Privacy Policy

1. Who we are

StudioVita acts as a data processor on behalf of fitness studios and gyms that use our platform. The studio you are a member of is the data controller and is responsible for determining how your data is used within their membership system.

Freddie Media Ltd is the data processor that provides the technology platform enabling studios to manage their members, classes, and bookings.

2. Data we collect

• Identity: Full name, date of birth
• Contact: Email address, phone number, postal address
• Health & Safety: Emergency contact information
• Membership: Class bookings, attendance records, membership plan details
• Payment: Payment history and billing status (card details are processed and stored by Stripe — we never store raw card data)
• Usage: Login times, pages visited, device type, browser, IP address

3. How we use your data

• To provide and operate the StudioVita platform and member app
• To process membership payments via Stripe
• To send transactional emails (booking confirmations, reminders, account notices) via Resend
• To enable studio administrators to manage members, classes, and bookings
• To maintain security, prevent fraud, and comply with legal obligations

We do not sell your personal data. We do not use your data for advertising.

4. Data storage and third-party services

Your data is stored in a PostgreSQL database hosted on Replit's cloud infrastructure, located in the United States, with appropriate data transfer safeguards in place.

We use the following third-party processors:

• Stripe — Payment processing. Stripe is PCI-DSS compliant. Stripe Privacy Policy
• Resend — Transactional email delivery. Resend Privacy Policy

5. Cookies

We use a single session cookie to keep you logged in. This cookie is strictly necessary for the platform to function.

• No tracking cookies
• No advertising cookies
• No third-party analytics cookies (e.g. Google Analytics)

6. Your rights (GDPR)

If you are in the European Economic Area or United Kingdom, you have the following rights:

• Access: Request a copy of your personal data
• Correction: Ask us to correct inaccurate data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing where our legal basis is legitimate interests
• Restriction: Ask us to restrict processing in certain circumstances

To exercise any of these rights, contact us at support@studiovita.app. We will respond within 30 days.

7. Data retention

• Active accounts: Data retained for as long as your account is active
• Deleted accounts: Personal data removed within 30 days of account deletion
• Payment records: Retained for 7 years as required by UK law (HMRC financial record-keeping obligations)

8. Data security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), rate limiting, and CSRF protection. We regularly review our security practices.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the platform. Continued use of StudioVita after changes constitutes acceptance of the updated policy.

10. Contact

For data protection enquiries or to exercise your rights:

Email: support@studiovita.app
Post: Freddie Media Ltd, 85 Great Portland Street, London, W1W 7LT, UK