Privacy policy

Applies to studiolineup.com and the StudioLineup apps for iPhone and Android. Last updated October 19, 2026.

StudioLineup helps you find yoga, Pilates and barre studios and their classes. You can use the map and class times without an account. This page explains what we keep when you do more than that, why, and how to delete it. We don't sell your information, and we don't use advertising trackers.

What we keep

Your account: your email address, username and password. Passwords are stored scrambled (hashed) by our sign-in provider; nobody can read them.
Your profile, if you fill it in: display name, home city, a short bio, and — only if you choose to add them — birth year and gender. Age and gender stay private unless you switch on showing them.
What you post: posts, replies and studio reviews. These are public, with your username.
Your activity: studios you follow or mark as your home studio, studios you've been to, classes you mark as attended and your yoga minutes, and studio suggestions you send.
My week and friends: classes you save, classes you mark “I’m going” or “I went”, waitlists you join, your friends and friend requests, and your settings for these. Friends see the classes you're going to only if you switch that on; they never see your saved classes, bookings or stats.
Reports about class times: when you tell us a class time is wrong, the studio and our moderators see the report (not who sent it).
Bookings, class packs and memberships: the classes you book or cancel and what you paid; class packs you buy and the classes used from them; monthly memberships you join, their renewal date, how many classes you've used that month, and whether you've stopped them renewing. The studio sees your name, email and bookings with them. Card payments and monthly renewals are handled by Stripe; we never see or store your card number.
Check-in: when you check in at a studio (with its code or QR sign), or the studio marks you as there, we keep the time for that booking. The studio sees it.
“Took a class here” on reviews: if you review a studio where you've booked or checked in through this site, your review shows that badge publicly. It says only that you took a class there, not which one or when.
Reports and blocks: reports you send (what you reported, the reason and a copy of it) and the people you block. The person you report or block isn't told it was you.
Studio owners and advertisers: ownership claims, business details you give us, the offers and ads you reserve, and their payment status. Teacher profiles a studio adds (name, bio, specialties, a photo link and an Instagram name) are public. When a studio uploads a screenshot of its timetable, the picture is read once to fill in the timetable and prices and is not kept; we keep only a count of how many were read, for limits.
Clients a studio brings over: when a studio moves from another booking system, it can upload its own client list — names, emails, phone numbers, class packs with classes left and memberships with their paid-through date. We keep it for that studio only: nobody else sees it, and we don't email or contact anyone on it. If you make an account with the same (confirmed) email, your pack and membership at that studio are added to your account and the studio sees that you joined. The studio can remove anyone who hasn't joined.
The sub board, for teachers who join it: your name, town, the styles you teach, certifications, a short bio and how far you'll travel. Studios that have claimed their page can see these. Your town is turned into a rough location (about a kilometre) to find studios near you; it is never shown. When a studio picks you to sub a class, it sees your email and you see the studio's.
Booking as a guest: if you book without making an account, we keep the first name you give and your bookings under a guest account on that device. Save it with an email and password to keep it on other devices; otherwise it stays on that one.
Shared and gifted class packs: if you share a pack, the people on it see the pack and its classes left, and you see their name and the classes they book with it. If you give a pack away, it moves to whoever accepts the link, with your name and note. If you bring a friend free, the studio sees the first name you give for them.
Class allowance from work: if you join your employer's allowance with their link, the people who look after it see your name, email, the date you joined and how much you spent on classes each month while on it, so they can pay you back. They never see which classes or studios. Leave any time from Wellness from work; they keep the months already reported.
Receipts: your receipts (for HSA/FSA claims or expenses) are made on your device from your own payments, with each studio's name, city and phone. We don't send them anywhere unless you do.
Signing in with Google or Facebook: if you choose it, Google or Facebook tells us your email address and the name and picture on that account, so we can make or find your StudioLineup account. We don't get your password or anything else from them, and we don't post anything there.
Passkeys: if you add one, your device keeps the private part; we keep only the public part, its name (for example "iCloud Keychain") and when it was added and last used. Remove passkeys any time from My packs → Passkeys.
Apple Health and Health Connect, in the app, if you switch it on: the classes you went to are saved on your phone as workouts (start time, length and yoga, Pilates or barre). The app only writes them; it never reads anything from Apple Health or Health Connect, and nothing from them reaches us.
Waivers you sign: the studio, which version of its waiver, the name you typed (and the name of anyone under 18 you signed for), your email, when you signed, and a fingerprint (SHA-256) of the signed copy. The signed copy itself — with your drawn signature — is made on your device and passed to our email service only to deliver it to you and to the studio; we don't store it.
Gift cards: the amount and balance, who bought it, and the name, email, message and send date the buyer typed for the person it's for — to deliver it and let them use it.
If you work at a studio: the name, email, role and teacher name the studio entered when it invited you, and when you joined. The studio sees the classes taught under that name and the pay it works out for them; you see your own.
Contracts a studio sends you: your name and email as the studio entered them, which version you signed, the name you typed, when, and a fingerprint (SHA-256) of the signed copy. As with waivers, the signed copy is made on your device and passed to our email service only to deliver it to you and to the studio; we don't store it.
Your mobile number, if you give it: the number and whether you said yes to texts, and which studios you stopped. Studios you book with can text you (we send the texts for them); we don't show them your number.
Family members you add: a first name and whether they're under 18, to book them into classes. Studios see the name on their class list.
If you show interest in a studio: when you book a first class, leave your details on a studio's website or join through a friend's link, the studio keeps you on its list of leads (your name and email, and its own notes) so it can follow up. Referral links record who invited whom, for the rewards.
Your calendar link, if you make one: a private, random link to subscribe to in your own calendar. Anyone who has it can see when your booked classes are, so keep it to yourself; you can make a new one at any time. We note when your calendar last read it.
Strava, if you link it: your Strava name and the keys Strava gives us to add activities for you (kept on our server, never shown). For each class added, the class name, studio, time and length go to Strava. Unlink at any time.
The helper: questions are answered on your device where possible; the rest go to our server (and to Anthropic, below) to be answered, and aren't kept. To limit use we count each day's questions: by account, or for signed-out visitors by a one-way code made from their network address. Counts are deleted after three days.
Offers on your phone, if you switch them on: your ZIP code, which kinds of offers you want, and a device token (a code from Apple, Google or your browser that lets us send notifications to that device).
Your location: when you tap "Use my location", your device's location is used on your device to sort studios by distance and to pick the offers for your area. We don't store your location or a location history; we only count how many visits each ZIP code gets per day, without anything that identifies you.
Anonymous search counts: when you search, we count the kind of class, the day and time of day you looked for, a rough area (rounded to about half a mile — the place you searched near, not where you are), whether anything was found, and which studios showed up. We also count taps on directions, saves, invites and “I’m going” for each studio, and taps on Book in a studio's booking widget on its own website. These counts carry no account, name, IP address or exact location. Studios see the totals for their own area in their reports. If your browser sends Global Privacy Control or Do Not Track, your searches aren't counted.
Google search counts: once a week we get totals from Google Search Console for our own pages: how often each page showed in Google results, how often it was clicked, and the searches that showed it (only searches seen 10 or more times). Google gives us counts only, nothing about who searched. Studio owners see the totals for their own page. We keep them for 13 months.

How it's used

To run the site and apps: showing studios and classes, your account and posts, bookings, your Inbox, and the offers you asked for. Offers and sponsored ads are shown by ZIP code or by the studios you follow — not by tracking what you do elsewhere. Every offer and ad is reviewed before it's shown, and notifications are limited to a few a week. After a class you booked, your Inbox may ask how it went, once. Studios get a monthly report by email with totals for their own page and area, never your name.

Who else handles it

Supabase stores accounts and the site's database. Cloudflare hosts the site.
Stripe processes card payments and monthly membership renewals for bookings, packs and ads.
Anthropic (Claude) reads timetable screenshots that studio owners upload, to turn them into class times and prices. Only the studio owner's pictures are sent; nothing about members is.
Anthropic (Claude) also answers questions the helper and the search can't answer by themselves, if the site has switched that on: it receives the words typed in that conversation and what the studio's page already shows, and nothing about your account.
Strava receives the classes you went to, if you link your Strava account.
Resend sends our emails, such as the monthly studio reports, gift cards, and signed waivers and contracts to you and the studio.
Apple and Google (Firebase) deliver phone notifications to the apps.
Twilio delivers texts, if you said yes to them: it receives your number and the text.
When you search for an address or hotel that isn't a ZIP code or town, the text you typed is looked up with Photon (komoot), an OpenStreetMap search service, to find where it is.
The map is drawn with OpenStreetMap data and CARTO map tiles, and fonts and map code load from Google Fonts and jsDelivr; like any website, they receive your device's IP address when they send those files.
Studios you book with see your booking, and studios whose waiver or contract you sign see that you signed (and get the signed copy by email). A studio's staff see what their role allows, such as class lists and check-ins. We may share information if the law requires it.

Your choices

Edit your profile any time from My profile.
Switch offer notifications off in Offers on that device, or in your phone's settings.
Delete posts and reviews you wrote.
Remove saved classes, friends and the “going” sharing any time from My week.
Stop a membership renewing any time from My bookings; it runs to the end of the month you've paid for.
Change or remove your sub board profile any time from Sub board → My profile.
Download everything we have with your name on it any time from My packs → Download my data.
Studios can download their own client list (names, emails, visits, packs and memberships at that studio) to use elsewhere.
Switch health sync off in My stats in the app; workouts already saved stay in your health app until you delete them there.

Deleting your account

In the app or on the website, sign in and open My profile → Delete my account, then type DELETE to confirm. This permanently removes your account, profile, posts, replies, reviews, follows, visits, classes and minutes, Inbox and notification settings, straight away. Bookings stay with the studio without your name, so their records still add up; payment records are kept by Stripe as the law requires. If you have paid ads still running, you can delete your account once they end. If you can't sign in, use Forgot your password or username? first, or contact us below and we'll delete it for you.

Children

StudioLineup isn't meant for children under 13, and we don't knowingly keep information about them. If you think a child has made an account, contact us and we'll delete it.

Security

Everything is sent over encrypted connections. Access to each piece of information is limited by database rules — for example, your private profile details (like birth year) are only shown if you switch that on.

Changes and contact

If this policy changes we'll update the date at the top. Questions or requests: [email protected].