Privacy Policy
Effective date: 1 August 2026
1. Introduction
This policy explains how Clazuno Pte. Ltd. (“Clazuno”, “we”) handles personal data, in line with Singapore’s Personal Data Protection Act (PDPA).
We keep it short on purpose. If anything is unclear, contact our Data Protection Officer (Section 12).
2. Our role: who is responsible for what
This is important because it decides who you go to about your data.
Coach and parent account data (name, email, login, billing, settings) — Clazuno is the responsible organisation (controller). We decide how this data is used.
Learner data that a coach enters (a learner’s contact details, session logs, progress, notes — including a child’s data held inside a parent’s account) — the coach is the responsible organisation, and Clazuno acts as a data intermediary, processing it on the coach’s instructions. Questions about a learner’s data should go to that learner’s coach first.
Purposes we decide ourselves — for example, Zuno proactively flagging an at-risk learner, product analytics, security, and improving the Service — for these specific purposes Clazuno is responsible, even where learner data is involved.
3. What we collect
From coaches and parents (account holders):
Identity and contact: name, email, phone.
Account and profile: login credentials, bio, photo, settings, booking-page details.
Billing: subscription and payment status (card details are handled by Stripe, not stored by us).
Usage: how you use the Service, device and log information.
Learner data entered by a coach (or held in a parent account):
Learner name and contact details.
Session logs: exercises, sets, reps, weight, attendance, coach notes.
Progress data and personal records.
For minors: the same, held inside the parent’s account.
We do not intentionally collect special categories of data (such as detailed health records). Fitness logs may touch on physical activity — coaches should only enter what is necessary.
4. How we use data
We use personal data to:
Provide and operate the Service (accounts, bookings, session logging, Zuno).
Process payments and manage subscriptions.
Send service messages (confirmations, notifications, and, via WhatsApp/email, communications you or your coach set up).
Keep the Service secure and prevent misuse.
Improve the Service and understand how it’s used.
Meet legal obligations.
We do not sell personal data.
5. Zuno and AI processing (please read)
Zuno is powered in part by a third-party AI provider, currently Anthropic’s Claude API.
When you use a Zuno feature, the relevant content of your request — which can include learner data, including a minor’s data — is sent to the Claude API to generate a response.
Under Anthropic’s commercial API terms, your data is not used to train their models by default.
Zuno’s output can be wrong and should be reviewed before you rely on or send it.
If you are not comfortable sending a particular piece of information to an AI provider, do not enter it into a Zuno feature.
6. Who we share data with (sub-processors)
We use trusted third parties to run the Service. Each processes data only as needed for their function:
Google Cloud (GCP)
Hosting and storage
Singapore region (asia-southeast1)
Anthropic (Claude API)
Powers Zuno’s AI features
See Section 5
Stripe
Payment processing
Handles card data directly
Google/Apple Calendar
Calendar sync for bookings
Only if you connect it
Meta (WhatsApp Business)
WhatsApp messaging
Messages you/your coach send via WhatsApp
We may also share data where required by law, or to protect the rights and safety of people using the Service.
7. Where your data is stored and international transfers
Your data is stored on Google Cloud in Singapore.
Some of our providers (for example, Anthropic, Stripe, Mailgun, Meta) may process data outside Singapore. Where that happens, we take steps required by the PDPA to ensure a comparable standard of protection.
8. Children’s data
Under-18 learners do not hold their own Clazuno accounts. A minor’s information sits inside a parent’s or guardian’s account, or is entered by the coach.
Coaches are responsible for obtaining consent from a parent or guardian before entering a minor’s data into Clazuno.
Parents can access, correct, or request deletion of their child’s data through their account or by asking the coach.
If you believe a child’s data has been added without proper consent, contact our DPO and we will act on it.
9. How long we keep data
We keep account data while your account is active.
After an account is closed, we delete or anonymise personal data within 90 days, unless we must keep it longer for legal, tax, or security reasons.
Learner data held on a coach’s behalf is deleted when the coach deletes it or closes their account, subject to the same exceptions.
10. How we protect data
We use reasonable technical and organisational measures — encryption in transit, access controls, and hosting with a reputable provider. No system is perfectly secure, but we work to protect your data and will notify affected people and the authorities of a serious breach as the law requires.
11. Your rights under the PDPA
You may:
Access the personal data we hold about you.
Correct data that is wrong.
Withdraw consent for uses that rely on it (this may limit the Service).
To exercise these rights, contact our DPO. For learner data, contact the relevant coach first, since they are the responsible organisation for that data; we will support them in responding.
12. Data Protection Officer / contact
Data Protection Officer: Chirag Kotak
Email: dpo@clazuno.com
13. Changes to this policy
We may update this policy. If a change is material, we’ll give reasonable notice. The “Effective date” at the top shows the latest version.
Do you have any other questions?
Just send us an email and we will reply soon.