Privacy policy
Last updated: 26 September 2026
Overview
Buthum is a practice-plan and lesson-feedback tool for music teachers, students and their families. This policy explains what information we collect through the app, why, and how you can control it.
Information we collect
Account info: name, email, password (hashed) and role (teacher, school admin, parent or student). Student profiles: a student's name and instrument, added by a teacher or admin. Lesson content: weekly practice plans, checklist items, practice logs (minutes, dates, notes) and lesson feedback (attendance, preparation, notes) entered by teachers, parents or students. Technical data: a session cookie that keeps you signed in, and a cookie that remembers your chosen language. We don't use tracking or advertising cookies.
Children's information
Buthum is used by children (music students), but children don't create their own accounts unsupervised: a teacher or parent creates the student profile and invites the student, and a parent or teacher stays attached to that student's account. We only collect the minimum needed to run the plan-and-feedback loop for that student — name and instrument, not birthdate, address, or any other sensitive detail. If you're a parent and want a student profile removed, contact us anytime at hello@buthum.com.
How we use it
Solely to operate the product: showing plans and feedback to the right people, scoped to their role and school, sending invite emails when a teacher or admin asks us to, and keeping you signed in. We don't sell data, use it for advertising, or share it with third parties beyond the infrastructure providers that host the app (database, hosting, and an email delivery service for invites) — each bound to only process it on our instructions.
Your rights
Wherever GDPR or a similar law applies, you can ask to access, correct, export or delete the personal data we hold about you or a student you're responsible for. A teacher or school admin can remove a student's data directly in the app; anyone can also email hello@buthum.com and we'll action it.
Data retention
If an account or student profile is deleted, we remove the associated plans, logs and feedback rather than keeping it indefinitely. We also delete data automatically on a schedule: lesson feedback and practice logs older than 24 months, and a parent's or student's account after 24 months of inactivity (a teacher's or school's account is never deleted automatically, since that would remove their whole roster's records — only a person, on request, or us, on their behalf, can do that).
Security
Passwords are hashed, never stored in plain text; sessions are single-use random tokens. As with any early-stage product, treat this as good-faith practice rather than a formal security certification.
Changes to this policy
We may update this policy as the product changes; we'll update the date at the top of this page whenever we do.
Contact
Questions about privacy? Email hello@buthum.com.