This policy explains how Breathe Out LLC (“we”, “us”) handles personal information in the Sudobu studio dashboard, the Sudobu member app, and this website (together, the “Service”). It applies to studio owners and staff who use Sudobu to run their business, and to students, parents, and guardians whose information a studio stores in Sudobu.
Our role
Studios use Sudobu to manage their own members. For that member information, the studio is the controller— it decides what to collect and why — and Sudobu is the processor, handling the data on the studio’s instructions. For accounts we create directly with a studio, and for this website, we are the controller.
If you train at a studio and want your record changed or removed, ask your studio first. If they cannot help, write to us and we will assist them.
Information we collect
- Account details — name, email address, phone number, and the studio and role you belong to. Sign-in is handled by our authentication provider; we never store your password.
- Member records — the information a studio keeps about its students and guardians, such as date of birth, emergency contacts, relationships between a guardian and a child, membership status, and grading history.
- Activity — class bookings, attendance, credits used, and progression towards a rank or belt.
- Payment information — invoices, amounts, and payment status. Card numbers are collected and stored by our payment processor; they never reach our servers.
- Technical data — IP address, device and browser type, and the pages or screens used, collected to keep the Service secure and working.
Children
Many students are minors. A child’s record is created and managed by the studio and the child’s guardian, and access to it in the member app runs through the guardian’s account. We do not knowingly allow a child to create an independent Sudobu account, and we do not use children’s information for advertising or profiling of any kind.
How we use information
- To provide the Service — timetables, bookings, attendance, memberships, invoicing, and progression.
- To send transactional messages such as booking confirmations, receipts, and payment reminders.
- To provide support and to investigate problems you report.
- To secure the Service — detecting fraud, abuse, and unauthorised access.
- To meet legal, tax, and accounting obligations.
We do not sell personal information, and we do not share it with advertisers.
Who we share it with
We share information only with service providers that help us run Sudobu, and only as far as they need it:
- Cloud hosting and storage providers.
- Our authentication provider, which manages sign-in and sessions.
- Our payment processor, which handles cards, invoices, refunds, and disputes.
- Messaging providers used to deliver email and SMS notifications.
- Error and performance monitoring tools.
We may also disclose information where the law requires it, or to protect the rights and safety of users and the public. If our business is ever transferred, information may move with it, and we will tell you before that happens.
Retention
We keep member records for as long as the studio maintains an account with us, and afterwards only as long as we need to for legal, tax, and dispute-resolution purposes. Financial records are typically retained for seven years. When a studio closes its account, its data is deleted or anonymised on the schedule agreed in its contract.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, emailadmin@sudobu.com. We verify identity before acting, and we respond within the time the applicable law allows. You may also complain to your local data protection authority.
Security
Data is encrypted in transit and at rest. Access is restricted to the people who need it, staff permissions in the dashboard are scoped per role and per location, and we review our access controls regularly. No system is perfectly secure, but we treat member data — much of it about children — accordingly.
International transfers
Sudobu is operated from the United States, and information may be processed there or in other countries where our providers operate. Where required, we rely on approved transfer mechanisms such as the European Commission’s standard contractual clauses.
Cookies
This website uses only the cookies needed to make it work and to keep it secure. The dashboard and member app use cookies and local storage to keep you signed in. We do not use advertising cookies or cross-site trackers.
Changes
We will post any update to this policy on this page and change the date above. If a change materially affects you, we will notify account holders directly.
Contact
Breathe Out LLC
8 The Green, Suite B, Dover, DE 19901
admin@sudobu.com