Privacy policy
Prodigy Suite is software that studios, schools and academies use to run their classes. This policy explains what we collect, why, and what we will not do with it. It is written to be read, not to be survived.
What we collect
| Data | Why | Whose |
|---|---|---|
| Name, email, password hash | To create and secure an account | Studio staff and parents |
| Studio name, address, phone, currency, tuition rules | To run the studio and print invoices | Studio |
| Location names, addresses and phone numbers, for studios that run classes at more than one site | So a family is told which building to come to. Like the class timetable, this is readable by anyone with the studio's link — it is the address on the door, not a private record | Studio |
| Student name, date of birth, medical notes, photo consent, emergency contact | Rosters, safety, and knowing who is in the room | Entered by the studio or the parent |
| Enrollments, attendance records, invoices and payment records | The core of the service | Studio and families |
| Card details | We never see or store them. Cards go directly to Stripe; we keep the last four digits so a human can recognise the card | Families and studios |
| Log data: IP address, browser, timestamps, errors | Security, abuse prevention and fixing faults | Everyone |
What we do not do
- We do not sell personal data, and we never will.
- We do not use student data to train advertising or profiling models.
- We do not market to a studio's families. Their relationship is with the studio.
- We do not read your data except when you ask us to help with a specific problem, or when the law requires it.
Who processes data for us
- Google Firebase — hosting, authentication and the database.
- Stripe — subscriptions and card payments. Stripe is the card processor of record.
- Google Analytics — page-view statistics for our own marketing, help, billing and legal pages, so we can see which pages are used and how people find us. It sets a cookie in your browser and receives the page address, a rough location and device type; it never receives names, email addresses, student records or payment details. It does not run on any page that shows a studio's families or students, nor on the registration, trial-booking or studio class pages a family uses. If you appear to be visiting from the EU, the UK or Quebec we ask before it runs; everyone can change their choice here at any time, or block it with a browser setting or an ad-blocker without affecting the app.
- Meta (the Facebook pixel) — measures which of our Facebook and Instagram ads bring studios here, on the same marketing, help, billing and legal pages as above. It sets a cookie in your browser and tells Meta the page address, a rough location and device type, plus whether you started a free trial; it never receives names, email addresses, student records or payment details. It does not run on any page that shows a studio's families or students, nor on the registration, trial-booking or studio class pages a family uses. It is covered by the same consent choice as Google Analytics: if you appear to be visiting from the EU, the UK or Quebec we ask before it runs, and you can change your choice at any time.
All four are bound by their own data-processing terms. We add no other processors without updating this page.
Children's data
Student records usually describe minors. They are entered by an adult — a studio staff member or the child's own parent or guardian — never collected from the child directly. We do not create accounts for children, do not send them messages, and do not build profiles about them. A parent may ask their studio to correct or remove their child's record at any time, and the studio can do it themselves in the app.
How long we keep it
While the studio's account is active, and for 30 days after cancellation so an accidental cancellation can be undone. After that, studio data is deleted from live systems; encrypted backups age out within a further 60 days. Financial records that we are legally required to retain are kept for the statutory period and nothing more.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Parents should ask their studio first — they hold the records and can act immediately. If you cannot get an answer, email privacy@prodigysuite.co and we will respond within 30 days.
Where data lives
Data is stored in the Google Cloud region chosen for the studio's project, and may be processed in other countries where our providers operate, under standard contractual clauses where required.
Changes
If we change this policy in a way that materially affects you, we will email account owners before it takes effect. The date at the top always reflects the current version.