Every studio's records are isolated at the database level, members control who sees their details, and deletion and retention are handled properly.
Every studio's records are isolated at the database level with row-level security, so one studio can never read another's clients, bookings or payments. Each signed-in request is scoped to the studio it belongs to before any data is read.
Members choose, per studio, who can see their health details and their marketing, and guardians answer for children. The Who can see my details screen shows them exactly who has access, and staff only see health details through that explicit consent.
A deleted member account is anonymised while the studio keeps its own history. Personal data that must be retained is swept on a schedule, and owners and staff cannot delete their own accounts while they hold a studio.
Privacy and terms pages drafted in Australian English, plus member-facing unsubscribe pages: a one-click unsubscribe link in every marketing email, and STOP/START text-message handling that is explained on the member's account page.
30-day free trial, with your card only charged at go-live.