Privacy Policy

1. Who we are

Signal helps fitness studios surface member milestones, birthdays, and class context for their staff and instructors. Signal is operated from New Jersey, United States. We have not yet formed a formal business entity; these policies will be updated before paid subscriptions begin.

For privacy questions or requests, contact us at hello@studiomoments.co.

2. Information we collect

Studio account information. When your studio uses Signal, we collect information about authorized users such as name, email address, role (for example admin, staff, or instructor), and studio or brand association.

Studio configuration. We store settings you configure in Signal, including milestone thresholds, date-recognition rules, celebration logs, prep notes, and related studio preferences.

Integration data from Mariana Tek. If your studio connects Mariana Tek, we sync data needed to operate the service, such as class schedules, rosters, member names and identifiers, class counts, check-in status, birthdays (where available), and instructor assignments. Your studio controls whether and how this integration is enabled.

Derived and operational data. We generate analytics and insights from synced roster data (for example celebration coverage, attendance patterns, and instructor history) and store service logs needed for security, debugging, and reliability.

Communications. If you email us or request access, we collect the information you choose to provide.

3. How we use information

We use the information above to:

• Provide, maintain, and improve Signal
• Authenticate users and enforce role-based access
• Sync and display class rosters, milestones, and recognitions
• Generate studio and instructor insights from your data
• Respond to support requests and communicate about the service
• Monitor security, prevent abuse, and comply with legal obligations

We do not sell personal information. We do not use member data from your studio to advertise to your members.

4. Our role with member data

For member information your studio imports or syncs into Signal, your studio is generally the data controller and we act as a service provider processing that data on your instructions to deliver Signal. Your studio is responsible for having an appropriate legal basis to share member data with us and for providing any required notices to members.

5. How we share information

We share information only as needed to run Signal:

• Service providers. We use trusted vendors for hosting, database, authentication, and infrastructure. These providers may access information solely to perform services on our behalf.
• Mariana Tek. When you connect an integration, data flows between your Mariana Tek account and Signal according to your configuration and Mariana Tek's terms.
• Within your organization. Users at your studio see information according to their role and location permissions.
• Legal requirements. We may disclose information if required by law or to protect rights, safety, and security.
• Business transfers. If we form a legal entity, are involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, subject to this policy.

6. Subprocessors

We rely on third-party services that may process data on our behalf, including:

• Supabase (authentication and database)
• Vercel (application hosting)
• Mariana Tek (studio-provided integration for class and member data)

We may update subprocessors as our infrastructure evolves. Material changes will be reflected in this policy.

7. Data retention

We retain information for as long as your studio has an active account and as needed to provide Signal, comply with legal obligations, resolve disputes, and enforce agreements. When you terminate service, we will delete or de-identify studio data within a reasonable period unless retention is required by law or legitimate business needs (for example backups or audit logs).

8. Security

We implement administrative, technical, and organizational measures designed to protect information, including encrypted connections, access controls, and role-based permissions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

Studio administrators can manage user access, integration settings, and much of the data stored in Signal through the product or by contacting us.

Depending on where you live, you may have rights to access, correct, delete, or restrict certain processing of personal information, or to object to processing and request portability. To exercise these rights, contact hello@studiomoments.co. We may need to verify your request and coordinate with your studio where appropriate.

10. International users

Signal is operated from New Jersey, United States. If you access the service from outside the U.S., your information may be processed in the U.S. or other countries where our service providers operate.

11. Children

Signal is a business service for studios and their staff. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Member data synced from studio systems is handled on behalf of the studio.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be communicated by email or in-product notice where appropriate.

13. Contact

Signal
Email: hello@studiomoments.co