Privacy.
What is collected, why, how long it is kept, and how to get it back or get rid of it. Written for this product rather than adapted from somebody else's.
Last updated 10 August 2026privacy@geteyt.com
This website.
no account neededThis site sets no cookies, runs no analytics and has no third party scripts on it. It stores one thing in your own browser, a note of whether you chose the light or the dark version of this page, and that never leaves your device. There is no form on this site and nothing to sign up for.
Our hosting provider keeps ordinary web server logs, which include IP addresses, for security and troubleshooting. We do not use them to build a profile of anybody.
Who holds what.
two roles- Your studioIf you are a client of a studio that uses GetEYT, your relationship is with that studio. The studio decides what to collect and why. GetEYT holds it on the studio's behalf and acts on the studio's instructions. Requests about your own information are best made to your studio, and we will help them answer.
- GetEYTFor the software itself, for people who sign in to run a studio, and for this website, GetEYT decides what is collected. That part is covered directly by this policy.
What is collected, and why.
6 kinds- Your studio's clientsName, email, phone, booking history, memberships and payments, plus anything your studio's staff writes in a note. Collected so the studio can run its classes and take payment.
- Health information inside notesThere is no health field in GetEYT, but the client and booking note fields are free text and a Pilates studio will predictably write health information in them. Under California law that is sensitive personal information, so treat those fields as such. Nothing in that field is used for anything except showing it back to the studio.
- Messaging consentWhen and how a person agreed to receive texts or email, the exact wording they agreed to, and the moment they opted out. Kept because consent is worth nothing if it cannot be shown.
- Staff and instructorsName, contact details, hours, pay rate and role. Collected to run scheduling and payroll.
- PaymentsCard details are handled by Stripe and never reach GetEYT servers. What GetEYT stores is the amount, the date, the last four digits and Stripe's own reference.
- Sign inEmail address, and a record of when an account signed in. Sign in links are single use.
What is not done with it.
four nevers- Not soldPersonal information is not sold and is not shared for cross context behavioural advertising, as California defines those terms.
- Not used to market for othersA studio's clients are never marketed to on anyone else's behalf, including ours.
- Not shared between studiosNo studio can see another studio's clients. Whether anything at all is ever shared across the network is an open decision that has not been made, so nothing is being done.
- Not used to train anythingClient records are not used to train models. The assistant inside the product answers from a studio's own data while that studio is using it, and nothing is retained for training.
Security, stated exactly.
no overclaiming- In transitEvery connection to GetEYT is encrypted in transit over HTTPS.
- Card detailsHandled by Stripe. Card numbers never reach GetEYT servers, so there is no card data here to lose.
- AccessWhat a person can open is a property of their login. An instructor cannot open payroll, and no studio account can reach another studio.
- What we do not claimData is not encrypted at rest today. We are not going to say otherwise, and when that changes it will be dated on the updates page like everything else. There is no security certification and none is claimed.
Texts and email.
consent, then sendA studio can only message someone who agreed to be messaged. GetEYT records when consent was given, how, and the exact wording that was agreed to, and every single message passes one check that looks at consent, the time of day, whether the person has opted out, and a daily limit, in that order. A blocked message is recorded with the reason and is never billed to the studio.
Reply STOP to any text or use the unsubscribe link in any email. That is stored against the person rather than against a campaign, so it applies to everything from that studio and takes effect on the next send.
How long it is kept.
while the account is openStudio data is kept while the studio's account is open, because that is what the studio is using it for. When a studio closes its account it can export everything first, and we will help it do so.
When something is deleted it goes from the live system straight away. Copies can persist in routine backups for a short period afterwards and are overwritten on the normal backup cycle rather than pulled out individually. Records we are required to keep, such as financial records and proof that somebody consented to be messaged, are kept for as long as the law requires and no longer.
Your rights, and how to use them.
7 rightsIf you live in California, the CCPA and CPRA give you the rights below. We apply them to everybody rather than checking where you live first.
- KnowAsk what personal information is held about you and where it came from.
- Get a copyAsk for a copy of it in a format that opens.
- CorrectAsk for anything wrong to be fixed.
- DeleteAsk for it to be deleted, subject to records we are required to keep.
- Limit sensitive informationAsk that sensitive personal information be used only for providing the service.
- Opt out of messagesReply STOP to any text, or use the unsubscribe link in any email. It takes effect on the next send, without anyone having to action it.
- Not be treated differentlyExercising any of these does not change your prices, your bookings or your service.
To use any of them, email privacy@geteyt.comand say what you want. We will confirm we have your request within ten days and answer it within forty five, which is the deadline California sets. If we need longer we will tell you why before that deadline rather than after it. You can ask somebody to make the request for you, and if you do we will check with you first.
If your relationship is with a studio rather than with us, send the request to your studio and copy us in. They hold the decision; we hold the data on their behalf.
The rest.
short- ChildrenGetEYT is not built for children and accounts are not knowingly created for anyone under 16. If a studio tells us it teaches minors, that studio's parental consent is the studio's responsibility and we will help it record one.
- Where it is heldOn servers in the United States, along with the services GetEYT uses to send email and text messages and to take payment.
- ChangesIf this policy changes, the date at the top changes and the change is listed on the updates page. Material changes are told to studios directly rather than quietly published.
- Contactprivacy@geteyt.com
What has shipped and what has not is dated on theupdates page.