Privacy Policy

What changed: new section 7 explains what we receive when you connect Google Calendar, how we use it, and our Limited Use commitment.

1. Introduction

Clazuno Pte. Ltd. ("Clazuno", "we") explains in this policy how we manage personal data, in accordance with Singapore's Personal Data Protection Act (PDPA). If anything is unclear, contact our Data Protection Officer (see section 15).

In this policy, "client", "learner" and "student" all mean a person being coached.

2. Our role: who is responsible for what

Who is responsible for data depends on the kind of data:

• Coach, parent and learner accounts: Clazuno is the responsible organisation and decides how this data is used. For a learner with their own account, this covers their account details and anything they enter themselves.
• Client data entered by coaches: the coach is responsible, including for features the coach uses on that data, such as Zuno proactively flagging an at-risk client. Clazuno processes it as a data intermediary, following the coach's instructions.
• Intake forms and coaches' terms: a coach can ask clients to complete an intake form, including the PAR-Q+ questionnaire, and to accept the coach's own terms. The coach decides what to ask and what their terms say, and is responsible for the answers. Clazuno stores them as a data intermediary, following the coach's instructions.
• Our own purposes: for things like product analytics and security, Clazuno is responsible.

3. What we collect

From account holders:

• Identity: name, email, phone and date of birth. We ask for date of birth so that we can apply our age rules (see section 10). It is entered by the person themselves or by their coach; for a child's profile, the parent enters it.
• Address: optional. It is whatever you choose to enter, often a home address.
• Account details: credentials, bio, photo, settings
• Billing: subscription and payment status. Card details are entered on Stripe's own secure payment page, not in the app, and go directly to Stripe; they never reach Clazuno's servers. Clazuno does not store full card numbers.
• Usage: how you interact with the service, and device information
• Device and diagnostics: a push notification token so we can send you app notifications, and crash and error reports (device model, operating system, app version and error details)
• How you found us: when you sign up, we record the link or page you came from (for example the button you clicked on our website, a campaign tag, the referring site and the page you first landed on), together with the time you signed up
• Country: when you sign up, we use your IP address once to estimate your country so we can set sensible defaults. We do not store it with your account.
• Connected calendars: if you connect Google Calendar, the calendar data described in section 7

Photos and files: coaches may upload a photo, for example a class poster. We store the uploaded image and show it where the coach places it. Photo library access is requested only when you choose to upload.

From website visitors who ask to hear from us:

• Your email address, the page or form you used (for example the waitlist, product updates or the Studio list), and for Studio the number of coaches you tell us about
• Anything you write to us through the contact form or by email

From people who take our coach survey:

• Your answers to the survey, which are anonymous unless you choose to give your email address
• If you give your email address: the address itself, so we can send you the results, invite you to join our founding cohort and contact you about follow-up conversations
• The link or campaign tag you arrived from, if it was part of the survey link

Client data:

• Contact information, date of birth, address where entered, session logs, progress records, and coach notes
• Data of children under 13, which is stored within parent accounts
• Workout logs (exercises, weights, repetitions, personal records) and session notes that the coach chooses to enter
• Intake form answers. A coach can ask clients to complete an intake form when they enrol or in the app. The coach writes their own questions and can also use the standard PAR-Q+ physical activity readiness questionnaire, whose questions cannot be changed. Answers may include health information, such as a medical condition, an injury or an emergency contact. For a child under 13, a parent or guardian completes the form.
• Acceptance of a coach's terms. When a client accepts a coach's terms, we record who accepted, which version they accepted, and the date and time.
• Clazuno is not a medical or clinical records system. Because coaches write their own questions, we do not control what they ask. Coaches should ask only for the information they need to run their sessions safely. If you are unsure why a coach is asking for something, ask the coach before you answer.

On our website: we measure visits with privacy-friendly website analytics that does not use advertising cookies and does not track you across other sites.

4. How we use data

We use personal data to:

• Operate accounts, bookings, and session logging
• Process payments
• Send service communications and notifications, including reminders by WhatsApp, email and app notification
• Send product updates and launch news to people who asked for them on our website
• Analyse survey answers to understand how independent coaches work, and share the results with people who asked for them
• Understand which parts of our website lead to sign-ups, so we can improve it
• Keep the service secure
• Improve the platform
• Meet legal requirements

Intake answers are used only so the coach can deliver their service. Only the coach and the person who submitted them (or that person's parent or guardian) can see them in the app. We do not use them for analytics, marketing, profiling or improving the product.

We do not sell personal data.

5. Advertising

Clazuno does not display advertisements and does not use advertising identifiers or advertising cookies in the app. We do not sell personal data. If we ever want to share your personal data with a partner, we will ask for your consent first. We may share aggregated information that does not identify anyone.

6. Zuno and AI processing

Zuno uses a third-party AI provider, currently Anthropic's Claude API. When you use Zuno features, the relevant request content, which may include data about someone under 18, is sent to the Claude API. Under Anthropic's terms, your data is not used to train their models by default. If you are not comfortable sharing specific information, please don't enter it into Zuno features.

Intake answers are not sent to the AI provider. Zuno does not read intake form or PAR-Q+ answers.

Voice input. If you use voice input with Zuno, your device's built-in speech recognition (Apple or Google, depending on your phone) turns your speech into text, which is then sent to Zuno as a normal typed request. Depending on your device and settings, Apple or Google may process the audio on their own servers to do this, under their own privacy policies. Clazuno does not record, receive or store audio; only the text reaches us. The microphone is used only when you tap the voice button.

7. Google user data

Connecting Google Calendar is optional. If you connect it, Clazuno receives:

• The list of calendars in your Google account, so you can choose which one Clazuno syncs with
• Events in the calendar you choose: their dates, times and titles
• The email address of your Google account, so we can show which account is connected

We use this data only to add your Clazuno sessions to your calendar and keep them up to date, and to show in Clazuno when you are busy or on holiday so sessions are not booked over that time. Zuno can read your busy times, including their titles, when it answers your questions about your schedule. To do that, they are sent to our AI provider (Anthropic) as described in section 6, and Anthropic does not use them to train its models.

Limited Use. Clazuno's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.

• We do not use Google user data, raw or derived, to develop, improve or train generalised or foundational AI or machine-learning models.
• We do not sell Google user data, use it for advertising, or transfer it to anyone except as needed to provide the features above, for security, to comply with the law, or with your consent.
• Our staff do not read your Google user data unless you ask us to (for example, for support), it is needed for security or to comply with the law, or it has been aggregated so it no longer identifies anyone.

You can disconnect Google Calendar at any time in Settings. When you disconnect, Clazuno stops receiving your calendar data and removes the upcoming sessions it added to your calendar. You can also remove Clazuno's access from your Google Account's security settings.

8. Who we share data with (sub-processors)

Online payments are processed by Stripe. If we add other payment providers, we will list them here before they are used.

Clazuno does not store full card numbers.

We also share data where the law requires it, or to protect someone's safety.

9. Where your data is stored and international transfers

Your data is stored on Google Cloud in Singapore. Some of our providers may operate outside Singapore. Where they do, we take the steps the PDPA requires so your data receives a comparable standard of protection.

10. Age and children's data

Clazuno is for people aged 13 and over. Coach and parent accounts are for people aged 18 and over.

• Ages 13 to 17: people aged 13 to 17 may hold their own account, and we ask that a parent or guardian knows and agrees. They are treated like any other account holder for sign-in and privacy rights. We use their data only to provide, secure and improve the service. We do not use it for advertising, marketing or profiling, and we do not sell it.
• Under 13: children under 13 may not hold an account and do not sign in. A parent or guardian may manage a child's profile from their own account, or a coach may enter a child's details with the parent or guardian's consent.

Coaches who add a person under 18 must obtain a parent or guardian's consent first and are responsible for keeping it.

Parents and guardians of someone under 18 may ask us to access, correct or delete that person's data by contacting dpo@clazuno.com. Parents can also see and manage a child's data through their own account or by asking the coach.

If we learn that a person under 13 holds an account, we will close it and delete or move the data under a parent's account. If you think a child's data has been entered without authority, contact our Data Protection Officer and we will investigate.

11. How long we keep data

We keep account data while your account is active. After an account is closed, we delete or anonymise the data within 90 days, unless the law or security needs require us to keep it longer. Client data is deleted when the coach removes it or closes their account, subject to the same exceptions. Section 12 explains what happens when you delete your account.

Intake answers and records of a client accepting a coach's terms are kept with the client's data and deleted with it.

Email addresses on our website update lists are kept until you unsubscribe or ask us to remove them, or until we close the list. Sign-up source information is kept with your account and deleted with it.

Survey answers are kept in anonymised form for as long as they are useful to our research. If you gave your email address, we keep it until you ask us to remove it, and we delete it when we have finished contacting survey participants.

12. Deleting your account and data

You can delete your account in two ways.

• In the app: go to Settings, then Support, then Delete account. Type DELETE to confirm.
• Without the app: email dpo@clazuno.com from the address on your account, with the subject "Delete my account". We will confirm your identity and complete the request within 30 days.

You can also ask us to delete some of your data without closing your account. Email dpo@clazuno.com from the address on your account and tell us what you want removed. If your coach entered the information, please ask your coach first (see section 14). Step-by-step instructions are on our Delete your account page.

What happens when you delete your account:

• Sign-in is disabled at once.
• Your name, email, phone, photo, date of birth, address, push tokens, calendar links and linked payment customer references are removed or anonymised.
• If you hold a parent account, the child profiles you manage are removed too.

What we keep:

• Records that other people's accounts depend on, such as invoices, payment records and attendance, are kept without the deleted person's name, as needed for the coach's accounting and legal obligations.
• Backups are cleared within 90 days.

Coaches with upcoming sessions: a coach with upcoming scheduled sessions must cancel them or notify learners before the account can be deleted.

Payment providers: payment providers keep their own records under their own policies and legal duties.

13. How we protect data

We use encryption, access controls and reputable hosting. No system is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires.

14. Your rights under the PDPA

You can ask to access your data, correct it, and withdraw consent for how it is used. You can also delete your account (see section 12). For client data, including intake answers, please ask the coach first, since the coach is responsible for it. We will support them in responding. Parents and guardians of someone under 18 can also ask us directly (see section 10).

You can stop our update emails at any time by asking us, or by emailing dpo@clazuno.com, and we will remove your address. The same goes for your email address from the coach survey.

15. Data Protection Officer / contact

Data Protection Officer: Chirag Kotak

Email: dpo@clazuno.com

For anything else, email zuno@clazuno.com.

16. Changes to this policy

If we make a material change, we will give reasonable advance notice. The effective date above shows the current version.