Privacy Policy

Last updated 13 October 2026

Early-stage product. Cluvyra is currently operated by an individual founder; no legal entity has been registered yet. This policy describes how the product handles data today and will be updated as the business is formalised.

1. Who we are

Cluvyra is a software platform that helps fitness and wellness businesses (“studios”) manage bookings, schedules, memberships, clients and communication. Cluvyra is currently operated by its founder as an individual (no registered company yet). Data protection contact: hello@cluvyra.pro.

When a studio uses Cluvyra, the studio decides why and how its members’ data is processed; Cluvyra processes that data on the studio’s behalf. For the marketing website and demo requests, Cluvyra itself is responsible for the data.

2. What data we collect

Account data: name, email, phone number, role, password (stored only as a bcrypt hash), two-factor authentication settings.
Studio activity: memberships, bookings and cancellations, attendance, payment records entered by the studio, messages and announcements, trainer notes.
Optional fitness data a member chooses to enter, such as body measurements (weight, height, circumferences).
AI assistant conversations: the messages you type to the assistant.
Demo requests from this website: name, email, studio name and type, and your message.
Technical data: IP address and request metadata in server logs (for security and rate limiting), push-notification subscription endpoints if you enable notifications.

We do not use advertising trackers or third-party analytics on this site.

3. Why we use it

To provide the service: accounts, bookings, memberships, notifications and reports.
To keep the service secure: authentication, one-time codes, abuse prevention.
To answer demo and early-access requests.
To run the AI assistant when you choose to use it.

4. AI assistant and Claude API

The AI assistant uses the Claude API provided by Anthropic. When you send a message to the assistant, the following is sent to Anthropic to generate a reply: your conversation with the assistant, the current date and time, your first name, your role, and — for members — a summary of your own active membership, recent visit count and latest weight/height if you recorded them, plus class schedule data retrieved for your request. Email addresses, passwords, payment details and other members’ data are not sent.

The assistant can search the schedule and prepare a booking, but a booking is only created after you press “Confirm”. The assistant does not provide medical advice.

Anthropic processes API data under its commercial terms and privacy policy. We use the Claude API under Anthropic’s commercial terms; we do not train models on your data, and Anthropic’s own retention and safety-review rules for API data apply (see Anthropic’s documentation). We have not signed a separate data processing addendum.

For usage limits and cost control we store technical AI usage records (time, model, token counts, status) without message text.

5. Where data is stored and for how long

Data is stored in a PostgreSQL database and file storage operated by our hosting provider. Our hosting provider is Railway; the database and file storage run in its US West (San Francisco) region. No separate backup schedule is guaranteed at this early stage.

Account and studio data: while the studio uses Cluvyra, then deleted or returned according to the studio’s instructions. If a studio asks us to delete its data, we delete it within 30 days, except for backups, which are overwritten on the provider’s normal cycle.
One-time codes: expire after 10 minutes and are stored only as hashes.
AI conversation text is kept in your browser’s local storage; the server keeps only the technical usage records described above.
Demo requests: until the request is handled, and no longer than 12 months.

6. Sharing

We share data only with service providers needed to run Cluvyra: hosting, email delivery (SMTP provider) and the Claude API (Anthropic) for the AI assistant. We do not sell personal data. Current providers: Railway (hosting and database), Anthropic (Claude API), and Google (email delivery for one-time codes and notifications).

7. Your rights and deleting your data

You can view and update your profile in your account. To request access, correction, export or deletion of your data, contact your studio or us. You can clear your AI conversation at any time with the trash icon in the assistant; this removes it from your browser. Depending on where you live (for example under the GDPR or Ukrainian data protection law) you may have additional rights, including the right to complain to a supervisory authority.

8. Security

Passwords and one-time codes are hashed, connections are encrypted in transit (HTTPS), staff accounts require email two-factor authentication, and access is limited by role.

9. Changes and contact

We will update this page when our practices change.