LUNORA
Privacy notice
What the studio collects when you use the member app, why it holds it, who else sees it, and how to make it stop.
Applies to the Lunora member app for iOS and Android, and to this website. Last updated .
This notice is not finished
The studio has not yet filled in the details highlighted below. Until it does, this page describes the software accurately but does not identify who is responsible for your data or where to complain. Please ask at the front desk.
Who holds your data
("the studio", "we") decides what is collected and why. Our registered address is . The software is operated on our behalf by DrigTech, which supplies and hosts the Lunora platform.
If you want anything on this page done — a copy of your data, a correction, deletion — write to . We answer people, not tickets.
What we collect, and why
Everything below is something the software actually stores. There is nothing collected "just in case", and nothing here is used for advertising.
| What | Why we need it |
|---|---|
| Your name | To know who is in the class, to greet you at the desk, and to put a name on your receipt. |
| Your email address and telephone number | To sign you in, to reset your password, and to tell you when a class you booked is cancelled. Both are optional if you joined at the front desk. |
| Your date of birth | Only where it is collected. It tells us whether you are a minor, which changes what a parent or guardian has to agree to. |
| Your photograph | Optional. It is shown to the front desk when you arrive so they know who walked in. Nothing is matched against it — see "What we do not collect". |
| Your password | Stored only as an Argon2id hash. Nobody at the studio, and nobody at DrigTech, can read it or recover it. |
| Your bookings, attendance and class history | To run the timetable, to hold your place, and to know how many places are left. |
| Your entry credential, and every door you open | A hashed QR code, and a record of which door opened when. This is how the studio knows the building is safe to lock up. |
| What you bought and what you paid | Orders, payments and refunds. Required for accounting and, in most places, by tax law. |
| What you agreed to, and when | The version of the terms you accepted, the date, and the network address and browser you accepted from. This is the evidence that we had your permission. |
| Your signed-in devices | The address and browser of each session, so you can sign out everywhere and so we can spot somebody else signing in as you. |
What we do not collect
- No face recognition and no fingerprints. The photograph on your profile is a picture, not a biometric: nothing measures it, nothing derives a template from it, and nothing matches you against it. Face-based entry is not part of this system.
- No card numbers. Card details are typed on the payment provider's own page and never reach the studio's systems. We hold a reference and an amount.
- No advertising, no tracking, no profiling. There is no advertising identifier, no third-party tracking pixel, no analytics tag on this website and no profile built to predict what you might buy.
- No location. The app does not ask for your position and does not use it. It knows which branch you booked, which is not the same thing.
- No selling. Your data is not sold, rented or traded, ever.
What is stored on your own device
The member app keeps your sign-in token in your browser's local storage so you do not have to sign in every time you open it. It is not a cookie and it is not sent anywhere except to the studio's own server. Signing out removes it. It is on your device, so clearing your browser data removes it too.
The app also caches its own screens so it can open when you have no signal. That cache holds the app, not your data — no booking, no payment and no message is ever stored offline.
Who else sees it
- DrigTech, who supply and host the platform, as processor. They act on the studio's instructions and for no other purpose.
- The payment provider, when you buy something. They receive the amount and a reference; they, not the studio, handle your card.
- An error-reporting service, but only if the studio has switched one on. When it is on, a crash sends the type of the error and the screen it happened on. It is configured to strip anything that could identify you — names, addresses, telephone numbers and sign-in tokens are removed before the report leaves your device.
Nobody else. Your data is not shared with insurers, marketers, data brokers or other studios, and a member of one studio is invisible to every other studio on the platform — the database enforces that separately from the software, so a bug in the software cannot leak across it.
How long we keep it
While you are a member, and afterwards for as long as we have a reason. When you ask to be deleted, the personal parts go straight away and the financial records stay, because tax and accounting law requires them. Those records no longer carry your name.
Your rights
- To see what we hold. Ask, and we will send it to you.
- To correct it. Your name, email and telephone number can be changed in the app under Settings. Anything else, ask us.
- To be deleted. Ask us, and we will. The deletion request page explains exactly how, what is removed, and what we are required to keep.
- To withdraw consent. Ask us. Some consents cannot be withdrawn while you hold a membership, and we will tell you which and why rather than quietly refusing.
- To complain. Write to us first at . If we do not put it right, you can complain to .
What deletion actually does
This list is generated from the statements the server actually runs, rather than written out separately and left to fall behind them. In summary:
Removed or revoked
Your name, email address, telephone number, date of birth, photograph, entry credential, referral code, every message we sent you, your password, your two-factor authentication, and your login. Every device you are signed in on is signed out.
Kept
Orders, payments and refunds — required by law, and no longer carrying your name. Attendance and door entries, as counts against a member who is now nobody. And the record of what you consented to, which is the studio's evidence that it had your permission; that record keeps the network address you consented from, and we would rather tell you that than not.
Deletion is carried out by a person at the studio, not by a timer. You stay signed in until they do it, and you can change your mind up to that point.
Children
A member under the age of majority where the studio trades needs a parent or guardian to agree on their behalf. The app is not directed at children and does not knowingly collect data from a child without that agreement.
If this changes
A new version of this notice is published here with a new date. If the change affects what we collect or who sees it, you will be told in the app rather than left to notice.