Privacy Policy
Who we are
CoreClef is a music-education platform for teachers, parents and students, operated from Aotearoa New Zealand. We are the agency responsible for the personal information you provide.
Information we collect
Account details (name, email, role and language preference); studio details a teacher sets up; student profiles a teacher or parent creates (first name, optional surname, instrument and progress); lesson notes, practice logs and schedules; and billing rates a teacher configures. We do not collect payment card numbers — card data is handled directly by Stripe.
Children's data and parental consent
Many students are children. Student profiles are owned and managed by a parent or guardian, or by the teacher on the family’s behalf. A child does not need to create an account. Where a young person has their own login, a parent or guardian remains responsible for consent. We collect the minimum information needed to support music tuition and never use children’s data for advertising.
How we use information
To provide the service: managing rosters, repertoire, lesson notes, practice tracking, scheduling and billing calculations. With your consent, we may use a small amount of analytics to understand how the app is used. We do not sell personal information.
New Zealand Privacy Act 2020
We aim to comply with the Information Privacy Principles in the Privacy Act 2020, including collecting only what we need, keeping it accurate and secure, and using it only for the purposes described here.
Māori Data Sovereignty
We acknowledge te mana o te raraunga — Māori data sovereignty. Where CoreClef holds information relating to Māori individuals, whānau or communities, we recognise the principles articulated by Te Mana Raraunga and will work to honour them as the platform grows.
Where your data is stored
Personal information is stored with Supabase in the Sydney (ap-southeast-2) region, keeping data within Australasia. Subprocessors include Supabase (database and authentication), Stripe (payments), Resend (email) and Vercel (hosting).
Your rights
You can request access to, correction of, export of, or deletion of your personal information. Account holders can export and delete their own data from within the app; for anything else, contact us and we will respond within a reasonable time.
Cookies
We use essential cookies to keep you signed in and the app secure. Optional analytics cookies are only set with your consent, which you can change at any time from the “Cookie settings” link in the footer.
Retention and security
We keep personal information only as long as needed to provide the service or meet legal obligations, then delete it. Access is restricted by role using database row-level security so that one studio’s data is isolated from another.
Contact
Questions or requests: privacy@coreclef.com.