Privacy Policy

SkateFlow is software that skating academies use to run their classes. This policy explains what personal data the software holds, who it reaches, and how long it is kept.

Effective 5 November 2026. Last updated 5 November 2026.

1. Who we are

SkateFlow is a product of BLACKFLUX TECHNOLOGIES LLP ("Blackflux", "we", "us"), a limited liability partnership registered in India at NO. 165, KAMARAJ NAGAR, MATHUR, CHENNAI, TAMIL NADU, 600068, INDIA.

SkateFlow is licensed to individual skating academies. Each academy uses it to manage its own students, classes, attendance and fees.

2. Our role, and your academy's

Your child's academy decides who is enrolled, what is recorded about them, and who on its staff may see it. In the language of data protection law, the academy is the Data Fiduciary and Blackflux is a Data Processor acting on the academy's instructions.

In practice this means two things. If you want a record changed or removed, the academy is the right place to ask first, because it is their decision to make. And if you ask us directly, we will act on it in co-ordination with them.

Every academy runs on its own separate database and its own separate sign-in system. One academy's records are not stored alongside another's, and no academy can see another's data. We do not hold a combined database of every child who uses SkateFlow.

3. What we hold

About a child

• Name, date of birth and gender
• Home address and school name, if a parent chooses to add them
• A photograph, if a parent chooses to add one
• Which batch and branch they train in, their skill level, and when they joined
• Attendance records: present, late, excused or absent, by date
• Notes and achievements recorded by coaches
• Fee records: monthly invoices, amounts, payment dates and method
• Any equipment bought for them at the academy
• Leave notices, including any reason a parent gives

About a parent

• Name, mobile number, and an alternate number if given
• Email address, where one is used to sign in
• Which branch they are associated with
• Messages they send to the academy through the app
• Payment screenshots they upload as proof of payment
• The notifications sent to them, and whether they have been read
• A device identifier for each phone signed in, used only to deliver notifications
• When they accepted the academy's terms

About academy staff

• Name, mobile number, email address where used
• Their role, and which branches they work in
• A record of significant actions they take in the system, such as recording a payment or changing someone's access

Sign-in information

Signing in uses either an email address and password, or a mobile number and a six-digit PIN sent by the academy. We never store the PIN itself, only a cryptographically hashed version of it that cannot be reversed. Five wrong attempts lock the number for fifteen minutes.

4. Children's data

SkateFlow is used by adults, parents and academy staff, but much of what it holds is about children. We apply the following rules without exception:

• No advertising is shown anywhere in SkateFlow, and no advertising network receives any data.
• No behavioural tracking, profiling or automated decision-making is carried out on a child.
• No analytics or crash-reporting software is built into the apps.
• A child's photograph is stored privately. It is never publicly accessible by link, and is shown only to that child's own parent and to academy staff responsible for that branch.
• A child does not have their own login. Access is through their parent's account.

A parent provides consent on their child's behalf when they accept the academy's terms on first signing in, and that acceptance is recorded with the date and time.

5. What it is used for

Data in SkateFlow is used only to run the academy. Specifically:

• Recording attendance and showing it to a parent
• Producing fee invoices and recording payments
• Sending parents notifications about their own child, such as attendance, fees and coach notes
• Letting parents and the academy message each other
• Letting the academy publish announcements and posters
• Keeping a record of who changed fee and access information, so that mistakes and disputes can be resolved
• Keeping the service secure and preventing misuse

We do not use any of it for marketing, we do not use it to train machine-learning models, and we do not sell or rent it.

6. Who else receives it

SkateFlow relies on the following service providers. Each receives only what it needs.

We will also disclose data where the law requires it, such as a valid order from a court or an authorised government agency.

Data is stored on Google Cloud infrastructure in India.

7. How it is protected

• No app, browser or phone can read the database directly. Every request goes through our server, which checks who is asking and what they are entitled to see.
• Academy staff see only the branches they are assigned to. Parents see only their own children.
• Children's photographs and payment screenshots are kept in private storage and are served only after an access check on each request.
• A person's role is carried in a signed credential issued by the sign-in system. It cannot be altered by the app or the person using it.
• Sign-in PINs are stored only as a salted hash. Payment amounts are always calculated on our server from the academy's own records, never accepted from a phone or an outside system.
• The internal record of who changed what removes passwords, PINs and secrets entirely, and stores phone numbers, email addresses and bank account numbers masked to their last four characters.
• All traffic between the apps and our servers is encrypted in transit.

No system is perfectly secure. If a breach affects your data, we will inform the academy and, where required, you and the relevant authority.

8. How long it is kept

You can ask for a child's personal records to be removed sooner. See Delete my data.

9. Your rights

As a parent acting for your child, and in your own right, you may:

• Ask what personal data is held and get a copy of it
• Ask for anything inaccurate to be corrected
• Ask for personal data to be deleted, subject to the retention rules above
• Withdraw consent, which means the academy can no longer use the app to serve you
• Nominate another person to exercise these rights on your behalf
• Complain to us, and if we do not resolve it, to the relevant data protection authority

To exercise any of these, write to us at the address in section 11. We acknowledge every request within 2 working days and complete it within 30 days. In most cases it is done far sooner. We may ask you to confirm your identity first, so that we do not hand a child's information to the wrong person.

10. Changes to this policy

If we change this policy we will update the date at the top. Where a change materially affects how your data is handled, we will tell the academy, and parents will see a notice in the app.

11. Contact and grievances

For anything about your child's enrolment, fees or records, your academy can usually help faster than we can.