Scondy Apps

EarnIT

EarnIt is a family rewards and chores app that helps parents assign tasks, track progress and reward achievements in a simple and engaging way

Band Stand

In Build (Release Q4 2026)

• Privacy Policy

Scondy Apps Privacy Policy

Scondy Apps Privacy Policy
BandStand
Version 1.0 — Effective 28 September 20261. Who we are
BandStand is operated by:
Scondy Apps Ltd
20 Wenlock Road
London
England
N1 7GU
Email: [email protected]
BandStand helps bands and community organisations manage members, families, events, communications, attendance, equipment, practice and administration.
2. Who controls your information?
Scondy Apps Ltd is responsible for information needed to operate and secure the BandStand platform, including accounts, authentication, technical records and support.
Where a band or organisation uses BandStand to manage its own members, families or staff, that organisation will normally decide why that information is collected and used.
The organisation may therefore provide its own privacy notice alongside this policy.
3. Information BandStand may hold
Depending on how BandStand is used, this may include:
- name, email, telephone number and address;
- profile photo;
- date of birth;
- parent/carer and family relationships;
- band, group and membership details;
- instrument, uniform and equipment information;
- events and attendance;
- practice records;
- polls and responses;
- announcements and secure messages;
- documents and resources;
- staff roles, permissions and training records;
- declarations, consents and Gift Aid records;
- feedback;
- emergency contact, medical, allergy, collection or support information where required;
- photos used as practice or equipment evidence; and
- technical information such as login sessions, device notification tokens and security records.
Sensitive member information is restricted to authorised users.
4. Children and young people
BandStand has been designed for organisations that may include children.
Under 13: accounts are parent/carer managed.
Age 13–17: young people may have their own login but remain linked to an authorised parent or carer.
BandStand is designed so adults and administrators cannot use its permitted messaging system to create a private communication route with a teen that bypasses the relevant parent/carer safeguards.
Age 18+: compulsory parent/carer involvement is no longer required.
Youth accounts have restricted access by default.
5. Why information is used
Information may be used to:
- operate and secure BandStand;
- manage accounts and memberships;
- link families and members;
- apply safeguarding controls;
- send announcements and secure messages;
- manage events and attendance;
- manage practice, polls, equipment and documents;
- support organisation administration and training;
- manage declarations and Gift Aid;
- send notifications;
- provide support;
- prevent misuse or security problems;
- maintain appropriate records; and
- support account, privacy and deletion requests.
BandStand does not currently use personal information for behavioural advertising and Scondy Apps Ltd does not sell personal information.
6. Legal reasons for processing
The lawful basis depends on why information is being used.
Processing may be necessary to:
- provide the BandStand service;
- meet legal obligations;
- operate and protect the service;
- support legitimate organisational purposes; or
- act on valid consent where consent is appropriate.
Health and other sensitive information receives additional legal protection.
Where a band or organisation controls member information, it is responsible for having an appropriate lawful basis for that processing.
7. Photos, camera, calendar and notifications
BandStand may ask for permission to use:
Photos or camera — where users choose to provide practice or equipment evidence.
Calendar — to add BandStand events to a device calendar.
Notifications — for announcements, messages, events, reminders and other relevant updates.
These permissions can be controlled through the user's device settings.
BandStand does not currently request microphone access for these features and does not use continuous location tracking.
8. Service providers
We use specialist technology providers to operate BandStand, including:
- Supabase — authentication, database, backend functions and file storage;
- Resend — account email delivery;
- Expo — mobile app and notification infrastructure;
- Apple — iOS distribution and notifications;
- Google — Android distribution and notifications; and
- Carrd — Scondy Apps website hosting.
Personal information may be processed by these providers where required to deliver their services.
Some providers may process information outside the UK. Appropriate safeguards will be used where required by law.
9. How long information is kept
Information is kept only for as long as it is reasonably needed.
When somebody leaves a band, active access can be removed while appropriate historical organisational records remain.
When an account is deleted, information may be deleted, anonymised or detached from the account.
Some information may need to be retained for legal, safeguarding, financial or audit reasons.
Gift Aid records may also need to be retained for the period required by tax law.
10. Leaving a band or deleting an account
Leaving a band and deleting a BandStand account are separate actions.
Users can leave an organisation without requiring the organisation to approve that decision.
Users can also request deletion of their BandStand account.
Deletion may be temporarily prevented where, for example, the person is the sole organisation owner or the only linked carer required for an active child or teen account.
Another appropriate person must first be established.
11. Your rights
Depending on the circumstances, you may have rights to:
- access your information;
- correct inaccurate information;
- request deletion;
- restrict or object to certain processing;
- receive certain information in a portable form; and
- withdraw consent where consent is being relied upon.
Children also have data-protection rights in their own right.
Where information is controlled by your band or organisation, Scondy Apps Ltd may work with or refer your request to that organisation.
12. Security
BandStand uses measures designed to protect personal information, including:
- authenticated access;
- organisation-level data separation;
- family privacy controls;
- role and permission controls;
- restricted sensitive information;
- age-based safeguarding;
- protected file access;
- database security rules; and
- audit records for relevant actions.
No online service can guarantee absolute security, but BandStand's security controls are regularly reviewed and tested.
13. Complaints
If you have concerns about how Scondy Apps Ltd handles your information, contact:
[email protected]
You also have the right to contact the Information Commissioner's Office (ICO).
If your concern relates to information controlled by your band or organisation, you can also contact that organisation directly.
14. Changes to this policy
We may update this policy as BandStand develops, suppliers change or legal requirements change.
The latest version will be published on the Scondy Apps website with its effective date.
15. Contact
Scondy Apps Ltd
20 Wenlock Road
London
England
N1 7GU
[email protected]