a pupil can look back at earlier weeks and a teacher can see progress over a term. When an account is deleted, everything attached to it goes immediately, including the recordings.
Backups are the one exception, and we would rather say so than pretend otherwise: deleted data can sit in Supabase's routine backups for up to thirty days before it ages out. Nobody reads those backups, and they are not used to restore individual accounts.
From inside the app. Sign in, and use Delete my account. It removes your account, your practice data and your recordings straight away. It cannot be undone.
A teacher with pupils cannot delete in one tap, on purpose. Deleting a studio would delete every pupil in it, so email us and we will do it carefully with you.
By asking. Email hello@stuckato.app and we will do it for you. A parent can ask for their child's data to be deleted at any time and does not need a reason.
Stuckato is designed for children learning an instrument, and for a young child the account is held by a parent. The child still does the practising and the ticking; the account, and every decision about the data, belongs to the adult.
We ask for as little as we can get away with. There is no profile photo, no date of birth, no address, no phone number, and no way for one child to contact another. There is no public profile and nothing a pupil does is visible outside their own studio.
Under UK GDPR you can ask to see your data, correct it, have it deleted, or object to what we do with it. In practice, all four are one email to hello@stuckato.app, and we will answer inside a month. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
The data controller is Melisande Yavuz and Emre Yavuz, London, United Kingdom.
We will change the date at the top. If a change actually affects what happens to your data, as opposed to fixing a sentence, we will email everyone with an account and say what changed and why.
hello@stuckato.app. If you are in the October pilot, the parents' page covers what the pilot itself involves.