Privacy policy

Last updated 29 September 2026

This policy explains what personal data we collect through Pilatis, why, and your rights. Pilatis is run by Uuganbat Gantumur, who is responsible for this data.

Studio owners and staff

We collect your name, email address, the studio details you enter, and records of your sign-ins, to run your account, send you sign-in codes and service emails, and provide support. Billing details are collected and held by Paddle, our merchant of record; we receive your Paddle customer ID, plan and subscription status, not your card details.

Studios' clients

When a studio uses Pilatis, we store its clients' details (name, email, phone, bookings, purchases, waivers and any health or setup notes the studio records) on the studio's behalf. The studio is the controller of that data and we are its processor. Clients should contact their studio about their data; we'll help the studio respond.

Who helps us

• Cloudflare: hosting and data storage.
• Paddle: studios' subscription payments (merchant of record).
• Stripe: clients' payments to studios, when a studio connects its own Stripe account.
• Our email provider: sign-in codes and the emails studios send their clients.

We don't sell personal data or use it for advertising.

How long we keep it

We keep account data while your studio exists. A studio can export and ask us to delete its data at any time; we delete it within 30 days, except records we must keep by law (such as invoices).

Your rights

You can ask to see, correct, export or delete your personal data, or object to how we use it. Email support@pilatis.app. If you're in the UK or EU you can also complain to your data protection authority.

Cookies

We use one essential cookie to keep you signed in. No tracking or advertising cookies.

Contact

Uuganbat Gantumur. Email support@pilatis.app.