This policy explains what personal data Yurraa collects, why we collect it, and the rights you have over it. The data controller is SUPERSTAR STUDIO S.R.L., Romania, which operates the platform under the EU General Data Protection Regulation (GDPR). You can write to [email protected] or reach us on WhatsApp at +40 755 744 306.
Data we collect
Account data: your name, nickname, sign-in email, and, if you add them, extra phone numbers, email addresses and a profile photo, plus your country and app language. Your date of birth, used to verify the 16+ minimum age, and your gender, only if you choose to add it, used for recommendations. Booking data: the classes you book, attend or cancel, and your passes. Studio data: the studio profile, classes, schedule and team. Technical data: crash reports and the basic information needed to run and secure the service. Approximate location, only with your permission, is used solely to sort what is near you and is never stored. We never collect payment card details; those go straight to Stripe.
Why we use it
We use your data to provide the service (to perform our contract with you), to keep it secure and prevent abuse (our legitimate interest), and to meet legal obligations such as accounting. We do not sell your data and we do not use it for third-party advertising.
Who processes it
We rely on trusted providers acting on our behalf: Supabase (database, authentication and app hosting), Stripe (payment processing), Cloudflare (website hosting and security) and Sentry (crash reporting). Each processes only what is needed to provide its part of the service. Face ID and fingerprints stay on your device; we never receive biometric data.
Studios and members
When you book a class, the studio receives the booking and the name needed to manage attendance. Each studio is responsible for how it uses its own client data and acts as the controller of its relationship with its members.
International transfers
Where a provider processes data outside the European Economic Area, the transfer is protected by appropriate safeguards, such as the European Commission's standard contractual clauses.
How long we keep it
We keep personal data while your account is active and for as long as we need it to provide the service, then delete or anonymise it, except where we must keep records longer to meet a legal obligation. Backups expire within 30 days.
Deletion and children
You can delete your account directly in the app (Settings, Delete account) or request deletion on our account-deletion page or at [email protected]. The service is not directed at people under 16, and they may not create an account.
Your rights
Under the GDPR you can ask to access, correct, delete or export your data, object to or restrict certain processing, and withdraw consent where we rely on it. You can also complain to your data protection authority (in Romania, the ANSPDCP). To exercise any right, contact us on WhatsApp at +40 755 744 306.
Changes and contact
Any update to this policy is posted here with a new date. For any privacy question, reach us on WhatsApp at +40 755 744 306.