This article is a plain-language overview of how we handle your data. For the legal text, see the privacy policy. If the two ever differ, the privacy policy applies.
What we collect
When you use MoveMentors, we store:
Account data
- Your name and email address.
- Your password, stored only as a secure hash (never in plain text). If you sign in with Google, we receive your name, email address and profile photo from Google instead.
- Your account type (student, mentor or studio).
- The date you signed up.
Profile data (mentors and studios)
- The bio you wrote.
- Photos you uploaded.
- Locations you added.
- The cancellation policy you chose.
- Certificates you uploaded.
- The payment methods you accept, and the details students need to pay you (for example a PayPal handle or bank details).
Booking data
- Which classes you booked, and when.
- How many people, and the names of family members you booked for.
- Payment method, price, tip and status.
- For card payments: Stripe's reference for the payment (never your card number).
- Your phone number, if you add one for text reminders.
Usage data
- Pages visited, referrers and country, through Vercel Web Analytics, which doesn't use cookies.
- Google Analytics data, only if you accept analytics cookies.
- Error reports, so we can fix bugs.
- Sign-in and security events.
Communications
- Messages you send to a teacher through their profile, such as an inquiry or a private session request.
- Records of the emails we send you.
What we DO with this data
Run the platform
We use your account data to sign you in, your booking data to confirm and remind you, and your profile data to show your public page.
Improve the platform
Usage data, looked at in aggregate, tells us what is working and what isn't.
Communicate with you
Booking confirmations, reminders and replies to your questions. You can turn off many of these emails in notification preferences.
Pre-fill forms
When you are signed in, we fill in your name and email on booking forms. Teachers and studios you book with see the details on your booking, such as your name and email.
Comply with the law
If we receive a valid legal request, such as a court order, we respond as the law requires.
What we NEVER do
Sell your data
We don't sell your personal information for money.
Share with advertisers
We don't share your personal information with advertisers for targeted advertising across other sites and apps. Google Analytics only loads if you accept analytics cookies.
Read your messages for marketing
We don't use your messages for advertising.
Store credit card numbers
Card details are entered on Stripe's own pages and never reach our servers.
Cookies
We use cookies and similar technologies for:
- Strictly necessary: keeping you signed in, protecting forms (including Google reCAPTCHA), and remembering your language and currency. These can't be turned off. Your sign-in lasts up to 30 days and renews while you use the site.
- Functional: remembering choices such as the last directory filter you used. You can clear these in your browser.
- Analytics: Google Analytics, which loads only after you accept analytics cookies in our cookie banner. Vercel Web Analytics also runs, without cookies.
Stripe sets its own cookies on its checkout pages.
Third-party services
These services see some of your data so they can do their job:
- Stripe: card payments, Stripe Connect, identity checks and payouts.
- Supabase: our database and file storage (photos, class covers, certificates).
- Vercel: hosting and cookieless analytics.
- Resend: email delivery.
- Google: sign in with Google, Google Calendar and Meet, maps and address search, reCAPTCHA, and Google Analytics (only with your consent).
- Apple (iCloud): busy times from the teacher's iCloud calendars, for teachers who connect Apple Calendar. We keep the title and time of those events only to block those times and show them to the teacher, and delete them when Apple Calendar is disconnected.
- Zoom: meetings for online classes, for teachers who connect it.
- Twilio: text message and WhatsApp reminders.
- Cloudinary: hosting for some images.
- Cloudflare Stream: video library hosting and streaming.
- Sentry: error monitoring. It may see the page you were on when an error happened.
- Anthropic and OpenAI: only if you connect an AI assistant to your account.
See the privacy policy for more about these providers and where they are based.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or CCPA), you have the right to:
- Access: a copy of the data we hold about you.
- Rectify: correct data that is wrong.
- Erase: delete your data (we keep some records the law requires, such as financial records).
- Port: receive your data in a machine-readable format.
- Object: object to certain uses of your data.
- Restrict: ask us to pause certain uses while a question is resolved.
You can export or delete your data yourself (see below). For anything else, email privacy@movementors.com. We aim to respond within 30 days.
Data export
On /settings/privacy, Export my data gives you a JSON file with your profile, bookings, notifications, consent history and a log of activity on your account (the audit log). You can request one export every 24 hours, and you confirm it's you first.
For anything that isn't in the file, email privacy@movementors.com.
Data deletion
See Deleting your account for the full process.
Data retention
| Data type | How long we keep it |
|---|---|
| Account data (profile, classes, bookings) | For the life of your account |
| After you delete your account | Personal information is deleted or anonymised, except where the law requires us to keep it |
| Financial and transaction records | Up to 7 years, for tax, accounting and audit |
| Security and sign-in logs | Up to 2 years |
| Email delivery logs | Up to 13 months |
| Reviews | Kept on the public profile; you can ask for your display name to be removed when you delete your account |
| Backups | Removed on the rolling backup cycle, typically 30 days |
When you delete your account, we remove your name and email from booking records instead of deleting the bookings, so the teacher or studio keeps its financial records.
International transfers
We are based in the United States, and our main systems run there. When personal information is transferred from the European Economic Area, the UK, Switzerland or Australia, we rely on safeguards such as the European Commission's Standard Contractual Clauses. The privacy policy explains these in full.
Security
We take reasonable steps to protect your data:
- HTTPS everywhere.
- Passwords stored only as secure hashes.
- Calendar and meeting connection details encrypted at rest.
- Two-factor authentication you can turn on in /settings/security.
If you discover a security problem, email support@movementors.com.
Common questions
Can I see what data you have about me without emailing? Yes. Use Export my data on /settings/privacy.
Can I prevent my name from showing to the teachers I book with? Not completely. Teachers and studios see the name and email on your booking. You don't have to use your full name on your account.
Can I make my reviews anonymous? No. Reviews come from real bookings and show on the teacher's profile. To remove a review you wrote, email support@movementors.com.
Will you sell my data if you get acquired? If MoveMentors is ever part of a merger or sale, personal information may be transferred as part of it. Our privacy policy says we will make sure the new owner honours the policy or gives equivalent protection, and that we will tell users in advance where the law requires it.
Next steps
- Deleting your account: how to leave the platform fully.
- Community guidelines: rules for behaviour.
- The privacy policy for the legal text.