Privacy Policy

Last updated: September 27, 2026

This Privacy Policy describes how RRB Dance Company, LLC ("RRB Dance Company", "we", "us", or "our") collects, uses, and protects your information when you and your family use the RRB Studios app and member portal at rrbdancecompany.com, and when you enquire about an event at RRB Event Venue on rrbeventvenue.com.

RRB Studios is the home for your family's dance journey at our Cerritos, Chino, and Tustin studios: your class schedule, billing, passes, and messages with our team, all in one place. We do not sell your personal information. We do use Google and Meta advertising services to measure our ads, and those services receive limited information about your visit. Section 1.7 explains exactly what they get and how to opt out.

1. Information we collect

1.1 Account and contact information

When you create or claim a family account, we collect the account holder's name, email address, phone number, and mailing/billing address. We use this to identify you, contact you about your account, and direct you to the studio nearest you.

1.2 Family and dancer information

For each dancer in your family, you provide their name, date of birth, relationship to the account holder, and prior dance experience. We use a dancer's date of birth to recommend the right program and class level (for example, our youngest dancers' program versus leveled tuition classes). This information is provided by the parent or guardian who manages the account.

1.3 Enrollment and activity

We store your enrollment details (the classes and plan you select, your schedule, attendance and check-ins, passes, and make-up requests) so the app can show your family's plan and our team can run your classes.

1.4 Payment information

Payments are processed by Stripe. Your card number is entered directly with Stripe and is never stored on or visible to RRB Dance Company's systems. We retain only what we need to manage your membership: for example, the last four digits and card brand, your billing status, and a Stripe customer reference.

1.5 Messages

When you message us through the app, we store those messages so our team can respond and keep your conversation history available to you. These messages are exchanged between your family and RRB Dance Company staff; the app does not host messaging between unrelated families.

1.6 Device and notifications

If you enable notifications, we store a device push token so we can send you reminders and updates about your classes, billing, and messages. You can turn notifications off at any time in your device settings.

1.7 Automatically collected information

We collect standard request logs (IP address, device/browser type, timestamp, and the action requested) for security, debugging, and abuse prevention.

Where you go on our public pages. On our public class, trial and sign-up pages we set our own cookie with a random number, so we can see which pages a visitor opened and where people stop before they sign up, and fix the pages that lose them. We record the page, the step of a sign-up screen you reached, the time, and the campaign name in the link you arrived from. We do not record your name, email, phone number, IP address or anything you type, and we do not share this with anyone, including ad platforms. If you later start a sign-up in the same browser, our staff can see those pages next to your sign-up so they can help you finish. We keep it for 90 days, and we delete it with your account if you ask us to delete your account. We do not set this cookie at all if your browser sends the Global Privacy Control signal, if you opted out on our Do Not Sell or Share page, or inside the RRB Studios app.

We also use Google Analytics, Google Ads, and the Meta pixel (Facebook and Instagram) on our public pages. These set cookies or similar identifiers so we can see which ads bring families to us and show our ads to people who have already visited. They receive the pages you viewed, your approximate location, and your device and browser information. When you submit a form or complete a purchase, we may also send a scrambled (hashed) version of your email address so the ad platform can match you to an ad. We also share scrambled email addresses as lists, so we can show ads to families like ours and stop showing ads to families who already dance with us. Scrambling means the platform receives a string of letters and numbers, not your address or your number. We never send them your dancer's information or your payment details, and we never send anything about a family who has asked us to stop.

Your phone number is shared only if you say yes. We send a scrambled version of your phone number to Google and Meta, in the same ways described above, only if you ticked the separate box on one of our forms that reads "Let RRB share a scrambled (hashed) copy of my email and phone with ad partners to measure our ads." That box is never ticked for you, and you never have to tick it to book, buy or enroll. Agreeing to receive text messages from us is a different choice, and it never lets us share your number: text messaging opt-in data and consent are never shared with anyone. Your yes covers the number you typed when you ticked the box: if your number changes, we stop sharing it until you tick the box again. If your browser sends the Global Privacy Control signal when you submit a form, we treat that as your opt-out and do not record the box. If you ticked the box and change your mind, turn it off on our Do Not Sell or Share page, linked at the end of this section, and we stop.

One of these measurements happens later, and away from your browser, so it is worth describing on its own. When you arrive from a Google ad, Google adds a click identifier to the address of the page you land on. We store that identifier with your enquiry. If that enquiry later becomes a booking, we send the identifier back to Google together with what it became: that an enquiry was sent, or that a booking was signed and the amount it was signed for. This is how we learn which ads bring real bookings rather than only clicks. Google will not accept it more than 90 days after the click, and we do not send it after that. We do not send your name, your email address, your phone number, or any other detail of your event with it.

We also tell Meta about a few later steps, from our own records: that you booked a trial class, came to it, joined, were still dancing with us 60 days later, bought an event ticket, or first signed in to the RRB Studios app. With each one we send the scrambled version of the account holder's email address, a scrambled version of our own record number for you, the click identifier Meta added to the link if you first arrived from one of our Meta ads in the last 90 days, and, for a purchase or a membership, the amount. The page that confirms you joined loads no advertising tag: it tells us you joined, and we pass that on with your browser details and the page address, without the part of the address that opens your sign-up. For an event ticket we include the same details from the confirmation page, without the part that opens your order. Meta uses them to count each step once. If you ticked the separate ad-matching box described above, we also send a scrambled version of your phone number; otherwise we never send it. It helps Meta show our ads to families likely to join, instead of only to people likely to click. We never send your dancer's name, age or information, the class, or anything about your health. We only send it for the adult on the account, and never for anyone who has asked us to stop.

The first time you sign in to the RRB Studios app on an iPhone, Apple asks whether RRB may track you. We tell Meta that you started using the app, or bought a ticket or joined inside it, only if you tap Allow. If you choose Ask App Not to Track, or never answer, we do not send it. You can change your answer at any time in your iPhone's Settings, under Privacy & Security, then Tracking, and we follow the new answer from your next visit to the app.

You can stop all of this at any time on our Do Not Sell or Share My Personal Information page. It takes one click, it works immediately, and you do not need an account. We also honor the Global Privacy Control signal, so if your browser or an extension sends it we treat that as an opt-out on its own and load nothing. You can email support@rrbdancecompany.com instead and we will apply it for you.

2. How we use your information

Operate the RRB Studios app and member portal: show your family's schedule, plan, passes, and billing, and let you manage your account.
Process tuition and other charges through Stripe, and keep your billing status current.
Send you transactional messages and reminders about your classes, payments, enrollment, and messages from our team.
Provide support and respond to your questions, including with assistance features that help our team reply.
Keep the service reliable and secure, and prevent fraud or abuse.
Comply with applicable legal obligations.

3. How we share your information

RRB Dance Company does not sell your information. We share limited information with the Google and Meta advertising services described in Section 1.7, including the Google click identifier and the outcome it led to, on the terms set out there. Beyond that, we share information only with the service providers we rely on to operate the app, and only as needed to provide it:

Stripe: payment processing. Card details are collected and processed by Stripe under its own terms.
Supabase: our database and authentication provider. Your data is stored in a Postgres database encrypted at rest and protected by row-level security so each family can access only its own information.
Vercel: application hosting. Vercel delivers the app and does not retain your data beyond standard short-lived request logs.
Resend: delivery of transactional email (receipts, reminders, account notices).
Apple: delivery of push notifications to your device via the Apple Push Notification service.
Anthropic: the AI provider behind assistance features you or our team invoke. Content sent to Anthropic is processed under terms that prohibit using it to train AI models.

We may also disclose information when required by law, court order, or to protect against fraud or abuse, and in connection with a business transfer (such as a merger or acquisition), subject to this Policy.

4. Children's privacy

RRB Studios is intended to be used by a parent or guardian who manages the family account on behalf of their dancers, including dancers who are minors. The parent or guardian provides their dancers' information and controls the account. The app is not directed to children for independent use, and we do not knowingly allow a child to create an account on their own. A parent or guardian can review, update, or request deletion of their family's information at any time using the contact details below.

5. Data retention

We keep your information in the RRB Studios app and member portal for as long as your family account is active. If you close your account or ask us to delete it, we remove your family's personal information from the app within 30 days. You can start that yourself from the Account page in the portal, or by emailing support@rrbdancecompany.com.

We keep three things after that, and we want you to know which:

Billing and financial records. We are required to keep these for legal, tax, and accounting reasons, and to resolve disputes and enforce our agreements.
Your contact preferences, including any opt-out you have made. We keep these so we do not contact you again by mistake after you asked us to stop. Deleting the opt-out would undo it.
The record that the deletion happened, and the log of what our team did on the account. This is our evidence that we did what you asked.

Some copies of your information live outside the app and are kept for longer. These are our encrypted backups, our security and error logs, and our internal engineering records. We keep them so we can restore data after a failure, look into security problems, and run the service. A deletion request applies to your account in the app, so a copy inside one of those systems can outlive it until that copy is retired on its own schedule.

6. Your choices and rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to receive a copy of it. You also have the right to opt out of the advertising sharing described in Section 1.7, which you can do yourself on our Do Not Sell or Share My Personal Information page, or by sending the Global Privacy Control signal from your browser. To exercise any of these rights, or to ask a question about your data, email support@rrbdancecompany.com. We respond within 30 days. We will not discriminate against you for exercising your privacy rights.

6a. Which sites this policy covers

This policy covers the RRB Studios app and member portal, our website at rrbdancecompany.com, and everything we run under it, including RRB Wellness, the RRB Collective, and RRB Event Venue. They are all part of RRB Dance Company, LLC and they share the systems described here. They do not have separate privacy policies.

Our staff can connect RRB Dance Company's own social media accounts to our internal tools, so that videos and photos they have approved post straight to those accounts and we can see how they do. This covers our Facebook Pages, the Instagram professional accounts linked to them, our YouTube channels and our TikTok accounts. Only RRB staff connect accounts, and only accounts RRB runs.

What we receive. When an account is connected, the platform (Meta, Google or TikTok) gives us the account's id, name or handle and profile picture, the permissions that were granted, and access tokens that let us post to it. For each post we publish, we keep the post's id, its link, and its public performance counts: views, reach, likes, comments, shares, saves and watch time. We do not read or keep comments, messages, follower lists or anyone else's content.

How we use it. Only to publish the content our staff approve to the account they connected, and to show our staff how each post performed. We do not sell it, use it to target ads, or share it with anyone except the platform the account belongs to. Access tokens are encrypted when stored and are never shown in the app.

YouTube. Our use of YouTube goes through the YouTube API Services. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of the data is described in the Google Privacy Policy. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can remove our access at any time from your Google account's third-party access page.

How long we keep it and how to delete it. When a staff member disconnects an account, we delete its stored access tokens at once and, where the platform allows, cancel our access with it. Records of what we posted and their counts are kept as business records. You can also remove our access in the platform's own settings: for Facebook and Instagram, under Settings, Business Integrations; for TikTok, under Settings, Security, Manage app permissions. When Meta sends us a data deletion request, we delete the access tokens for every account that person connected and give you a confirmation code you can use to check the request's status. To ask us directly, email support@rrbdancecompany.com.

7. Security

We protect your information using industry-standard practices, including encryption in transit (TLS), encryption at rest in our database, row-level security on every table, and least-privilege access controls. No system is perfectly secure; in the event of a security incident affecting your information, we will notify affected users promptly as required by law.

8. International users

RRB Dance Company operates in the United States. If you access the app from outside the United States, you consent to your information being transferred to and processed in the United States.

9. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. We will notify you of material changes by email or an in-app notice.

10. Text messaging (SMS) program

The full detail for this program lives on its own page: Text Message Privacy and Text Message Terms. That page and this section must always say the same thing.

RRB Dance Company sends text messages to families who opt in. These are account and service messages: class reminders, schedule changes, billing and payment notices, show and performance details, and replies from our team (including our assistant, Disha). You opt in by actively checking a consent box on our web forms; it is never pre-checked, and agreeing to texts is never a condition of enrollment or purchase. Message frequency varies. Message and data rates may apply.

Reply HELP for help, or contact us using the details below. Reply STOP at any time to opt out; after you reply STOP we send one final confirmation of your opt-out and nothing further.

We never share your text message consent, your opt-in, or the content of your messages with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who provide support services, such as customer service, is permitted. All other categories exclude text messaging originator opt-in data and consent; this information is not shared with any third parties.

11. Contact us

For questions about this policy or your data, contact:

RRB Dance Company, LLC
Studios in Cerritos, Chino & Tustin, California, USA
Email: support@rrbdancecompany.com