Privacy policy

The short version

There are no accounts in Rollup. You can use the whole app without telling us anything.
We only receive data you choose to send: the founding-member sign-up, the studios and instructors you ask us to bring on, a founding-instructor sign-up, or a request to update a studio listing.
Founding points are worked out from your sign-up and the friends who join with your link. They don’t need any extra data.
Your location and your favourites stay on your phone. We never receive them.
No ads, no tracking, no analytics tools, no selling data. The website sets no cookies.
You can delete your sign-up at any time, in the app or by emailing us.

This policy explains how we handle personal data when you use the Rollup iPhone app and the Rollup website (together, “Rollup”). We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

The controller of your personal data is [TODO: company legal name], a company registered in England and Wales (company number [TODO: Companies House number]), registered office [TODO: registered office address]. We are registered with the Information Commissioner’s Office (ICO) under registration number [TODO: ICO registration number]. “Rollup” is the name of our app and website.

Contact us about anything in this policy at [privacy email]. We’re a small team and haven’t appointed a Data Protection Officer (we’re not required to); your email will reach a person who can deal with it.

2. What we collect and why

2.1 Founding-member sign-up (optional)

If you join the founding members in the app or on our website, we receive:

your email address;
your postcode (we ask for the first half only, for example “E8”; you can give the full postcode if you like);
your answers about how you do Pilates: how often, the class types and times you like, which studios you go to now, how you book now and your rough monthly spend (all optional);
your Instagram handle, if you choose to give it;
whether you ticked the box to get our newsletter;
where you signed up (iPhone app, Android app or website), the date and time, and, if a friend invited you, their referral code;
two random codes we create for you: your own referral code (for your share link) and a secret deletion code that lets the app delete your sign-up;
if you joined on the website and later add your app bonus in the app, the date you added it.

We don’t ask about your health. Please don’t include health information (for example injuries or pregnancy) in the free-text answers.

What we use it for	Data used	Lawful basis
Running the founding-member list: recording your place, telling you about your membership and inviting you when booking opens near you	Email, postcode, sign-up date, source	Taking steps at your request (Art. 6(1)(b)) and our legitimate interest in running the list you asked to join (Art. 6(1)(f))
Understanding demand and showing studios anonymous totals (for example “40 people near you want reformer before 8am”)	Postcode area and your Pilates answers, combined with other members’	Legitimate interests (Art. 6(1)(f)): bringing more studios and classes to the app. Studios never get your name, email or Instagram, and we don’t report groups of fewer than 10 people
Referrals: counting how many people joined with your link, and inviting people who brought friends earlier in each area	Your referral code; the code of the person who invited you	Legitimate interests (Art. 6(1)(f)). We don’t tell you who joined with your link. If a founding instructor invited you, they can see how many people joined with their link, never who
Founding points: working out your points (joining, friends who joined with your link, the app bonus), showing you your total, and crediting them when booking launches	Your sign-up, where you signed up, how many sign-ups used your referral code, the date you added your app bonus	Performing our agreement with you under the points terms (Art. 6(1)(b)), and legitimate interests in stopping fake or duplicate sign-ups (Art. 6(1)(f))
Our newsletter: new studios, intro offers and events	Email, newsletter choice	Consent (Art. 6(1)(a) and PECR reg. 22). The box is unticked unless you tick it, and you can unsubscribe at any time
Saying hello or featuring the community on Instagram	Instagram handle (only if you gave it)	Legitimate interests (Art. 6(1)(f)). We won’t tag or feature you without asking first
Letting you delete your sign-up from the app	Email, deletion code	Legal obligation to honour your rights (Art. 6(1)(c)) and legitimate interests
Keeping the service secure and stopping abuse (for example spam sign-ups)	Sign-up data, technical data (section 2.6)	Legitimate interests (Art. 6(1)(f))

You can object to any use based on legitimate interests (see Your rights). We may still email you about your founding membership itself (for example, that booking has opened near you) without newsletter consent, because that’s what you signed up for. Every email has a way to opt out.

2.2 Studios and instructors you ask for (optional)

When you join on our website (and later in the app), you can name studios and instructors you’d like to see on Rollup. We receive the names you give, and for an instructor, where they teach and their Instagram handle if you add them. We store each request linked to your sign-up, with the first half of your postcode.

We use this to decide which studios and instructors to approach, and to tell them how many founding members asked for them. We only ever give them totals: never who asked, and no number at all for fewer than 10 people. If one of them joins, we may email you to let you know, as part of your founding membership. Our lawful basis is legitimate interests (Art. 6(1)(f)): bringing the studios and instructors you want onto the app. Your requests are deleted when you delete your sign-up.

If you’re an instructor someone named: we keep your name, where you teach and your public Instagram handle so we can contact you about joining Rollup, under our legitimate interest in building the service (Art. 6(1)(f)). When we first contact you, we’ll tell you how we got your details. If you’re not interested, or ask us to stop, we delete your details and keep only a note not to contact you again. You can also email [privacy email] at any time.

2.3 Founding-instructor sign-up (optional)

If you teach Pilates and join our founding-instructor list on the website or in the app, we receive:

your name and email address;
your phone number and Instagram handle, if you choose to give them;
the studios you teach at (the names you pick or type, and our ID for any studio already in our list);
what you want most from Rollup (up to three choices, in order) and anything you write under “something else”;
whether you ticked the box to get instructor news;
where you signed up (iPhone app, Android app or website), the date and time, and, if someone invited you, their referral code;
two random codes we create for you: your invite code (for the link you share with your clients) and a secret deletion code.

The profile preview on our website is built in your browser from what you type. Nothing is sent until you press the button to join, and we don’t publish a profile or any of your details anywhere until you’ve set up your profile and agreed to it.

What we use it for	Data used	Lawful basis
Running the founding-instructor list: recording your place and number, and contacting you before launch about setting up your profile and the founding perks	Name, email, studios, sign-up date, source	Taking steps at your request (Art. 6(1)(b)) and our legitimate interest in running the list you asked to join (Art. 6(1)(f))
Calling or messaging you before launch	Phone number (only if you gave it), name	Legitimate interests (Art. 6(1)(f)). Leave it empty if you’d rather we didn’t, or ask us to stop at any time
Deciding what to build first and which studios to approach	What you want most, the studios you teach at	Legitimate interests (Art. 6(1)(f)). We only ever report this as totals, never with your name
Telling you if founding members have asked for you (see section 2.2)	Name, Instagram handle, the studios you teach at, matched against members’ requests	Legitimate interests (Art. 6(1)(f)). We tell you how many asked, never who
Your invite link: counting how many founding members joined with it	Your invite code; the referral code saved with members who used it	Legitimate interests (Art. 6(1)(f)). You see the number, never who joined
Instructor news: launch dates, founding perks and new features	Email, newsletter choice	Consent (Art. 6(1)(a) and PECR reg. 22). The box is unticked unless you tick it, and you can unsubscribe at any time
Letting you delete your sign-up, and keeping the list free of spam	Email, deletion code, technical data (section 2.6)	Legal obligation to honour your rights (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f))

We don’t give your details to studios or anyone else, and joining as an instructor doesn’t sign you up as a founding member (you can do both).

2.4 Studio update requests (optional)

If you ask us to add, update or remove a studio listing (in the app or on our website), we receive the studio’s name (and our ID for it, if it’s already listed), your name, your email, your role at the studio and your message. We use this only to deal with the request and reply to you, based on our legitimate interest in keeping listings accurate (Art. 6(1)(f)), and, if you represent the studio and want to work with us, steps at your request before a contract (Art. 6(1)(b)).

2.5 Emails you send us

If you email us, we use your email address and what you tell us to reply and help you (legitimate interests, Art. 6(1)(f)).

2.6 Technical data

When the app or website sends a sign-up or request to our database, or when your browser loads our website, the receiving servers (see section 6) see your IP address, browser or device type and the time. Our providers keep this in short-term technical logs for security and to keep the service running. We don’t use it to identify you, build profiles or track you, and we don’t add analytics or advertising tools to collect more.

3. What stays on your phone

These are stored only on your iPhone. We never receive them:

Your location. If you allow it (“While Using the App”), the app uses it to show you on the map and sort studios by distance. It’s used on your phone and never sent to us or anyone else. You can say no and type a postcode instead, which is also matched on your phone.
Your favourites, filters and class-type preferences.
Whether you’ve seen the welcome screens.
If you joined in the app (as a founding member or instructor): your email, referral or invite code and deletion code, so the app can show your status and points and delete your sign-up when you ask.

Deleting the app removes all of this from your phone.

4. What we don’t do

No accounts, logins or passwords.
No advertising, no ad networks, no tracking across other apps or websites, and no Apple “App Tracking Transparency” prompt, because we don’t track.
No analytics or crash-reporting tools in the app or on the website.
We don’t sell or rent personal data, and we don’t share it with data brokers.
We don’t give studios your personal details. If a studio ever wants to contact founding members, we’ll ask you first.
No automated decisions with legal or similarly significant effects.

5. Services your device talks to directly

Some features load content from other companies. They receive your IP address and basic device information when that happens, and their own privacy policies apply:

Map images (app). The map is drawn from OpenStreetMap data served by OpenFreeMap. Your phone downloads the map tiles for the area you’re looking at. It doesn’t send your GPS location, but the provider can see which area of the map was requested.
Studio websites (app). When you tap “Book on studio’s site”, “Website” or “Instagram”, the page opens in an in-app Safari window or in Instagram. You’re then on the studio’s (or Instagram’s) service, under their terms and privacy policy. We can’t see what you do there.
Apple. “Directions” opens Apple Maps. Apple also handles App Store downloads and, if you’ve agreed in your iPhone settings to share analytics with app developers, may give us anonymised crash and usage statistics. Apple’s privacy policy applies.
Google Fonts (website). Our website loads its typeface from Google Fonts, so Google receives your IP address and browser details when you visit. Google doesn’t set cookies for this.

We use a few service providers (“processors”) who handle data only on our instructions and under contracts that meet UK GDPR:

Supabase (database): stores founding-member and founding-instructor sign-ups, the studios and instructors members ask for, and studio requests. Our database is hosted in London, UK (Amazon Web Services, eu-west-2).
Website hosting: [TODO: hosting provider, e.g. Netlify, Vercel, Cloudflare Pages or GitHub Pages], which serves the website and keeps short-term access logs.
Email: [TODO: email provider for our inbox, e.g. Google Workspace] for our inbox, and [TODO: newsletter tool, if/when used, e.g. Mailchimp, Brevo or Resend] to send founding-member emails and the newsletter.

We may also share data: with professional advisers (lawyers, accountants) under confidentiality; if the law requires it; to protect people’s safety or our legal rights; or with a buyer of our business, who would have to treat it in line with this policy (we’d tell you first).

Studios and instructors only see anonymous totals, as explained in sections 2.1 to 2.3.

7. International transfers

Our database is in the UK. Some of our providers are based in, or use support staff or sub-processors in, other countries, including the European Economic Area and the United States. Where personal data leaves the UK, we make sure it’s protected by UK “adequacy regulations” (for example for the EEA, or the UK Extension to the EU–US Data Privacy Framework where the US company is certified), or by the ICO’s International Data Transfer Agreement or Addendum. You can ask us for details. [TODO: confirm the transfer mechanism in each provider’s data processing agreement.]

8. How long we keep it

Founding-member sign-ups: until you delete your sign-up, or until the founding-member list is no longer needed. At the latest, we delete sign-ups 12 months after booking launches in the app, or 24 months after you signed up if booking hasn’t launched by then, unless you’ve asked us to keep in touch.
Founding points: worked out from your sign-up, so they’re deleted with it. At launch, the points we credit to your account are kept under the terms for booking.
Founding-instructor sign-ups: until you delete your sign-up, or until the list is no longer needed. At the latest, 12 months after booking launches in the app, or 24 months after you signed up if it hasn’t launched by then, unless you’ve set up your profile or asked us to keep in touch.
Newsletter: while you’re subscribed. If you unsubscribe, we keep just your email on a “do not email” list so we don’t contact you again by mistake.
Studios and instructors you asked for: your requests are deleted with your sign-up. We delete the details of an instructor who hasn’t joined 12 months after the last request for them, or straight away if they ask.
Studio update requests and emails to us: up to 24 months after we’ve dealt with them, unless we need them longer for an ongoing relationship with the studio.
Technical logs: kept by our providers for a short period (typically days to a few weeks) under their retention settings.

9. Your rights

Under UK GDPR you have the right to:

access the personal data we hold about you and get a copy;
have it corrected if it’s wrong;
have it deleted;
restrict how we use it;
object to us using it on the basis of legitimate interests, and to direct marketing at any time (we’ll always stop marketing when you ask);
data portability: get the data you gave us in a common format;
withdraw consent (for the newsletter) at any time. This doesn’t affect anything we did before.

To use any of these rights, email [privacy email], ideally from the address you signed up with so we can confirm it’s you. It’s free, and we’ll reply within one month (we may extend this by up to two months for complex requests, and we’ll tell you if so).

10. Deleting your data

In the app: Profile › Delete my data. If you joined on that phone, your sign-up is deleted from our database immediately and the app’s saved data is cleared.
On the website: straight after joining (as a founding member or instructor), you can use “Delete my sign-up” on the confirmation screen.
Any time: email [privacy email] from the address you signed up with. We’ll delete your founding-member or founding-instructor sign-up (and your points with it), the studios and instructors you asked for, and any studio requests from that address, and confirm by email.

Deleted data may remain in our providers’ encrypted backups for a short time until those backups expire, and isn’t used in the meantime.

11. Children

Rollup is not intended for children, and the founding-member and founding-instructor lists are only for people aged 16 or over. We don’t knowingly collect personal data from anyone under 16. If you think a child has signed up, email us and we’ll delete it.

12. Security

Data is encrypted in transit (HTTPS) and at rest. The app and website can’t read our database: they can only call a few narrow functions (join the list or the instructor list, see the total counts and the points rules, add your answers or the studios and instructors you want, see your own points or how many people joined with your invite link, and delete your own sign-up, the last four only with your sign-up’s secret code; add your app bonus; and send a studio request). Access to the data is limited to [TODO: the founders], using accounts protected with two-factor authentication. No system is perfectly secure, but if a breach ever puts your rights at risk, we’ll tell you and the ICO as the law requires.

13. Cookies and similar technologies

Website: our website sets no cookies and doesn’t use local storage or any other way of storing information on your device. There are no analytics, advertising or social-media trackers. If we ever want to add something non-essential, we’ll ask for your consent first and update this policy.

App: the app stores your favourites and settings on your phone (section 3) because you asked it to. It doesn’t use advertising identifiers and doesn’t track you.

14. Complaints

If you’re unhappy with how we’ve handled your data, please tell us first at [privacy email] and we’ll try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data-protection regulator: ico.org.uk/make-a-complaint, or call 0303 123 1113.

15. Changes to this policy

We’ll update this page if the app, website or the law changes, and change the “Last updated” date at the top. If a change materially affects how we use data you’ve already given us, we’ll tell founding members by email before it takes effect.