Every music school asks the same question before an app is allowed into lessons: what happens to our pupils' data? This page answers it — and also says what Klavissimo cannot do yet.
Good to know:
The teacher area is free forever and needs no licence. You only pay to connect children who practise elsewhere — €49 per class and school year.
Good to know:
The teacher area is free forever and needs no licence. You only pay to connect children who practise elsewhere — via a class licence for the school.
Trying it out costs you no decision: creating classes, setting practice spots, assigning homework, writing recital notes and using the “needs you first” overview all run on your own device, without an account and without ordering anything. A server only comes into play once a child practises at home on their own device and you want to see the progress.
And that is exactly where the point lies that matters to a school: transmission is data-minimised — never sheet music, never recordings, never piece contents. What does arrive (practice days, ratings, the chosen display name) remains personal data and is protected accordingly.
No account — not even one with us
Klavissimo requires no registration. A device's identity is a locally generated secret; our server stores only an argon2id hash of it, never the secret and never a password. So there is nothing a child would have to remember or manage — the device secret lives on the device and travels with its backup file. For practising and all connections, an email address is voluntary — only a purchase (such as the class licence by invoice) naturally needs one; it is stored encrypted in its own silo and is technically unreachable for school and class features.
The data model does not even know the sensitive fields
What a child's device transmits is fully described by one schema: calendar day, one number from 0 to 100 per exercise, at most three sticking points with skill axis and bar number. The schema is strict — unknown fields are rejected, not silently dropped. A later attempt to transmit more fails at the interface, not at good intentions.
Only then does location matter — and it is the EU
Our server runs at Hetzner in the EU, as do the encrypted backups. The optional AI tutor runs via Scaleway in Paris. There is therefore no transfer to a third country and no construction resting on the derogation in Art. 49 GDPR — simply no third-country element at all.
Gets
- which days were practised
- a score per exercise (0–100)
- up to three sticking points (axis + bar number)
- the display name the child chooses
Never
- which piece was played
- audio or MIDI recordings
- notation data, MusicXML, imported files
- email address, date of birth, verified names
- location, contacts, device identifiers
For parents
Consent is more than a tick-box: before joining, Klavissimo shows a dedicated page for parents and legal guardians — with exactly the one line you will see from then on, and an explicit parent/guardian confirmation. Only the “allow connection” button triggers any transmission at all — there is no other path to it in the program. The time and the version of the consent shown are stored; the corresponding wording is documented through that versioned text.
Disconnecting takes effect immediately on both sides: sync state and connection are deleted in one transaction, with no copy. The child carries on practising unchanged, just without visibility for the school.
What does not work yet — so you do not have to discover it yourself: if a teacher assigns a piece they imported themselves, the child needs the same file on their device; notation deliberately does not travel through our server. Klavissimo says so rather than showing a dead task. The paid unit is called a “class” — in one-to-one piano teaching that is not a self-explanatory measure, and how a teacher with many individual children is counted has not been decided. And a class connection does not expire by itself: disconnecting at the end of the school year is a deliberate step, not an automatism.
The first step takes five minutes
Open the teacher area, create a class and set a PIN. Then connect a second device of your own as a test pupil and play an exercise. You will see immediately what arrives — and what does not. No order is needed, and nothing leaves your device until you allow a connection yourself.