Draft
This document is a draft for legal review and is not yet binding.
Privacy Policy
Effective: TBD on publication
Who we are
PranaLogic is operated by Arbitrary Systems LLC (Washington, USA). We provide a booking and scheduling platform that connects yoga, wellness, and fitness studios with their customers. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information we collect
We collect the information needed to operate the service:
- Account information. Your name, email address, and a hashed password when you create an account. We use Better Auth for authentication and never store passwords in plain text.
- Studio memberships. The studios you belong to and your role at each (customer, teacher, staff, owner).
- Customer profile and intake. Information you provide on the optional intake form — date of birth, health considerations, pregnancy status, yoga experience, and personal goals. Used by your studio's teachers to keep your practice safe.
- Bookings and attendance. Classes, workshops, and 1:1 sessions you book; check-ins; cancellations.
- Purchases. Pass and class-pack purchases, credit usage, and subscription status. Payment card data is collected directly by Stripe and never touches our servers.
- Communications. Messages between you and the studios you belong to, and any correspondence with our support.
- Technical data. A first-party session cookie (set by Better Auth) so you stay logged in. Server logs may include your IP address and request timestamps for security and reliability.
How we use your information
- To run the booking and scheduling service.
- To process payments through Stripe.
- To send transactional email (booking confirmations, password resets, invitation links, class reminders) via Resend.
- To share necessary information with the studios you have joined, so their teachers and staff can deliver your classes safely.
- To respond to support requests.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
We do not sell your personal information, and we do not share it with advertisers or data brokers.
Who we share information with
We share information only as necessary to operate the service:
- Studios you have joined. Owners, staff, and assigned teachers at a studio can see your profile, intake (when submitted), bookings, and attendance for that studio only. Other studios you belong to do not see this data.
- Stripe (payments). Stripe processes your payment card data directly. See Stripe's Privacy Policy.
- Resend (transactional email).
- Vercel (hosting, United States).
- Neon (database, US East — AWS us-east-2).
- Legal compliance. If required by law, subpoena, or to protect rights, property, or safety.
Data retention
We retain your personal information for as long as your account is active and as needed to provide the service. After account deletion, we may retain certain records as required for tax, accounting, fraud prevention, or legal compliance.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, email privacy@arbitrarysystems.io. You can also:
- Update your name, email, and intake information from your account page.
- Cancel future bookings from your dashboard.
- Request account deletion by emailing us.
Cookies
We use a single first-party session cookie to keep you logged in. We do not use third-party advertising cookies, tracking pixels, or cross-site analytics on the application surface.
Children
PranaLogic is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
International users
We host the service in the United States. By using PranaLogic you understand that your data will be stored and processed in the US.
Changes to this Policy
We will post any updates to this Policy here, with a new effective date. Material changes will be communicated via email or in-app notice.
Contact us
Questions or requests? Email privacy@arbitrarysystems.io or write to Arbitrary Systems LLC, Washington, USA.