Australian Privacy Act
Compliant with the Privacy Act 1988 and Australian Privacy Principles
Google Firebase
Data stored on Google infrastructure โ SOC 2, ISO 27001 certified
Role-based access
Tutors, students and parents only see their own data โ never other students
No advertising
No ads, no third-party tracking, no data sold to any third party
HTTPS everywhere
All data transmitted over encrypted connections
Deletion on request
Student data deleted within 30 days of any account deletion request
What is FusaFlow?
FusaFlow is a music studio management platform used by private music tutors to manage their teaching practice. It provides tools for lesson scheduling, student practice tracking, lesson notes, invoicing, and parent communication โ all in one place.
When a tutor operates within a school setting, their students and those students' parents may use FusaFlow to view lesson notes, track practice, and communicate with the tutor. The school itself is not a party to the platform โ FusaFlow is a tool used by the individual tutor.
What data does FusaFlow collect about students?
| Data | Collected from | Purpose | Visible to |
|---|---|---|---|
| Name | Student or tutor | Identify the student in the app | Tutor, student, linked parent |
| Email address | Student | Account login | Tutor only |
| Instrument & grade | Tutor or student | Display on profile | Tutor, student, linked parent |
| Date of birth | Tutor (optional) | Birthday reminders for tutor | Tutor only |
| Practice logs | Student | Track practice time and streaks | Tutor, student, linked parent |
| Lesson notes | Tutor | Record lesson content and homework | Tutor, student, linked parent |
| Repertoire | Tutor or student | Track pieces being learned | Tutor, student, linked parent |
| Attendance records | Tutor | Track lesson attendance | Tutor only |
| Messages | Student / parent / tutor | In-app communication | Sender and recipient only |
FusaFlow does not collect location data, device identifiers, browsing history, or any data beyond what is listed above. No student data is used for any purpose other than providing the service to the tutor and their students.
Where is data stored?
All FusaFlow data is stored on Google Firebase (Firestore database, Firebase Authentication, and Firebase Storage). Firebase infrastructure is operated by Google and hosted primarily in the United States.
Google Firebase holds the following certifications: SOC 1, SOC 2, SOC 3, ISO 27001, ISO 27017, ISO 27018, PCI DSS. Firebase is used by thousands of schools and educational institutions globally. Full compliance details: firebase.google.com/support/privacy
The FusaFlow web application is hosted on Netlify, a US-based provider with SOC 2 Type II certification. All connections use HTTPS with TLS 1.2 or higher.
Who can access student data?
FusaFlow uses strict role-based access controls enforced at the database level via Firestore security rules:
- Tutors can only see data for their own students โ never other tutors' students
- Students can only see their own data
- Parents can only see data for their linked child
- FusaFlow (the operator) can access data via Firebase Admin for support purposes only, and does not routinely access student records
- No other parties have access to student data
There is no school administrator portal โ access is limited to the tutor and their directly linked students and parents.
School Mode
FusaFlow includes a School Mode setting that tutors can enable per student. When School Mode is active:
- In-app messaging is disabled for that student
- Audio recording features are disabled
- A visible banner informs the student that School Mode is active
School Mode is designed for contexts where a school may wish to limit certain communication features, consistent with their own IT and communication policies.
Third-party services
| Service | Purpose | Student data shared? |
|---|---|---|
| Google Firebase | Database, auth, file storage | Yes โ core data store |
| Supabase | Backend functions, email | Email address only (transactional email) |
| Resend | Transactional email delivery | Email address only |
| Stripe | Tutor subscription billing | No โ billing is tutor-only |
| Google Gemini AI | AI practice suggestions (optional feature) | Limited โ processed server-side, not used for training |
| Google Calendar API | Optional lesson sync | Only if tutor enables the integration |
| Netlify | Website hosting | No |
No student data is shared with advertising platforms, social media companies, or data brokers.
Data Processing Agreement
This agreement sets out the obligations of FusaFlow with respect to student personal data when used by a tutor operating within a school context.
FusaFlow School Data Agreement
Between: Simon James Watts trading as FusaFlow (ABN 61 914 592 726) and the relevant school or educational institution.
To request a signed copy of this agreement for your school's records, or to discuss specific requirements, contact support@fusaflow.com.
Frequently asked questions
Does FusaFlow require school IT to set anything up?
No. FusaFlow is a web-based app accessed at fusaflow.app. No software installation is required. Students and parents access it via any modern browser or as a Progressive Web App on their device.
Does FusaFlow require access to school email or Google Workspace accounts?
No. Students can sign up with any email address or with a personal Google account. FusaFlow does not require or request access to school-issued accounts.
Does FusaFlow use cookies or tracking?
FusaFlow uses browser localStorage and sessionStorage to maintain login sessions and app state. No third-party tracking cookies or advertising cookies are used.
Can the school view student data?
No. There is no school administrator portal. Only the tutor, their students, and linked parents can access data within FusaFlow.
What happens if a student leaves the school?
The tutor manages student accounts independently. When a student is no longer active, the tutor can archive or remove them from their studio. Data deletion requests can be made to support@fusaflow.com.
Is FusaFlow FERPA compliant?
FERPA is a US law. FusaFlow is an Australian platform and complies with the Australian Privacy Act 1988. The data practices described here are consistent with FERPA principles, but FusaFlow does not make a formal FERPA compliance claim.
Contact
Get in touch
For whitelist enquiries, data processing questions, or to request a signed copy of the data agreement:
Simon James Watts ยท ABN 61 914 592 726
Westleigh, NSW, Australia