Sudobu Privacy Policy

This Privacy Policy applies to personal information we process when you:

• Visit our website
• Create or manage an account
• Use our mobile applications or web applications
• Contact support

Updates. We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by law. Continued use after the effective date of an updated policy constitutes acceptance.

Sudobu is a B2B platform used by studios (“Customers”). Much of the data processed in Sudobu—such as student and parent/guardian information—is Customer Data that we process on behalf of the studio.

• The studio is responsible for its own privacy practices and notices to its students/members/parents/guardians.
• Requests relating to Customer Data (e.g., a parent requesting deletion) should generally be directed to the studio first. We will support the studio as needed.

A. Information You Provide

• Account & Business Information: Name, email, phone number, studio/business name and details, login credentials (stored in hashed/secured form)
• Support and Communications: Messages you send to support, information you provide in forms or surveys
• Payment & Billing: Transaction and billing metadata. Payments are processed by Stripe; we do not store full payment card numbers.

B. Information Collected Automatically

• Device and Usage Data: IP address, device identifiers, browser type, OS, app version, settings, and usage events, approximate location derived from IP address

C. Communications Metadata

If enabled by your studio, the Services may facilitate communications (e.g., SMS). We may process message metadata necessary to deliver communications through providers such as Twilio.

• Keep you signed in
• Remember preferences
• Understand usage and improve the Services

You can adjust browser settings to manage cookies; some features may not function properly if cookies are disabled.

• Provide, secure, and maintain the Services
• Authenticate users and administer accounts
• Process billing and payments
• Provide customer support
• Monitor performance, debug, and improve features
• Send service-related communications (e.g., account notices)
• Protect against fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell personal information. We share information in limited circumstances:

A. Service Providers (Subprocessors)

• Amazon Web Services (AWS) (hosting/infrastructure)
• Stripe (payments)
• Twilio (communications)

B. Within the Customer Organization

Information may be shared among authorized users within a studio account based on roles and permissions.

C. Legal and Safety

We may disclose information if required by law, legal process, or to protect the rights, safety, and security of Breathe Out, our users, or others.

D. Business Transactions

If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction as permitted by law.

Sudobu is intended for use by studios and their authorized staff, not by children directly. However, Customer Data may include information about minors.

• We do not knowingly market the Services to children.
• Studios are responsible for obtaining any necessary parental consents.
• We do not use children’s data for behavioral advertising.

• Provide the Services
• Meet contractual obligations
• Resolve disputes and enforce agreements
• Comply with legal and accounting requirements

Retention periods may vary depending on the type of data and Customer instructions.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (HTTPS), access controls, and secure infrastructure. No method of transmission or storage is completely secure.

• Access and obtain a copy of your personal information
• Correct inaccuracies
• Request deletion
• Object to or restrict certain processing
• Data portability

How to exercise rights. Email us at support@sudobu.com. We may need to verify your identity and/or confirm you are authorized to make the request. For requests involving Customer Data, we may direct you to the relevant studio or coordinate with them.

We may process and store information in the United States and other locations where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

Breathe Out LLC (Sudobu)

Email: admin@sudobu.com

Address: 8 The Green, Suite B, Dover, DE 19901