Privacy Policy

We collect the following categories of personal information:

• Account data: name, email address, profile photo
• Payment data: billing details processed by Stripe (we do not store full card numbers)
• Usage data: session history, bookings, reviews, timezone
• Technical data: IP address, browser type, device info (via Supabase/Vercel logs)

• Provide and improve the Service
• Process payments and manage subscriptions
• Send booking confirmations and service notifications (via Brevo)
• Match students with instructors
• Comply with legal obligations

We share data with the following trusted third parties:

• Supabase — database and authentication (EU/US data centers)
• Stripe — payment processing (PCI-DSS compliant)
• Brevo — transactional email
• Jitsi Meet — video sessions for live classes
• Google — Google OAuth for sign-in
• Vercel — hosting and CDN (incl. Web Analytics, Speed Insights, edge geolocation for aggregate stats)
• Google Apps Script / Google Sheets — first-party analytics backend (anonymous visitor_id, page views, dwell time, referrer, country)
• Microsoft Clarity — UX analytics (heatmaps & session recordings). Input fields are automatically masked
• Google Analytics 4 — traffic measurement (IP addresses are anonymized by GA4 design); data is shared with Google. Opt out via your browser cookie controls or Google Ads Settings
• Meta Pixel — ad delivery and measurement (only while advertising campaigns are running); data is shared with Meta Platforms. Opt out via Meta Ad Preferences or your browser cookie controls
• Google Ads conversion measurement — measuring ad effectiveness (only while advertising campaigns are running); data is shared with Google. Opt out via Google Ads Settings

We do not sell your personal data to any third parties.

We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion, we delete personal data within 30 days, except where retention is required by law (e.g., financial records for 7 years).

We use a NEXT_LOCALE cookie to remember your language preference. We also use analytics cookies and, when advertising campaigns are running, advertising cookies and identifiers. Visitors in the EEA and UK are asked for consent before any such tags load. You can opt out via your browser settings and the tools linked in this policy. Essential session cookies are set by Supabase for authentication.

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at [email protected].

We implement industry-standard security measures including HTTPS, Row Level Security (RLS) on our database, and hashed password storage. However, no method of transmission over the internet is 100% secure.

The Service is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a notice on the Service. Continued use after changes constitutes acceptance of the revised policy.

For privacy inquiries, contact: [email protected]