Privacy Notice

1. Who we are

Stage Flow ("we", "us") is the controller of the personal data collected through the Stage Flow service at this website. If you have questions about this notice or want to exercise your rights, contact our support team.

We designed Stage Flow so that you do not need to enter pupils' names or other personal data about your students into the service. Please avoid doing so — only enter information that is genuinely needed to plan your lessons.

2. What we collect and why

Account details — your email address, password and display name. Used to create and manage your account and to show your name in the app. Legal basis: performance of our contract with you.

Content you create — the lesson settings, prompts, prompts inputs and lesson plans you generate, and your saved favourite activities. Used to provide the service and to store and edit your lessons. Legal basis: performance of our contract with you.

Usage and quota data — records of how many AI generations you have used, to enforce your plan's monthly allowance. Legal basis: performance of our contract with you.

Support and service communications — messages you send us when you ask for help. Used to provide customer support. Legal basis: performance of our contract with you, or legitimate interests in improving the service.

Security and fraud data — IP addresses and device information processed to keep accounts secure, prevent abuse and detect fraud. Legal basis: legitimate interests.

3. Payments

Subscriptions are sold through Paddle.com, our Merchant of Record. Paddle processes your payment details, taxes and invoices as an independent controller of its own checkout data, so we generally do not receive your card details. Where we receive limited billing metadata from Paddle (such as subscription status and identifiers), we use it to manage your plan and provide the service.

4. AI processing

When you generate or edit a lesson, the settings and prompts you provide are processed by our AI provider to produce the lesson content. We only send lesson-related inputs — not your personal details — and we ask you not to include pupil names or other students' personal data in prompts.

5. Who we share data with

We share personal data only with the categories of recipients needed to run the service:

• Hosting and infrastructure providers, who store account and lesson data on our behalf.

• Our AI provider, which processes lesson prompts and content to generate output.

• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance and invoicing.

• Professional advisers (such as accountants or lawyers) where needed.

• Authorities, where the law requires or allows it.

6. Where data is stored

Your data is hosted on infrastructure in the European Economic Area and the United Kingdom. Some of the providers listed above, including our AI provider and payment provider, may process data outside the UK/EEA. Where that happens, we rely on safeguards such as the UK International Data Transfer Agreement or the European Commission's standard contractual clauses and adequacy decisions.

7. How long we keep data

We keep your account and lesson data while your account is open. If you delete lessons or close your account, the data is deleted or anonymised when it is no longer needed. Billing records are kept for as long as tax law requires (typically six years).

8. Your rights

Under UK and EU data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent where we rely on consent. To exercise any of these rights, contact our support team; we aim to respond within one month.

You can also complain to the Information Commissioner's Office (ICO), the UK supervisory authority, if you are unhappy with how we handle your data.

9. Security and cookies

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and secure authentication.

Stage Flow uses only essential cookies and browser storage needed to keep you signed in and remember your preferences. We do not use advertising or third-party analytics cookies.

10. Changes

We may update this notice from time to time. Material changes will be announced in the app or by email, and the "last updated" date at the top will always tell you how current this notice is.