Privacy Policy

Who we are

Studio+ (studioplus.fit) is a gym management platform operated by YOT LTD, Malta ("we", "us"). This policy explains what personal data we process when you use the Studio+ web and mobile apps, and the rights you have over it. For anything not covered here, contact us at hello@studioplus.fit.

Data we collect

• Account & profile — name, email address, optional phone number, avatar, gender and age if you add them, and your gym membership roles.
• Children you add — your child's name and date of birth, and their bookings, credits, memberships and the gym waiver you sign for them. A child profile has no sign-in of its own: you and your gym's staff can see it, and notifications about your child come to you. It is deleted with your account.
• Bookings & activity — the classes and personal-training sessions you book, attend, cancel or join waitlists for, and your credit and membership balances.
• Payments — purchases are processed by Stripe for eligible gym services and Apple/Google store billing for native digital purchases. We store the transaction record (what was bought, amount, status); your card details never touch our servers. Store purchase verification also processes store transaction identifiers, an opaque account identifier, receipt/purchase tokens, renewal periods and refund state. Receipts remain private to server verification; these records support restoring access and billing reconciliation.
• Health & fitness data — only if you explicitly connect an integration (Whoop, Google Health — Google Fit and Health Connect — Apple Health) or a weigh-in is recorded at your gym: recovery, heart rate and variability, workouts, sleep, steps, weight, body fat, VO2 max, distance, floors climbed, exercise time, calorie expenditure, dietary energy and water. On-device readings are uploaded to your Studio+ account only after the connection disclosure and your permission. We use them to show your dashboard and link workouts to the sessions you attended. Google user data received via Google APIs is used only for these features, is never sold or used for advertising, and is handled in line with the Google API Services User Data Policy, including its Limited Use requirements.
• Messages and uploads — in-app messages and announcements, their senders and recipients, profile photos, food-diary photos, whiteboard drawings and the notes you choose to share. Visibility depends on the gym, recipient and feature; a profile avatar may use a publicly accessible image URL. Do not upload material you do not have permission to share.
• Notifications — push subscription tokens if you enable push, and your email notification preference if you opt in.
• Technical — session cookies / local storage needed to keep you signed in. Authentication and hosting services also process connection IP addresses, sign-in timestamps and client/browser information for security and operation. We do not run advertising trackers.

How we use it

• Running your gym's schedules, bookings, credits, memberships and payments.
• Showing your consolidated health dashboard and per-session metrics.
• Recording injury incidents, reported training restrictions and follow-up history. These are visible to the member, gym owners, the reporting staff member and responsible staff while they retain authorised gym access. They are not medical clearance.
• Sending the notifications you asked for (class reminders, confirmations, top-up alerts).
• Keeping the service secure, supported and working.

We do not sell personal data, and we do not use it for third-party advertising.

Gym trial setup

When you create a gym, we record your account, the gym, a creation request identifier, and the accepted trial-terms version and time. These private records support reliable setup, prevent duplicate trials and document your agreement. They are not available to general gym members or staff. Account-linked creation records are removed with account deletion, subject to legal obligations stated below. Trial signup does not collect payment-card details or authorize a charge.

Content safety

We store your accepted content-policy version and time, gym-specific sender blocks, and reports you submit (reason, description, screen, related account or announcement, and review notes). Your case status and shared updates are visible to you. Internal review notes are restricted to independent Studio+ platform moderators. General gym members and reported gym staff cannot read your case history. Avoid including unnecessary health data in reports. Before you publish a message, poll, photo or whiteboard, we request consent to send that content to Nova, YOT’s AI gateway (Anthropic Claude, Google Gemini as fallback), for safety screening. Sharing is optional. Display names are filtered locally, without sending them to AI. Staff-uploaded profile photos require the member’s screening consent too. We store short-lived hashes of approved text, screened upload paths, screening-rate counts, account restrictions and moderation action records. Moderators can inspect reported private photos through temporary links and remove content or suspend accounts. These records support content safety and abuse handling; account-linked records are removed with account deletion, subject to legal obligations stated below.

AI coach (NOVA)

NOVA, the optional AI coach, answers members, coaches and gym owners inside one gym. Before your first chat we ask for your agreement once and record its version and time. To answer, NOVA sends your messages, with the gym information needed for the answer, through Nova, YOT’s AI gateway, to Anthropic (Claude) and, as a fallback, Google (Gemini). For members, that is the gym's timetable and trainers; your own bookings, waitlist places, credits, membership and your children's Kids classes are included only if you turn on “Share my bookings and progress” (off by default). For coaches and owners, it is their classes and PT diary, the gym’s figures they ask about, and the names, sessions and bookings of members they ask about. Payment details and passwords are never sent. NOVA cannot book, cancel or change anything by itself: it shows a card, and only your tap on Confirm acts, under your own account and the gym’s usual rules. We keep each question, a short excerpt of the answer and the cards shown, within that gym, so NOVA can follow up and improve; your conversation is also kept on your device until you start a new one. Answers can be wrong and are not medical advice. You can turn NOVA off or change what you share in Settings; deleting your account deletes this history and your personal NOVA notes. You can also talk to NOVA: only when you tap the microphone, what you say is turned into text on our voice service, or in a live conversation streamed to Google (Gemini Live) as you speak, and answered under the same rules as a typed question; no recording is kept, and typing always works.

Who we share it with

• Your gym — authorised staff and trainers of a gym you belong to see the data needed to run your membership, including bookings, credits, your health dashboard, weigh-ins and session metrics. You can use bookings without connecting a health integration.
• Service providers — Supabase (hosting & database), Stripe (payments), Apple/Google (native digital billing), Resend (email delivery), and Nova, YOT Ltd’s own AI gateway, which routes content-safety checks and optional, consented AI requests to Anthropic (Claude) and, as a fallback, Google (Gemini) under YOT’s paid API accounts. Whiteboard transcription sends only your drawing after explicit permission; you can type manually instead. Optional training insights require the member's own permission in account settings and the trainer's confirmation. They send injury categories and severity, class attendance patterns, and PT session statuses, without names, contact details, IDs, or free-text notes. Members can revoke future AI sharing at any time. Under those providers’ API terms, request data is not used to train their models by default. If Nova is unavailable, AI features fail without switching to any other provider; a member’s private message or meal photo to their own coach is still delivered to gym staff, marked as not yet safety-checked. Do not include private member information in drawings. AI suggestions need human review and are not medical advice. Each processes data only to provide their service to us.
• Health integrations — data flows from your connected provider to your Studio+ account at your instruction. We do not write back to Apple Health or Health Connect. Synced data is visible to your authorised gym staff as described above; it is not sold or used for advertising.

Retention & deletion

We keep your data while your account exists. You can disconnect a health integration at any time (its synced history stays in your account until you delete it or your account), and you can delete your account entirely in the app (Profile → Delete account) — this permanently removes your profile, bookings, health data and notification tokens, and the profiles of children you added. Transaction records may be retained where required for accounting or legal obligations. You can also request deletion without the app at studioplus-btsao.ondigitalocean.app/delete-account. For health-history-only deletion, email hello@studioplus.fit from your account address.

Your rights

Under the GDPR you can request access to, correction of, or erasure of your personal data, object to or restrict processing, and request portability. Write to hello@studioplus.fit and we'll respond within a month. You can also lodge a complaint with the Information and Data Protection Commissioner (Malta) or your local supervisory authority.

Changes

We'll post any changes to this policy on this page and update the date above. Material changes will be announced in the app.