ESO Dashboard -- Privacy Policy
ESO Dashboard is a staff tool for El Sistema-affiliated after-school music programs. It is operated by Andrew Woodhouse. This policy describes what data the app handles and how it is treated.
Who runs this app
The data controller is Andrew Woodhouse, based in Oklahoma City, Oklahoma, USA. You can reach the controller at adw1423@gmail.com.
Who this app is for
ESO Dashboard is intended for adult staff of music programs that have been set up on the ESO Dashboard service. Students do not log in to the app and do not enter their own data. All information about students is entered by authorized program staff in the course of their work.
What data the app handles
The mobile app is a thin wrapper around the web app at esodash.com and does not itself collect data separately from what the user enters into that web app. The web app stores the following information:
- Staff account details (name, role, email or program-issued ID, optional phone number)
- Staff profile photos (optional avatar uploaded by the staff member)
- Login event records (timestamp, IP address, browser/device user-agent string) so program administrators can review who signed in and when
- Attendance records and check-in actions entered by staff
- Mood check-in entries (optional, 1-5 self-reported by staff)
- Planning grid entries, lesson notes, and class scheduling data
- Student roster information entered by staff: name, birthday, optional phone number, ensemble assignments, instrument assignment, allergies, medical conditions, dietary restrictions, and notes (entered by staff for student safety during program activities)
- Building floor plan reference images (optional, uploaded by program administrators to drive the in-app program map)
- Instrument inventory records, repair history, and unit condition notes
- Session cookies needed to keep a user signed in
How data is stored and transmitted
- All network traffic between the app and the server uses HTTPS (TLS).
- Data is stored on a server in North America.
- The server is fronted by Cloudflare Access, which performs sign-in verification before the user reaches the app.
Sharing
The app does not share data with third parties for advertising, analytics, or any commercial purpose. The app does not contain any third-party analytics SDKs, advertising SDKs, or tracking pixels. Operational service providers used to run the service (the VPS host that runs the server, and Cloudflare for sign-in and content delivery) process data only as needed to deliver the service.
Cookies
The web app uses session cookies for sign-in only. There are no analytics or advertising cookies.
Retention
Account and program records are kept for as long as a user has an active engagement with the program. On request, the data controller will delete a user account and any records that identify that user. Aggregate attendance and program statistics may be retained in anonymized form for program reporting.
Your rights
You can request the following at any time by emailing the contact below:
- A copy of the data the app holds about you
- Correction of inaccurate data
- Deletion of your account and personally identifying data
SMS Notifications and Mobile Phone Numbers
When a staff user voluntarily provides a mobile phone number through their ESO Dashboard staff profile and opts in to text notifications, that number is used solely to send transactional SMS messages related to program activity. Examples include attendance event reminders, schedule changes, and administrative announcements.
Mobile phone numbers and any related opt-in consent information will NOT be shared with third parties for marketing or promotional purposes. Mobile information will not be shared or sold to any third party, affiliate, or marketing service.
Message frequency varies based on program activity. Message and data rates may apply, depending on your mobile carrier and plan.
You may opt out of SMS notifications at any time by replying STOP to any message you receive, or by removing your phone number from your ESO Dashboard staff profile. Reply HELP to any message for help, or contact adw1423@gmail.com.
Children
This app is for staff, not students. The app does not allow students to create accounts, sign in, or submit data. Information about students is entered by authorized adult staff and is treated as program records, not as student-facing data collection.
Changes to this policy
If this policy changes materially, the new version will replace this page and the effective date above will be updated.
Contact
Privacy questions and data requests: adw1423@gmail.com.