← Grand Master Chung Tae Kwon Do
Privacy Policy
This policy explains how Grand Master Chung Tae Kwon Do handles information in the Chung TKD web and iPhone service.
Who uses the service
The school provisions accounts for authorized staff, parents or guardians, and adult students. The service is for parents and adult students. It is not a children's product. Student portal logins are not available yet. When they are, a parent can create an optional student portal login under the parent's account, so a student can use the training section. The student portal is part of the parent's account, not a separate account. It works the same way for children and adults. There is no anonymous account registration. Adults and authorized school staff provide and manage information about children enrolled at the school.
Class inquiries
When a parent or guardian submits the first step of the class-request form, the school saves the student's name and parent's mobile number so it can call back. Choosing a class in the next step updates that same inquiry. Submitting a request does not create an account, reserve a seat, or give permission for marketing messages. No texts are sent unless you ask.
Information we handle
- Account and contact information, including names, usernames, roles, phone numbers, email addresses, family relationships, and session or device identifiers.
- Student and training information, including age or date of birth, class assignments, attendance, belt progress, exercises, test history, rewards, and coaching notes.
- Family and school-operation information, including guardian and emergency contacts, membership plan, balance, payment status, waiver and consent records, and safeguarding records.
- Messages, photos, image attachments, and other content that an authorized user chooses to add through an available school workflow.
- Security and product-use information, including IP address, user agent, sign-in attempts, audit events, error records, and actions taken in the service.
The service records school billing status but does not charge payment cards or connect to a payment processor.
How we use information
We use information to authenticate users, enforce role-based access, operate class and family workflows, record attendance and progress, support school communications, administer waivers and consent, protect the service, troubleshoot problems, and review account-deletion requests.
Hosting and disclosure
These companies process information for the service, only to provide their part of it:
- Cloudflare runs the website and the app's servers, and stores uploaded photos and files.
- Neon hosts the service's databases.
- Hetzner stores backup copies of the databases.
- Sentry receives error reports so problems can be found and fixed.
- Amazon Web Services sends the school an email when a class request comes in.
- Telnyx provides one of the school's phone lines and carries its calls.
- PostHog provides the website analytics described below.
- Apple provides the iPhone operating system and distributes accepted iPhone builds through its services.
The Chung TKD service has no advertising network, cross-app tracking or advertising analytics, or active payment processor, and it does not send texts or emails to families. Information may also be disclosed when required to protect a person, the school, the service, or to comply with applicable law.
Website analytics
To understand how visitors use our public website and improve it, we use PostHog, an analytics service, through our own website address. It records pages viewed, buttons such as Call, Text or "Book a class" that are tapped, and the approximate city and device type. It may record a masked replay of a visit, in which everything typed and all form text is hidden. It does not receive names, phone numbers, children's information or the contents of any form, and it does not use cookies. Browsers that send Global Privacy Control or Do Not Track are not measured. When you submit a class request, your earlier visits on that device are linked to the request by a random identifier so we can see which pages helped. Analytics data is kept for up to one year and replays for up to one month, and is never sold or used for advertising. Staff use of the school's app is measured without recordings; the family portal is not measured.
Phone calls and voicemail
The school does not record phone calls with staff. When no one can answer, you may be able to leave a voicemail. If the school's phone service takes the voicemail, it is recorded, and Telnyx, the school's phone provider, can turn the recording into text so staff can read it. The service then saves the recording and its text in the school's private storage and deletes the copies Telnyx holds. Only staff whose role allows it can play or read a voicemail.
Access controls and security
Parents are limited to their own family records. Staff access depends on assigned role. The service uses HTTPS, password hashing, private authenticated uploads, server-side sessions, and encrypted hosted storage. The iPhone app stores its sign-in token in the device Keychain. No security measure can guarantee absolute protection.
Retention
Ordinary authentication sessions expire after 30 days. Selected security, audit, error, and replay records are scheduled for 90-day retention. Soft-deleted operational records remain recoverable for at least 30 days before an owner can purge them. The service retains protected backups for recovery.
Class inquiries that have not been handled by staff expire after 90 days. Routine cleanup removes their names and mobile numbers and keeps only a record that prevents an old request from being replayed. Inquiries already handled by staff may remain as school records.
Attendance, waiver, billing, safeguarding, communication, and other school records may be retained longer when needed for school operations, safety, accounting, dispute handling, or legal obligations. The school has not adopted one blanket deletion period for every category.
Voicemail recordings and their text are communication records. The school has not yet set how long it keeps them.
Account deletion and other requests
You may ask to access or correct your account information through an authorized school owner. To request account deletion, follow the instructions on the Delete Your Account page. The school completes ordinary requests within 30 days and confirms completion using a verified contact method on file.
Deleting an account removes its sign-in details, signed-in devices, and notification tokens, clears the name and photo on the account, and removes any student portal logins under it.
The school keeps its own records, because they are the school's operational record. These include attendance and check-ins, training log entries, belt progress, tests, waivers, payments, staff notes, and every message with the parent. They stay no matter which device was used to record them. If you asked not to get texts, a do-not-text record of the number also stays, so the school does not text it again.
A parent can ask the school to remove photos of a student that the family uploaded, when they are not part of the school's records. These are removed only when a parent asks.
Erasing the school's records is rare and separate from deleting an account. It is available only as a legal request, never as something you can do yourself. It needs a verified request, and the school owner decides each case.
Children and guardians
Children cannot create accounts. A child can use the service only through a student portal login that a parent creates. Parents, guardians, and authorized school staff are responsible for providing child information only when they have authority to do so. Do not give a child your account credentials.
Student portal logins
Student portal logins are not available yet. This section describes how they will work when the school turns them on.
Only a parent or guardian in the household can create, pause, reset, or remove a student portal login. If the school removes a guardian from the household, the logins that guardian created stop working. To set one up, the parent is shown a setup code that works once and expires after 24 hours. The student enters the code on their own device and chooses a 4-digit PIN. The PIN works only on that device.
A student portal login opens only that student's training section, such as their training log and belt progress. It does not show messages, billing, waivers, or other students. The school never asks a student for an email address, phone number, or password. For each student device, the service keeps a device identifier, scrambled copies of the device secret and the PIN, an optional device name, its count of wrong PINs, and when the device was set up, last used, and turned off.
A student is signed out after 15 minutes without use, and after 2 hours in any case. Five wrong PINs turn off that device. Pausing, resetting, or removing a student portal login signs it out on every device.
Contact
Grand Master Chung Tae Kwon Do1527 Jericho Turnpike
New Hyde Park, NY 11040
Call or text (516) 457-1893
Contact the school about privacy, access, correction, or deletion. If you cannot sign in, call or text so the school can verify your identity through a separate channel.