Privacy
Effective 2 September 2026
AfterNote joins music lessons a tutor has marked for recording, transcribes them, and drafts a practice plan the tutor reads before anything is sent. This page says what is collected, who else processes it, and how long it is kept.
The short version
- AfterNote never stores audio or video of a lesson.
- Only lessons a tutor has explicitly marked are recorded. Everything else on the calendar is read and ignored.
- No cookies, no analytics, no advertising, no tracking of any kind.
- Nothing is used to train an AI model.
- Nothing is sold or rented, to anyone, for any purpose.
- Nothing reaches a student until their tutor has read it and pressed send.
- Getting permission to record is the tutor’s to do. AfterNote does not ask on their behalf and does not check that they have.
1. Definitions
- AfterNote, we, us — the provider of the AfterNote service.
- Tutor — a music teacher with an AfterNote account. Also called a studio.
- Student — a person taught by a tutor. Students do not have AfterNote accounts.
- Studio data — the student records a tutor creates: names, email addresses, and anything else they choose to record.
- Lesson content — the transcript of a recorded lesson, the practice plan drafted from it, and the tutor’s notes on it.
2. Who controls what
This matters more than anything else on the page, because it decides who to ask.
We control the tutor’s own account information — their name, email address, studio name, and how they use the service. For that, AfterNote is the data controller.
The tutor controls their studio data and lesson content. They decide which students exist, what is recorded about them, which lessons are recorded, and who receives a practice plan. For all of that, the tutor is the data controller and AfterNote is a processor acting on their instructions. We do not use studio data or lesson content for our own purposes.
So: if you are a student or a parent, your tutor holds your record and is the right person to ask first. If they cannot help, write to us and we will.
3. What we collect
Tutor account
Name and email address, taken from Google at sign-in; studio name; timezone. There is no password — sign-in is Google only — so AfterNote stores no password.
Google account data
There are two separate authorisations and they ask for different things.
Signing in uses openid and userinfo.email.
We receive an email address and Google’s confirmation that it is verified, and
use it to match a person to an existing account. AfterNote does not create accounts
from Google sign-in: if no account exists for that address, sign-in fails.
Connecting a calendar uses
https://www.googleapis.com/auth/calendar.events. We use it to read events
on the connected calendar, so AfterNote can find the lessons a tutor has marked, and to
add our recorder to those events as a guest. Adding that guest is the only write
AfterNote makes to a calendar. It does not create, move, or delete events.
A connected calendar shows AfterNote everything on it — other work, appointments, personal things. That is exactly why recording is opt-in for each event rather than guessed at: a lesson is recorded only if the tutor has explicitly marked it. Everything else on the calendar is read and ignored. How to mark a lesson is explained during setup.
A tutor can disconnect in Settings at any time, or revoke AfterNote’s access directly at myaccount.google.com/permissions.
Limited Use
AfterNote’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only to provide the features described above. It is not sold, not used for advertising, and not used to train any generalised AI model.
Students
Entered by a tutor or matched from a calendar event: name and email address, and optionally date of birth, instrument, level, and the tutor’s own free-text notes.
Lesson content
For each recorded lesson: the transcript, the practice plan drafted from it, the tutor’s private notes, and the record that a recording happened and how long it ran.
Technical information
Our servers keep ordinary logs — IP address, the time of a request, which page or endpoint was asked for, and error detail. These exist to keep the service running and to investigate faults and abuse.
4. Cookies and tracking
AfterNote sets no cookies in the tutor application and uses no tracking of any kind. There is no analytics package, no advertising pixel, no remarketing tag, and no third-party script on this website or in the application. Signed-in sessions are held by a token stored in the browser’s local storage, not a cookie.
The one exception is our own administrative interface, which is used only by us and sets a session cookie strictly to keep that session signed in.
Because we do not track anyone, there is nothing for a “Do Not Track” or Global Privacy Control signal to turn off. We honour them by not doing it in the first place.
5. How we use it
- To run the service: find marked lessons, record them, transcribe them, draft a practice plan, and send it when a tutor presses send.
- To keep it working: diagnose faults, prevent abuse, keep it secure.
- To contact a tutor about their account or a material change to this page.
- To meet legal obligations.
We do not use it for anything else, and specifically not for advertising.
6. AI, and what is not done with your lessons
A transcript is sent to Anthropic to draft the practice plan. That is the only place lesson content meets a general AI model, and it is used to produce that studio’s plan and nothing else.
AfterNote does not train any model on your lessons, your students, or your transcripts, and does not permit its vendors to. Anthropic’s commercial terms, as of the date at the top of this page, state that it does not train its models on inputs submitted through its API.
7. Who else processes it
| Company | What they do with it | Where |
|---|---|---|
| Recall.ai | Joins and records the lesson, produces the transcript, and watches the connected calendar for changes | United States |
| Anthropic | Drafts the practice plan from the transcript | United States |
| Amazon Web Services | Hosting, database, sending email | United States (Oregon) |
One of those needs spelling out, because it is not what people assume. So that Recall.ai can tell us when a lesson moves in Google Calendar, we pass it the authorisation the tutor gave us — the same credential, not a copy of the calendar. Recall can therefore read the connected calendar directly, without going through AfterNote.
It stays one authorisation rather than two, which is the part that works in your favour: revoking AfterNote at myaccount.google.com/permissions ends Recall’s access at the same moment, because there is only one grant to revoke. Disconnecting the calendar in Settings also tells Recall to stop watching and deletes its copy.
None of them sells this information. AfterNote does not sell or rent anything it holds, to anyone, for any purpose, and has never done so.
This list is current as of the date at the top of this page. If we change who processes lesson content we will update it here before the change takes effect.
We may also disclose information if the law requires it, to enforce our terms, or to protect someone’s safety. If a business transfer ever happened, information would move with it and this page would say so first.
8. How long it is kept
The periods below are current as of the date at the top of this page. The seven days at Recall.ai is their retention setting rather than ours, and could change if they change it; we would update this page.
- Transcripts and practice plans — while the studio’s account is open.
- The raw transcript payload from Recall — 30 days, then deleted automatically.
- Recall’s copy of the recording — 7 days.
- Student records — until the tutor deletes them. Deleting a student hides them and stops future lessons being processed; the record is retained so past lessons do not lose the person they refer to. Ask us and we will erase it outright.
- Server logs — a short period, for fault-finding and security.
- Closed accounts — when a studio closes its account we delete its data within 30 days, except anything we must keep by law.
9. Where it is processed
The United States, in Amazon’s Oregon region. Recall.ai and Anthropic also process in the United States.
If you are in Canada, your information is processed and stored in the United States and is subject to United States law while it is there, including lawful access requests by US authorities. Using AfterNote means accepting that.
10. Security
Information is encrypted in transit and at rest. Access is scoped per studio, and keeping it that way is part of how we build and test the product. Sign-in is Google only, which means there is no AfterNote password to guess, reuse, or leak.
No system is perfectly secure and we do not claim otherwise. If you find a way to reach data that is not yours, email info@afternote.studio and we will treat it as the priority it is.
If a breach affects your information we will tell you, and any regulator we are required to tell, without undue delay once we understand what happened.
11. Permission to record
AfterNote does not obtain consent to record on a tutor’s behalf, and does not check whether they have it. Obtaining it, and keeping a record of it, is the tutor’s responsibility, and it is written into our terms of service.
The rules differ by where you are. In the United States, roughly a dozen states require every party to a conversation to consent before it is recorded. In Canada, recording a conversation you are part of is generally not a criminal offence, but privacy legislation in British Columbia, Alberta and Quebec still requires consent before personal information is collected, and British Columbia additionally makes violation of privacy a tort in its own right. Where a student is a child, that consent normally comes from a parent or guardian.
12. Children
Many music students are children, so this section is not boilerplate.
AfterNote has no accounts for students, and therefore none for children, and the service is not directed to children. A child’s information is in AfterNote because their tutor entered it, or because they were present in a lesson their tutor marked for recording. Where the tutor has given us a child’s own email address as the place to send practice plans, we hold that address and send to it, so we do not claim that no information about a child ever reaches us directly.
Under the Children’s Online Privacy Protection Act, a child under 13 cannot consent for themselves. Where a student is under 13, we rely on their tutor having the verifiable consent of a parent or guardian before recording them or entering their details. That obligation is written into our terms of service.
If you are a parent or guardian and your child’s information is in AfterNote without your permission, email info@afternote.studio. We will tell you what is held, delete it, and tell the tutor we have done so.
13. Your rights
Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. We will not treat you differently for asking.
Tutors — most of this is in Settings; email us for the rest. Students and families — your tutor controls your record, so ask them first; if that does not work, email us and we will act.
Email info@afternote.studio. We aim to answer within 30 days. We will need to be confident you are who you say you are before we hand over or delete anything, which usually means writing from the address already on the record.
If you live in California or another US state with a privacy law
California, and a growing number of other states, give residents specific rights: to know what is collected and why, to get a copy, to have it corrected, to have it deleted, and to opt out of its sale or of targeted advertising.
AfterNote does not sell personal information and does not share it for cross-context behavioural advertising. It never has. There is no opt-out link on this site because there is nothing to opt out of.
Categories of personal information collected in the last twelve months:
| Category | What, specifically | Where it comes from |
|---|---|---|
| Identifiers | Tutor name and email; student name and email | Google sign-in; entered by the tutor |
| Protected classification | A student’s date of birth, if the tutor records one | Entered by the tutor |
| Internet or network activity | IP address, server logs | Automatically, on use |
| Audio or visual information | The lesson recording — held by Recall.ai for 7 days, never stored by AfterNote | The lesson |
| Education information | Instrument, level, transcript, practice plan, tutor’s notes | The lesson; entered by the tutor |
| Inferences | The practice plan drafted from the transcript | Generated from the lesson |
All of it is collected for one business purpose: providing the service described on this page. None of it is sold or shared.
If you live in Canada
AfterNote is operated from British Columbia, so British Columbia’s Personal Information Protection Act applies to how we handle personal information, alongside the federal Personal Information Protection and Electronic Documents Act for information that moves across a border or a province.
Under those laws you may ask what we hold about you, ask us to correct it, and complain about how we handled it. Start with us at info@afternote.studio. If we do not resolve it, you can complain to the Office of the Information and Privacy Commissioner for British Columbia, or to the Office of the Privacy Commissioner of Canada, or to the commissioner in your own province.
As set out above, your information is stored and processed in the United States even though we are in British Columbia. That is a decision you are entitled to know about before you use the service, which is why it is stated twice on this page.
14. Other sites
This page covers AfterNote only. Google, and anything else we link to, has its own policy and we are not responsible for it.
15. Changes
Changes get posted here with a new date. If a change materially affects how information is handled, we will email tutors rather than rely on anyone noticing.
16. Contact
British Columbia’s Personal Information Protection Act requires us to name an individual accountable for our compliance with it. That role is held by AfterNote’s Privacy Officer, reachable at info@afternote.studio, which is also the address for everything else on this page.