Chen-Yu Yeh (“we”) provide Studio Helper (the app and the web version, the “Service”), which helps owners of lesson studios (music, dance, art and more) manage schedules, leave and make-up lessons, fee records and teacher pay, and gives parents a read-only link to see the schedule. This policy explains what data we collect, how we use, keep and protect it, and your rights. It is provided under Article 8 of Taiwan’s Personal Data Protection Act (the “PDPA”). By using the Service you confirm that you have read and understood it.
1. Who we are: two kinds of data, two roles
The Service handles two kinds of data, and our role differs:
- Account data (what you use to register and sign in): we collect it and are the collector.
- Studio data (students, how parents are addressed, lessons, fees, etc.): entered by the studio’s owner and managers to run their own studio. The collector of this data is the studio owner. We act as a service provider that stores and processes it on the owner’s behalf, only as the studio’s members instruct and as this policy describes, and never for other purposes.
Students or parents who want to view or correct studio data should first contact their studio. If the studio does not respond, you may write to us and we will help pass your request to the owner.
2. What data we collect
- Account: email address, password (stored in a form that cannot be reversed; we cannot see it), display name, your role in the studio (owner or manager), and when you joined and were approved.
- Studio data (entered by studio members): studio name and settings, rooms, teacher names and pay settings, student names, how parents are addressed, notes, lessons (subject, time, teacher), attendance and leave records (including leave reasons), lesson purchases and fee records, teacher pay calculations, and the activity log (who changed what and when). Backup text that users export is kept by the users themselves and is not stored on our servers.
- Parent link and calendar subscription: parents do not need an account. The link contains a random code; we store only a hash of the code, its creation time and the last time a parent opened it. The parent page and calendar show only that student’s lessons, lessons left, schedule and leave or make-up status (including whether the student or the teacher asked for leave) — never fees, leave reasons or other students.
- Technical logs: to operate the Service and keep it secure, our providers automatically log IP addresses, device and browser type, time and error messages. We do not use them to identify individuals.
- Payment: when paid plans open, payment is handled by the Apple App Store or the payment service you choose. We do not receive or store your card number.
We do not collect precise location, contacts, photos, microphone data or advertising identifiers. We currently use no advertising and no third-party analytics or tracking tools. If that changes, we will update this policy first.
Please avoid entering national ID numbers, medical records or other sensitive data in free-text fields such as notes. The Service does not need them.
3. Why we use it
- To provide and maintain the Service: scheduling, attendance and leave records, fees and lesson balances, teacher pay, the parent read-only page, calendar subscription and message drafts.
- Account verification and security: email verification code at sign-up, sign-in, password-reset codes, preventing abuse and unauthorized access.
- Support and troubleshooting.
- Improving the Service, in ways that do not identify individuals (for example, understanding errors and usage).
- Complying with the law and protecting our legitimate rights.
4. Period, location, recipients and method of use
- Period: while your account exists. When you delete your account, the studios you own and their data are deleted with it. When a studio becomes read-only because a trial ended or a subscription stopped, its data is kept for 60 days for you to view and export, after which all of that studio’s data is deleted; your sign-in account (email address) is kept so you can subscribe again later, and you can delete it with “Delete my account”. Automatic backups at our cloud provider (if any) expire naturally within about 30 days. If a manager deletes their own account, their name stays in the studio’s activity log (a business record of the studio) until that studio is deleted. Where the law requires longer retention, that applies.
- Location: the database is in Tokyo, Japan (Supabase); the web app and parent page are delivered through Cloudflare’s global network. Data may therefore be processed or transmitted in Taiwan, Japan and the locations of Cloudflare’s servers.
- Recipients: the owners and managers of your studio (within their permissions); us (only when needed for support, security or legal reasons); the infrastructure providers listed in section 5; and judicial or competent authorities when the law requires. We do not sell, rent or trade personal data and do not use it for advertising.
- Method: processed and used electronically.
5. Service providers we use
- Supabase: database and account authentication (Tokyo, Japan).
- Resend: sends the sign-up verification code and password-reset code emails (it handles only the recipient address and message content; sending region is Tokyo, Japan; email tracking is turned off).
- Cloudflare: hosting and delivery of the web app and parent page, and forwarding of the support mailbox support@studiohelper.app.
- Apple: App Store distribution and in-app purchases (iPhone and iPad versions).
- Payment service: when web payments open, it will be listed here and this policy updated.
Each provider has its own security certifications and privacy policy. We share only the data needed to operate the Service.
6. Security
- All traffic uses encrypted connections (HTTPS).
- Each studio’s data is isolated by database access rules; members can read and write only their own studio’s data.
- Owner and manager roles are separate: deleting records, prices and settings, restoring backups and managing members are limited to the owner.
- The activity log only grows; neither owners nor managers can edit or delete it (it is removed only when the studio or account is deleted).
- For parent links we store only a hash of the code; the link can be turned off or regenerated at any time (the old link stops working immediately).
No system can be guaranteed completely secure. If personal data is breached, we will notify the affected studio owners as soon as we become aware, and notify the authorities and data subjects as the law requires.
7. Your rights and how to use them
Under Article 3 of the PDPA you may ask the collector to let you inquire about or review your personal data, provide copies, supplement or correct it, stop collecting, processing or using it, and delete it.
- Account holders: in the app’s Members page you can create backup text, edit data, or use “Delete my account”; you can also write to us.
- Students and parents: please contact your studio; studio owners can handle requests inside the app.
- After receiving a request we will reply within 15 days (inquiry, review, copies) or 30 days (supplement, correction, stopping use, deletion), as Article 13 of the PDPA requires.
8. If you do not provide data
Without an email address and password you cannot create an account or use the Service. If studio data is not entered, the related features (for example that student’s schedule and fees) cannot be used.
9. Children and minors
The Service is for adult studio owners and staff; minors should not register themselves. Students and parents do not need to register. Student data (including minors) is entered by the studio owner, who must inform the student or the legal representative as the law requires and obtain any necessary consent. We do not collect data directly from children; if we learn that a minor has registered, we will delete the account.
10. Local storage
The web app and the app store your sign-in state and a few preferences on your device (for example schedule size). The parent page uses no cookies, and there are no advertising or tracking cookies.
11. Changes to this policy
If this policy changes materially, we will announce it in the app or on the website and update the date. If you keep using the Service after a change, you accept the updated policy.
12. Contact us
Chen-Yu Yeh (sole proprietor) Email: support@studiohelper.app