Privacy policy
Prodigy Suite is software that studios, schools and academies use to run their classes. This policy explains what we collect, why, and what we will not do with it. It is written to be read, not to be survived.
What we collect
| Data | Why | Whose |
|---|---|---|
| Name, email, password hash | To create and secure an account | Studio staff and parents |
| Studio name, address, phone, currency, tuition rules | To run the studio and print invoices | Studio |
| Student name, date of birth, medical notes, photo consent, emergency contact | Rosters, safety, and knowing who is in the room | Entered by the studio or the parent |
| Enrollments, attendance records, invoices and payment records | The core of the service | Studio and families |
| Card details | We never see or store them. Cards go directly to Stripe; we keep the last four digits so a human can recognise the card | Families and studios |
| Log data: IP address, browser, timestamps, errors | Security, abuse prevention and fixing faults | Everyone |
What we do not do
- We do not sell personal data, and we never will.
- We do not use student data to train advertising or profiling models.
- We do not market to a studio's families. Their relationship is with the studio.
- We do not read your data except when you ask us to help with a specific problem, or when the law requires it.
Who processes data for us
- Google Firebase — hosting, authentication and the database.
- Stripe — subscriptions and card payments. Stripe is the card processor of record.
Both are bound by their own data-processing terms. We add no other processors without updating this page.
Children's data
Student records usually describe minors. They are entered by an adult — a studio staff member or the child's own parent or guardian — never collected from the child directly. We do not create accounts for children, do not send them messages, and do not build profiles about them. A parent may ask their studio to correct or remove their child's record at any time, and the studio can do it themselves in the app.
How long we keep it
While the studio's account is active, and for 30 days after cancellation so an accidental cancellation can be undone. After that, studio data is deleted from live systems; encrypted backups age out within a further 60 days. Financial records that we are legally required to retain are kept for the statutory period and nothing more.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Parents should ask their studio first — they hold the records and can act immediately. If you cannot get an answer, email privacy@prodigysuite.co and we will respond within 30 days.
Where data lives
Data is stored in the Google Cloud region chosen for the studio's project, and may be processed in other countries where our providers operate, under standard contractual clauses where required.
Changes
If we change this policy in a way that materially affects you, we will email account owners before it takes effect. The date at the top always reflects the current version.