Privacy Policy

Effective date: September 11, 2026

Worldwide Music School ("WWMS," "we," "us," or "our") operates this website and the family, teacher, and manager portals available at worldwidemusicschool.app (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account information you provide. When you or your organization creates an account — as a family guardian, teacher, or manager/admin — we collect your name, email address, mobile phone number, and a password. Passwords are never stored in plain text; we store only a one-way cryptographic hash of it.

Information from Google Sign-In. If you choose "Sign in with Google" or "Sign up with Google," Google shares with us the basic profile information covered by the openid, email, and profile scopes: your Google account ID, name, email address, whether that email is verified, and your profile picture. We do not receive your Google password, and we do not request access to your Gmail, Google Drive, contacts, or any other Google service. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Family, student, and class information. Guardian accounts may add household information (such as a household name and city/state) and information about the students they enroll, including a student's name and grade level. Teachers and managers may record class schedules, enrollments, attendance, and progress notes about a student's lessons. A guardian may also add a safety note (such as an emergency contact) for their own student.

Payment information. Payments are processed by Stripe, Inc. We do not store your full card or bank account number. We keep a record of invoices, payment status, and a reference to the payment method on file with Stripe so we can display your billing history and manage your subscription. Stripe's own privacy policy governs the data Stripe collects directly from you.

Communications and notifications. We keep a log of account-related emails and text messages we send (for example, enrollment confirmations and billing reminders), including the recipient, subject, and delivery status. If you subscribe to our SMS program, we also collect your mobile number, name, optional email address, consent status, consent source, and the dates you opt in or opt out.

Automatically collected information. We use a session cookie to keep you signed in. It's required for the Service to work and isn't used for advertising or tracking across other sites.

2. How We Use Information

We use the information above to:

• create and secure your account and let you sign in (including via Google);
• operate class scheduling, enrollment, attendance, and progress tracking;
• process payments and maintain billing records;
• send account and billing-related notifications;
• respond to support requests; and
• maintain the security and integrity of the Service.

We do not share mobile phone numbers or SMS opt-in data and consent with third parties or affiliates for marketing or promotional purposes. We provide mobile information only to service providers that deliver and support our own messaging program, and only as needed to provide that service.

3. How We Share Information

We do not sell personal information. We share information only:

• with service providers who help us operate the Service under contract — currently Google (sign-in), Stripe (payments), and our email/SMS delivery providers — and only to the extent needed to perform those services;
• within your own organization — for example, a teacher and manager can see the class and attendance information needed to run the class, and a family guardian can see their own students' records;
• if required by law, or to protect the rights, property, or safety of WWMS, our users, or others; or
• with your consent.

4. Data Retention

We retain account and class records for as long as your account is active and as needed to meet legal, billing, and record-keeping obligations. You can ask us to delete your account and associated personal information as described in "Your Rights and Choices" below, subject to records we're required to keep (for example, billing history).

5. Data Security

Passwords are hashed with bcrypt before storage. Session cookies are marked httpOnly, which prevents them from being read by page scripts. Payment details are handled directly by Stripe rather than stored on our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Children's Privacy

WWMS accounts are created and controlled by adults — a family guardian, a teacher, or a manager/admin. Students are not given their own login; information about a student (such as their name and grade level) is entered by their guardian or a staff member, not collected directly from the student. If you believe a child has provided us with personal information directly, please contact us so we can address it.

7. Your Rights and Choices

You can review and update most of your account information by signing in. To request a copy of, a correction to, or the deletion of your personal information, contact us at the address below. We will respond within a reasonable time and may need to verify your identity first.

SMS participation is optional and is not a condition of purchase. Message frequency varies and message and data rates may apply. You can withdraw SMS consent at any time by replying STOP to a message or using our public SMS preferences page. Reply HELP for help or contact us at the address below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you.

9. Contact Us

Questions about this policy? Contact us at support@worldwidemusicschool.app.