Legal
Privacy Policy
Last updated: August 19, 2026 · Pilot version
The short version
We collect only what we need to run Echo: your account info, your bookings, and the payment metadata Stripe sends back. We don't sell your data, ever. We don't share it with partners beyond what they need to host you at their class.
What we collect
- Account: name, email, neighborhood, and your role (member, partner, trainer, organizer).
- Activity: classes you book, attend, favorite, pods you join, ratings you leave.
- Payments: handled by Stripe. We store the transaction reference, amount, and status — never your full card number.
- Communications: emails we send you about your bookings, event updates, and account changes.
- Technical: standard server logs (IP, browser, timestamps) to keep the platform secure and debug issues.
What partners see
When you book a class, the hosting partner sees your name, the class you booked, your confirmation code so they can check you in at the door, and how much you paid for their own class. They don't see your email, phone, full card or billing details, or your activity at other partners.
Your public profile
Every member has a public profile page (linked from your dashboard) showing your display name, neighborhood, avatar, current streak, and the badges you've earned — visible to anyone with the link, including people who aren't signed in. It never shows your email, phone, credit balance, reward points, or which classes or partners you've booked.
What we don't do
- We don't sell your information to advertisers or data brokers.
- We don't run third-party advertising trackers.
- We don't share your activity at one partner with another partner.
Service providers
We rely on a small set of providers to run the platform: Stripe (payments), Supabase / Lovable Cloud (database, auth, hosting), Cloudflare (hosting infrastructure and bot/spam protection on our sign-in and sign-up forms), and our email sender for transactional and account email. They process your data only on our instructions.
Your choices
- You can update your name, neighborhood, avatar, and password from your settings page, and view your account and activity from your dashboard.
- You can unsubscribe from our emails via the link at the bottom of any email — note that this stops booking and account emails too, not just marketing ones.
- You can request a copy, correction, or deletion of your data — including closing your account — by emailing privacy@echosystem.club.
Retention
Booking history is kept as long as your account exists so streaks and points stay accurate. If you close your account, it's deactivated immediately, and your account, profile, and any photos you uploaded are permanently deleted 30 days later — you can undo a closure any time before that window ends. Your booking and payment records are kept separately after that point, detached from your identity, for as long as required for tax and accounting purposes.
Children
Echo is intended for people 18 and older. We don't knowingly collect data from anyone under 18.
Changes
We'll post any meaningful changes to this policy here, and email account holders for material changes.
Contact
Privacy questions: privacy@echosystem.club.