Privacy Policy.

Information You Provide

• Account information: Name, email address, phone number, and password when you register.
• Profile information: Optional details such as preferred language and notification preferences.
• Booking information: Bay reservations, lesson appointments, and related preferences.
• Lesson records: Notes, references, and progress data shared between instructors and students.
• Payment information: Processed securely by Square. We do not store full credit card numbers; we only retain transaction identifiers and the last four digits of the card.
• Communications: Messages you send to us via email or in-app feedback.

Information Collected Automatically

• Usage data: Pages visited, features used, time spent, and device interactions.
• Device information: Device type, operating system, app version, and browser type.
• Log data: IP address, access times, and error logs for security and debugging.

We use your information to:

• Provide and operate the booking and lesson management Service.
• Process payments through Square and manage memberships.
• Send transactional notifications (booking confirmations, lesson reminders, payment receipts) via email or push notifications.
• Communicate important account or service updates.
• Improve, secure, and troubleshoot the Service.
• Comply with legal obligations.

We rely on the following third-party providers to operate the Service:

• Supabase (database and authentication) — hosts user accounts, bookings, and lesson data. Data is stored in the United States.
• Square (payment processing) — handles all credit card transactions. Square's privacy policy applies to payment data: squareup.com/legal/privacy
• Cloudflare R2 (file storage) — stores uploaded files such as lesson reference materials.
• Vercel (application hosting) — serves the web and mobile app infrastructure.

These providers process your data only as necessary to perform their services and are bound by their own privacy and security obligations.

We do not sell your personal information. We may share information only in these limited circumstances:

• With instructors, when you book a lesson (they see your name and booking details).
• With service providers listed in Section 3, as needed to operate the Service.
• When required by law, court order, or to protect the rights, property, or safety of SUPAR, our users, or others.

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information through your profile settings.
• Delete your account and associated data at any time via the in-app "Delete Account" option, or by contacting us.
• Opt out of marketing communications (transactional messages such as booking confirmations cannot be opted out of as long as you have an active account).
• Withdraw consent to push notifications through your device settings.

To exercise these rights, contact us at the email below.

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain records (such as payment transactions) for up to 7 years to comply with tax, accounting, and legal obligations.

We use industry-standard security measures, including HTTPS encryption, secure authentication via Supabase, and PCI-compliant payment processing through Square. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

The Service is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. As stated above, we do not sell personal information. To exercise CCPA rights, contact us at the email below.

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last Updated" date and, where appropriate, sending you a notice through the Service or via email.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: