Privacy policy

Last updated November 4, 2026

Clefday is operated by UNATTACHED LIMITED, a company registered in Hong Kong (“we”, “us”). This policy explains what we collect when teachers use Clefday to run their studios and websites, and when families book, cancel and pay for lessons through a teacher’s page.

Who controls the information

Teachers decide what to collect from their families and use Clefday to manage it. For information about families and students, the teacher is responsible for their relationship with the family, and we process the information on the teacher’s behalf to provide the service. For teacher accounts, we are responsible for the information.

What we collect

• Teacher accounts: name, email, studio details, password (stored only as a secure hash), settings and the payment instructions you choose to display.
• If a teacher signs in with Google: the name, email address and account ID from their Google account. We don’t receive their Google password or anything else from the account.
• Teacher websites: the text, photos and logo a teacher adds, and any domain name they connect.
• Families: the parent’s name, email, phone number and, for in-home lessons, address; the student’s name, age, experience and any answers to the teacher’s sign-up questions.
• Lessons and billing: schedules, attendance, cancellations, time-change requests, makeup credits, invoices and whether a payment was marked as sent or confirmed.
• Optional payment screenshots a family uploads. We delete them 30 days after the payment is settled.
• Basic technical information needed to run and secure the service, such as IP addresses used for rate limiting and error logs.

We do not process card or bank payments and never receive card numbers or bank logins. Families pay teachers directly.

Children

Students are often children. Their information is provided by a parent or by the teacher, not collected from children directly. A parent can ask the teacher, or us, to correct or delete a child’s information at any time.

How we use it

• To show booking pages and teacher websites, schedule lessons, apply the studio’s policy and create invoices.
• To send booking confirmations, lesson reminders, invoices and account emails, and text messages to families who opted in.
• To keep the service secure, prevent abuse and fix problems.

We do not sell personal information and do not use it for advertising.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. See how Clefday text messages work.

Google user data

Clefday uses Google services only when a teacher chooses to:

• Sign in with Google: we use the name, email address and account ID to create the teacher’s account and sign them in.
• Google Calendar (two-way sync): we add the teacher’s lessons to their main Google calendar and keep them up to date. We read the events on that calendar from the day before to 60 days ahead, and from each event only its time, title and whether it is marked busy. We use them to show the teacher’s busy events on their Clefday calendar, so families can’t book over them, and so that a lesson the teacher moves or deletes in Google Calendar is moved or cancelled in Clefday. Each sync replaces the copy we keep. Other teachers in the studio don’t see these events. We delete them from Clefday when the teacher disconnects Google Calendar, removes Clefday’s access in their Google account, or is removed from the studio.

Clefday’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use this information only to provide these features. We don’t use it for advertising, don’t sell it, and don’t use it to train AI models. Our staff don’t read it unless the teacher asks us to for support, it is needed for security, or the law requires it. A teacher can disconnect Google at any time in Settings, or in their Google account’s security settings.

Website drafts written with AI

When a teacher asks Clefday to draft their website, we send their studio details (studio name, lessons, policies) and the short description they write to Anthropic’s Claude to write the first draft. No family or student information is sent. Anthropic does not use this data to train its models. The teacher reviews and edits every draft before publishing it.

Service providers

• Cloudflare: hosting, data storage and sending email.
• Google: sign-in and two-way calendar sync, only when a teacher turns them on.
• Google Analytics: counts visits to Clefday’s own public pages (see Cookies below).
• Anthropic: website drafts when a teacher asks for one, and answers to teachers’ questions in the in-app help assistant.
• Twilio: text messages, only to families who agreed to them.

These providers process information only to provide their part of the service. Data is stored mainly in the United States.

Cookies

The service itself uses only the cookies it needs: one to keep a teacher signed in, and short-lived ones for security and one-time messages.

Clefday’s own public pages (the home page, website designs, these policy pages and the sign-up page) use Google Analytics to count visits: which pages are viewed, how visitors found us, and whether they signed up. It sets its own cookies on clefday.com and Google receives the visitor’s browser details and IP address. We don’t use it for advertising. Google Analytics is never used in the teacher app, on family pages, on booking pages or on teachers’ websites, so no family or student information is sent to it. You can block it with Google’s opt-out browser add-on or your browser’s privacy settings.

Security

Connections are encrypted (HTTPS), passwords are stored only as secure hashes, and access to studio data is limited to that studio’s teachers.

Retention and deletion

We keep studio data while the teacher’s account is active. A teacher can archive families and ask us to delete their account and data. Families can ask their teacher, or contact us, to delete their information. We delete data within 30 days of a confirmed request, except where we must keep it by law. Copies of the emails and texts Clefday sends are deleted after 90 days. For automatic messages (reminders, invoices, notices) we keep only a short record (who it went to, the subject and when) so the same message is never sent twice.

Changes

If we change this policy, we’ll update the date above, and we’ll tell teachers by email about important changes.

Contact

Questions or requests: support@clefday.com.