Skip to main content

Privacy

What lives where​

DataLives on
Studio, locations, devicesevery connected device
Courses and pricesevery connected device
A student's bookingstheir device and the studio's devices
A student's pass accounttheir device and the studio's devices

There is no place where it all comes together. No provider, no analytics, no statistics flowing anywhere.

What students see of each other​

Nothing. A student's device does not receive other people's bookings or passes — it is not given their addresses in the first place. Places left is a number, not a list of names.

It was once otherwise. Until 29 July 2026 the design had a shared booking list per location, which every student would have replicated in full — everybody else's bookings included. That was changed before anybody used the app.

What the studio's devices see​

Everything about their students: bookings, purchases, every single visit with date and location. That is necessary — without it there is no check-in and no accounting — but it is also more than a paper list ever held.

The devices themselves incidentally produce a kind of employment history: when a device was approved and when it was revoked is in the registry and readable by everyone.

Data minimisation, practically​

  • No real name needed. An alias is enough.
  • No email address needed. Freely chosen when creating the passkey.
  • Name devices after the device, not the person: "front desk iPad" rather than "Maria's iPad".
  • No teachers' names in course titles — titles go to everybody.
  • Health-related courses (postnatal, rehabilitation, prevention) say something about a person's health. Treat those lists accordingly.

What happens when connecting from afar​

A connection code shared through a messenger contains your device's network addresses. In the studio, use the QR code — it does not leave the room.

The long version​

The complete account — which fields are personal data, what encryption would change, and what is still open — is in docs/PRIVACY.md. It is written as groundwork for a record of processing activities and is not legal advice.