App privacy notice

This notice covers the Joul app (iPhone, iPad and Android) and the booking websites studios run on Joul. Your studio is the controller of your details: it decides why and how they are used. Scrivt Limited runs the service and processes your details on the studio’s instructions (see the data processing summary). Questions about your account go to your studio first, or to [email protected].

What we collect, and why

• Your name and email address: your account at the studio, signing in (we email you a one-time code; there is no password) and booking emails.
• Phone number (optional): the studio’s class lists, and WhatsApp or text updates if you choose them.
• Health form (if your studio asks for one): filled in on the studio’s website, kept encrypted, read only by the studio’s owners and admins and your instructor, and every reading is logged. The app only shows staff that a form exists.
• Bookings, attendance, credits, passes, orders and receipts: to run your bookings. Payments are taken at the studio; no card details are collected.
• Things you add: your favourite bed, group names, a friend’s email when you invite them, the class times you would like, your message choices.
• Your device: an app sign-in for each phone (its platform, app version and name), and the push notification token if you allow notifications.
• Camera (studio staff only, after you allow it): the check-in scanner reads a client’s QR code on the phone; no picture or video leaves it.
• Security records: a keyed hash of your IP address with each sign-in code (to stop abuse), never the address itself.

What we do not do

• No advertising, no tracking across other apps or websites, no data brokers.
• No analytics or crash-reporting services in the app.
• We never sell your details or use them for anything your studio did not ask for.

Who else handles it

Only the service providers that run the service for us, each under a contract: hosting, email delivery, the push notification service, WhatsApp and text messages if your studio uses them, and the AI provider if your studio uses Joulie (the studio assistant). The list is on the sub-processors page. Everything travels over encrypted connections (HTTPS).

Joulie

Studios can switch on Joulie for their team: a morning briefing, alerts and answers to the team’s questions about classes and bookings. It is for staff, not clients, and it changes nothing by itself: every booking, credit or message it suggests waits for a team member to approve it. When a studio uses it, the facts each answer needs go to our AI provider, Anthropic, as a sub-processor: class times, bookings and credits, and clients as a first name and an initial with the studio’s own notes. Your health form, waiver, email address, phone number and date of birth are never sent. The team’s questions and answers are kept for 30 days for the person who asked, then deleted; when an account is deleted, any conversation that named the client is deleted with it.

How long it is kept

While you are a client of the studio. When you ask, your account is deleted within a month; orders, receipts and payments are kept for six years as UK tax law requires, and past bookings stay without your name.

Your rights and deleting your account

Under UK GDPR you can ask for a copy of your details, their correction or deletion, or object to how they are used. To delete your account, use Account → Delete my account in the app, or your studio’s website; the steps, and what is kept, are on the account deletion page. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Children

The app is for adults: studio clients and staff aged 18 or over.