Privacy Policy — musicminim

musicminim (“we”, “us”, “our”) is a service operated by a small family team based in London, United Kingdom. This policy explains what data we collect, how we use it, and your rights.

If you have any questions, contact us at hello@musicminim.com.

1. Data We Collect

Account information: your name, email address, and optional studio name.
Student records: names, ages, instruments, grade levels, parent contact details, and lesson notes that you enter into the service.
Usage data: which tools you use, how many documents you generate, and timestamps. We use this to manage usage limits and improve the service.
Session data: authentication tokens stored in cookies to keep you logged in.

2. How We Use Your Data

To provide and operate the musicminim service.
To generate AI-powered documents from the information you provide in each tool.
To send transactional emails (account welcome, password reset).
To respond to contact form submissions.

We never sell your data to third parties. We never use your student data to train AI models.

3. Legal Basis for Processing (UK/EU)

We process your personal data under the following legal bases:

Contract performance (Article 6(1)(b)): processing necessary to provide the Service you signed up for (account management, AI document generation, invoicing features).
Legitimate interests (Article 6(1)(f)): usage metrics to manage service capacity and improve reliability.
Legal obligation (Article 6(1)(c)): where we are required by law to retain certain records.

Student data you enter is processed on your behalf; as a teacher you are the data controller for your students' information, and we act as your data processor.

4. AI Processing

Documents are generated using the Claude API, provided by Anthropic. Only the specific information you enter in a tool at the time of generation is sent to Anthropic's API. This data is subject to Anthropic's Privacy Policy. Anthropic does not use API data to train their models by default.

5. Third-Party Processors

We share data with the following processors solely to operate the Service:

Neon (US) — PostgreSQL database hosting for account and student data.
Vercel (US / global CDN) — application hosting and delivery.
Anthropic (US) — Claude API for AI document generation. Only the specific input you provide per request is sent; data is not used for model training.
Postmark (US) — transactional email delivery (welcome emails, password resets).

All processors are bound by data processing agreements. Data transfers to the United States are made under Standard Contractual Clauses (SCCs) as approved by the UK ICO and European Commission.

6. Data Storage

Your account and student data are stored in a PostgreSQL database hosted by Neon (United States). The application is hosted on Vercel (United States / global edge network). Both providers operate under standard data processing agreements.

7. Data Retention

Your data is retained until you request account deletion. To delete your account and all associated student data and documents, email hello@musicminim.com and we will process your request within 30 days.

8. Your Rights (UK & EU)

If you are located in the United Kingdom or European Union, you have rights under UK GDPR / GDPR, including:

The right to access the personal data we hold about you.
The right to correct inaccurate data.
The right to erasure (“right to be forgotten”).
The right to restrict how we process your data.
The right to data portability.
The right to object to processing.

To exercise any of these rights, contact hello@musicminim.com. We will respond to all valid requests within one month of receipt. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority.

9. Cookies

We use session cookies for authentication only. We do not use tracking, advertising, or analytics cookies. No third-party cookies are set on our pages.

10. Children's Data

musicminim is a tool for music teachers. Student data entered by teachers may include information about minors. Teachers are responsible for ensuring they have appropriate consent from parents or guardians before entering student data into the service.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of any material changes by email at least 14 days before the changes take effect. If you do not agree with the updated policy, you may request deletion of your account before the effective date. Continued use of the Service after the effective date indicates your acknowledgement of the updated policy.

12. Contact

For any privacy-related questions or requests: hello@musicminim.com