Privacy policy

1. Data we process

• Parent contact details: name and phone number, used for authentication, family identification and contact with the centre's manager.
• Child data: first and last name, age level, date of birth when entered in the CRM, membership, attendance and missed-class information, used for scheduling and records.
• Support: private messages to staff, files you choose to attach and read status, used to respond to your requests. Conversations are not published to other parents.
• Bookings and ratings: class bookings, attendance confirmations, teacher and class ratings, and comments.
• Payment requests: whether an invoice was requested through Payme, Click or a manager. The app does not process or store bank-card details; payment takes place within the payment provider.
• Technical data: a random installation identifier, app and OS versions, device information, language, time zone, IP address and interface-use events for service operation and analytics. When an application is submitted, the installation record may be linked to the supplied contact details.
• Device permissions: the iOS version does not request camera, microphone, contacts or location access. Displaying the entry QR code does not require a camera. Users select chat attachments through the system file picker.

2. Why we use data

• Access to the family's account, schedule and membership.
• Self-service class booking and reminders.
• Attendance records and class feedback.
• Requests to renew or purchase a membership.
• Improving the app using usage statistics.

3. Sharing data with third parties

Data is not sold. Personal data is processed on the operator’s servers and is not shared with third parties except in the following cases:

• with Payme and Click, only when a parent initiates payment and only to the extent required for an invoice;
• with Telegram for login-code delivery and bot access when that sign-in method is used;
• with infrastructure hosting providers acting on behalf of the operator.

4. Storage and security

Data is stored on the operator's protected servers. Access is limited to centre staff within their responsibilities. Communication between the app and server is protected with TLS.

5. Your rights

Parents may ask the centre administration for access to, correction of or deletion of their data. Deleting an account removes or de-identifies related personal data, except information the operator must retain by law.

Learn more about account and data deletion.

6. Children

Child data is entered and managed by parents, legal guardians or the centre administration. The app is not intended for children to use independently without parental knowledge.

7. Changes to this policy

The current policy is published on this page and in the app. Users are informed of material changes.

8. Contact

For privacy questions, use the official Rainbow Play & Music website or the centre phone number shown in the app's About section.