Privacy Notice

Vercel and Neon (Booking System)

Bookings, passes, gift cards and health forms are held in the studio's own booking system at booking.theyogaden.co.uk. The site runs on Vercel, and your details are stored in a Neon database hosted in London.

My Calendar (Class Lists)

So I can see who's coming, my private calendar shows the names of the students booked into each class. It never includes your contact or health details.

Resend (Email)

Booking confirmations, reminders, sign-in links and the newsletter are sent through Resend, which receives your name and email address.

Upstash (Security)

To stop the booking site being flooded with requests, your IP address is counted for up to 15 minutes and then discarded.

Stripe (Payments)

Stripe receives your name, email, payment details, and postcode for fraud prevention. I never store your card information directly.

Signing In

There's no password. You enter your email address (and your name, if you're new), and I email you a link. Opening it on the same iPhone signs you in. The app then keeps a sign-in token, your name and your email in your iPhone's Keychain, the phone's own encrypted storage. The token lasts 90 days, then you sign in again. While you're signing in, the Keychain also holds a random code, so the link only works in the app on that phone. Signing out deletes all of this from the phone.

You can also delete your account in the app: open Bookings and tap Delete my account. Cancel any upcoming classes first. Deleting removes your name, email and phone from the booking system, and any unused class credits are lost. Your past bookings and payments stay there without your name, for the studio's accounts.

Your health form is kept for seven years for insurance, as I explain above, and until then it still has the name, contact details and date of birth you gave on it. Stripe, who handle card payments, keep their own record of any payment you made, with your name and email, under their own privacy policy.

Deleting your account doesn't unsubscribe you from my newsletter. To stop it, use the unsubscribe link at the bottom of any newsletter.

Notifications

If you allow notifications, the app lets you know when a space opens on a waitlist you've joined, and reminds you shortly before a class you've booked. They come as well as the usual emails, never instead of them. They show the class and when it's on, never your name, email or health details.

To send them, Apple gives the app a device token, a code that lets Apple's Push Notification service reach your phone. The app sends it to the booking system, which keeps it with your record, and the notifications travel through Apple. The app keeps a copy on your phone too, so it can ask the booking system to delete the token when you sign out. The booking system also deletes it if Apple says it has stopped working (after you delete the app, for example), when you delete your account, and when the rest of your details are cleared from the booking system.

You can turn notifications off at any time in your iPhone's Settings. You can also turn off just the class reminders in the app.

Paying in the App

You pay through Stripe's payment form, with Apple Pay or a card. Your card details go straight to Stripe, never to me. The card form can also scan your card with the camera, so you don't have to type the number. iOS asks your permission first, and the app doesn't use the camera for anything else.

No Adverts or Tracking

The app has no adverts, and no analytics or tracking of its own. It never uses your phone's advertising identifier, and it doesn't ask for your location, contacts or photos. Adding a class to your calendar opens Apple's own calendar screen, so the app never sees your calendar. The only other company's software in the app is Stripe's payment form. Stripe says it collects some details about your phone and how the form is used, to prevent fraud and improve its service, and never uses them for advertising.

Who the App Talks To

The app itself only talks to the studio's booking system at booking.theyogaden.co.uk, to Stripe for payments, and to Apple, which delivers notifications and lets sign-in links open the app. A few booking site pages, like the health form and waitlist offers, open inside the app and work just as they do on the website.