Privacy notice

This notice explains what personal data Kinhour handles, why, and your rights. LUZAURA, LDA, Rua de Volta da Manhã, Prado Villas, 8125-406 Quarteira, Portugal, NIPC 518676161 ("we") runs Kinhour.

Two roles

Studios and their teams. When a studio, gym or club signs up, we are the controller of the account details of the business and its team, and of this website.

Clients of a studio. When you book with a studio that uses Kinhour, that studio is the controller of your details and we process them on its behalf, under our data processing terms. The studio's own privacy notice, linked from its booking pages, applies. For questions about your bookings, passes or details, ask the studio first; we will help it answer.

What we handle

• Studio accounts: names and work emails of the team, the studio's name, address and brand, a password stored only as a secure hash, the plan, and billing details held by Stripe.
• Studio content: timetables, prices, courts, products, photos, videos and settings a studio adds.
• Clients of studios: the details a client gives the studio (name, email, phone and anything the studio asks for, such as a waiver or a health form), bookings, waitlists, passes, memberships, payments, gift cards, check-ins, door entries, and whether the client agreed to marketing. Card details stay with Stripe; we never store full card numbers.
• Messages: emails, texts, WhatsApp, Instagram and Messenger messages between a studio and its clients when the studio connects those channels, and conversations with a studio's front desk assistant when the studio switches it on.
• The member app: a device token so we can send the notifications you allow, and the sign-in for your account. We do not use your location.
• Our contact page: what you send us.

Why we use it

To provide the service a studio signed up for and to let its clients book and pay (contract), to keep Kinhour secure and prevent abuse (legitimate interest), to send the emails and messages a booking needs, to send a studio's marketing only to clients who agreed to it, and to meet our legal and tax obligations. We do not sell personal data, and we do not use a studio's client list for anything except running that studio's service.

Who helps us

We use a small number of providers to run Kinhour:

• Website and app hosting: Vercel. Database: Supabase, in the European Union (Frankfurt).
• File storage for photos, videos and uploads: Cloudflare R2, stored in Western Europe.
• Email delivery: Brevo, in France. Our own mailboxes: Google Workspace.
• Payments: Stripe, both for our plans and for the payments clients make to studios.
• App notifications: Expo, Apple and Google deliver notifications to the member app.

Some providers are used only when a studio switches them on: Twilio for text messages; Meta for WhatsApp, Instagram and Messenger; Anthropic for the front desk assistant, which receives a client's question and the studio's information needed to answer it (not used to train models); the studio's own invoicing software, door lock provider or tools such as Zapier; and marketplaces such as Algarve Circle, which receive a studio's timetable and, when a client books there, that booking.

Where a provider is outside the European Economic Area, we rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

Studio accounts are kept while the account is open. Studios decide how long they keep their clients' details and can export or erase a client from the dashboard at any time. When a studio closes its account, we delete its data within 90 days, except invoices and billing records, which Portuguese tax law requires us to keep for ten years. Messages sent through our contact page are kept for up to two years.

Your rights

You can ask to see, correct, export or delete your personal data, or object to how it is used. You can withdraw consent to marketing at any time with the link in every marketing email. If you are a studio's client, ask the studio first; it can export or erase your details from its dashboard. You can complain to the Portuguese data protection authority, the CNPD, at cnpd.pt, or to the authority where you live.

Cookies

We only use the cookies that signing in and a few settings need. We do not use advertising or analytics cookies. The cookie notice lists them.

Contact

Privacy questions: support@kinhour.com, or use the contact page.