Go Practice Privacy Notice

Effective 16 October 2026. Applies to the Go Practice app (mobile and web), the teacher portal at teach.gopractice.kooljett.net, and lesson booking.

Go Practice helps music students practise and lets their teachers set work, follow progress, and book lessons. This notice explains what we collect, why, who sees it, how long we keep it, and your choices. It sits alongside the general Kooljett privacy policy. Where the two differ, this notice applies to Go Practice.

Who we are

Go Practice is run by Kooljett Limited, the data controller for the personal data described here. We are registered with the UK Information Commissioner's Office under number ZB313242. For privacy questions or to use your rights, email admin@kooljett.com.

What we collect and why

We do not show advertising, we do not sell personal data, and we do not use it for marketing unless you have separately agreed to that.

Google Calendar

A teacher can choose to link a Google Calendar so that their busy times block lesson slots. This is optional, and nothing is linked unless the teacher signs in to Google and agrees.

What we access

• Free/busy times of the calendars you choose: only the start and end of busy periods. We cannot see event titles, descriptions, locations or attendees.
• The list of your calendars (their names, and whether you own them), so you can pick which ones count as busy.
• Your Google account email address, so you can see which account is linked.

We ask only for read-only permissions (calendar.freebusy and calendar.calendarlist.readonly). We never create, change or delete anything in your Google account. Lessons reach your calendar through the invitation emails we send, which you accept or decline yourself.

How we use it

When a student looks for a lesson time, and again at the moment they book, we check your busy times for the dates involved and hide clashing slots. We use your Google data for nothing else.

How we store it

• Busy times are not stored. They are held in memory for up to one minute to avoid asking Google repeatedly, then discarded.
• The access token Google gives us is stored encrypted (AES-256), with the key held separately in a managed key store. Your calendar names and choices are stored with your Go Practice calendar.
• All of this is stored in Amazon Web Services' London region.

Sharing

We do not share, transfer or sell Google user data. Students never see your busy times or calendar names, only the lesson slots that remain free. No one at Kooljett reads your Google data, except when you ask us to help, for security reasons, or when the law requires it. We do not use Google user data for advertising, and we do not use it to develop, improve or train generalised AI or machine-learning models.

Go Practice's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

To unlink, choose Calendar → Linked calendars → Disconnect in the teacher portal. We revoke our access at Google and delete the stored token and calendar list straight away. You can also remove Go Practice at myaccount.google.com/permissions. If you do, the link stops working, and we email you once so that you know students can now book times when you're busy.

Who sees your data

• Your teacher (if you are enrolled) sees your name, the takes you submit, your lesson practice statistics, and your bookings with them. They never see practice you have not submitted.
• Your students (if you teach) see your name, your lesson types, and your free lesson times.
• People you connect with see what you choose to share with them.
• Service providers who process data for us under contract, and only on our instructions:
  • Amazon Web Services: hosting, databases, file storage and email, in the London region.
  • Google Firebase: app data and sign-in sessions (Firestore, in London), app-integrity checks, and crash reports.
• Authorities, where the law requires it.

Where your data is stored

Our databases and files are in the UK (the AWS London region and Google Cloud europe-west2). Some providers may process limited technical data, such as crash reports, in other countries. When they do, they use the UK's approved safeguards.

How long we keep it

• Your account and practice data: until you delete your account. Use Settings → Account → Delete account in the app.
• Practice recordings: kept until deleted by the student or the account is deleted.
• Messages: 95 days. Shared activity: 90 days.
• Lesson bookings: one year after the lesson by default. A teacher can set between 30 days and 10 years for their own calendar. Student details go once none of their bookings remain.
• Video call records: 30 days.
• Linked calendar tokens: until the teacher disconnects or deletes the calendar.
• Security logs of sign-ins: kept after account deletion for 30 days. They hold an account number, not your profile.

When you delete your account, we delete your profile, practice data, recordings, messages and connections.

Children

Go Practice may be used by children under the supervision of a parent, guardian or music teacher. If a student is under 13, a parent or guardian must set up or approve the account. We collect only what the service needs. A child's profile is not public, and children's data is not used for marketing.

Your rights

Under UK data protection law you can ask to:

• see the data we hold about you;
• correct it;
• delete it;
• restrict or object to how we use it;
• receive a copy in a portable form.

Where we rely on consent, such as a linked calendar, you can withdraw it at any time. Email admin@kooljett.com. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office.

Changes

If we change this notice, we will update the date above. For significant changes, we will tell you in the app or by email.