Privacy Policy

As little as we can get away with:

• What you send us when you request beta access or email us: your name, email, studio name, booking platform, and whatever you write.
• Standard server logs: IP address, browser type, pages requested, timestamps, kept briefly for security and debugging.

This site runs no advertising trackers, no social pixels, and no third-party analytics. See the cookie policy for the one piece of browser storage it uses.

When your studio runs MOMNTM, the service processes member data on your behalf: names and contact details, membership and visit history from your booking platform, points and reward activity, signed waivers, survey responses, and the messages your studio sends. What's collected is determined by which modules you run and how you configure them.

• Providing and operating the service you asked for.
• Answering you when you contact us.
• Securing the service: fraud and abuse prevention, debugging, incident response.
• Improving the product, using aggregated or de-identified information that no longer identifies anyone.

We do not sell or rent personal information, yours or your members'. We do not use member data to market to members. Both are commitments in our terms, not just this policy.

Nobody, except:

• Infrastructure providers under contract that host and operate the service (hosting, database, email and SMS delivery). They process data only to provide their service to us; the current list is available by emailing us.
• Your booking platform, at your instruction, to run the integration you connected.
• Authorities, if the law genuinely requires it, and we'll tell you unless we're legally barred from doing so.
• A successor, if MOMNTM is ever acquired, under this policy's protections, with notice to you.

Texts and emails sent through MOMNTM come from your studio, to members whose consent your studio is responsible for collecting. Opt-outs are honored automatically and permanently: once a member opts out, the product will not let anyone message them again through us.

Studio and member data is kept while your account is active, then deleted or de-identified on your request or on our standard schedule after cancellation. Your full export is free and access to it doesn't expire, the same commitment made in our terms.

Server logs are kept for a short operational window, then deleted.

Data is encrypted in transit, access is limited to people who need it to do their jobs, and shared credentials inside the product live in an encrypted vault with an access log. No vendor should promise you perfect security; we promise honest disclosure: if an incident affects your data, we tell you promptly and plainly, and incidents post publicly as they happen.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, and to object to certain processing. Email us and we'll act on it, and where the request concerns member data we hold for a studio, we'll route it to the studio and help them respond. We don't discriminate against anyone for exercising privacy rights.

This website and the product are for businesses and their adult members. We don't knowingly collect data from children under 13; if a studio's configuration involves minors (family memberships, youth classes), the studio is responsible for the required parental consents.

When this policy changes materially, we'll email studio account owners and update the date at the top. The commitments (no selling data, no marketing to your members, free export) don't get walked back by an update.