Privacy policy

Last updated September 13, 2026

This policy explains what Lumina Movement Studio collects when you use our website and mobile app, why we collect it, who we share it with, and what you can ask us to do about it.

We are Lumina Movement Studio (“LuminaMovement”, “we”, “us”), a limited liability company in formation in the State of New York, at 2767 Route 44/55, Gardiner, NY 12525. For any question about this policy, or to make any of the requests described below, write to info@luminamovement.com or call 845-303-3380.

What we collect

We collect only what the studio needs to run. Specifically:

When you create an account

• Your name and email address. Both are required — the email address is how you sign in.
• Your password, which is held by Amazon Cognito and never stored by us in any form we can read.
• Your phone number and date of birth, if you choose to give them.

When you use the studio

• The classes you book, cancel, attend or miss, and when.
• The name of a guest you bring, so the instructor knows who is in the room. We hold nothing else about your guest.
• The name and phone number of an emergency contact, if you give one, so we can call somebody if you are unwell in a class.
• Notes staff make about your practice — for example an injury to work around. You can ask to see these at any time.

When you pay

• We never see or store your card or bank account number. Payment is handled by Stripe, which collects your card or bank details directly. We keep only Stripe’s own identifiers for your customer record and saved payment method, plus what you bought and when.

Automatically

• Ordinary server logs: the pages requested, timestamps, and IP address. These are used to keep the service running and secure, and are kept for a limited period.
• Error reports, if something goes wrong. These are sent to Sentry with your session identifiers, cookies and authorization headers stripped out before they leave our servers.

What we do not collect

• We do not track your location. The app does not ask for location permission.
• We do not use advertising trackers, analytics pixels, or third-party cookies.
• We do not build advertising profiles, and we do not sell personal information.
• We do not collect health records, though you may choose to tell staff about an injury.

Why we collect it

• To run your bookings. Reserving a place, managing the waitlist, recording attendance, applying your membership or class credits.
• To contact you about your bookings. Confirmations, reminders, waitlist promotions and cancellations. These are part of the service you asked for, so they are sent whatever your marketing preferences.
• To take payment for memberships, class packs, day passes and guest passes.
• To keep you safe in a physical class — knowing who is in the room and who to call.
• To send you studio news, only if you have said yes. See below.

Marketing, and how to stop it

Marketing email and text messages are off by default. We only send them if you switch them on, separately for each channel, in your profile. You can switch them off again at any time in the same place, and every marketing email carries an unsubscribe link.

Turning marketing off does not stop booking confirmations, class reminders or cancellation notices. Those are transactional messages about a booking you made, and you would rightly be annoyed to miss them.

Who we share it with

We share personal information only with the service providers that make the studio work, and only what each one needs:

• Amazon Web Services — hosting, the database, sign-in (Cognito), transactional email (SES) and text messages. Data is held in the US East (N. Virginia) region.
• Stripe — payment processing. Stripe receives your name, email address and card or bank details directly, under its own privacy policy.
• Sentry — error reporting, with identifying headers removed.

We do not sell personal information, and we do not share it for anyone else’s advertising. We will disclose information if the law requires it, or to protect someone from harm.

How long we keep it

• Your account and attendance history for as long as you are a member, and afterwards while we may still need it — for tax and accounting records, and for any question about a past payment.
• Server logs for a short operational period, then discarded.
• Delivered messages are recorded so we can show whether a reminder was sent.

You can close your account yourself, at any time: in the mobile app under You, or on the website under Your details. Your sign-in, contact details, date of birth, emergency contact and photo are erased, any saved card is removed, upcoming bookings are cancelled and a membership stops billing. Records of classes attended and payments made stay, because they are the studio’s accounts and we are required to keep them — with nothing on them that identifies you. How to delete your account sets this out in full.

Your choices and rights

You may, at any time:

• See what we hold about you. Most of it is visible in your profile; ask us for the rest.
• Correct anything that is wrong.
• Delete your account yourself, subject to the records we must keep.
• Turn marketing messages off.
• Ask us to export your information in a readable form.

Write to info@luminamovement.com. We will respond within thirty days.

Children

The app is not for children under 13, and we do not knowingly collect their information. A parent or guardian must create and manage the account for anyone under 18 attending the studio. If you believe a child has given us information, contact us and we will remove it.

Security

Everything travels over HTTPS. The database is not reachable from the public internet and sits inside a private network. Passwords are held by Amazon Cognito, not by us. Staff access is limited by role: instructors can see class rosters — names and attendance — and cannot see your contact details, date of birth or emergency contact. Two-factor authentication is available on every account and we recommend it.

No system is perfectly secure. If a breach affects your information, we will tell you and the appropriate New York authorities as the law requires.

Changes to this policy

If we change this policy we will update the date at the top and, for anything significant, tell you by email.

Governing law

This policy is governed by the laws of the State of New York, without regard to its conflict-of-laws rules.