Privacy policy

Wellnest lets you find and book classes at partner studios. This policy explains what personal data we collect, why, who sees it and the rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its rules.

Who is responsible

Wellnest is responsible for your account and the booking platform. Each studio you book with is responsible for how it uses your details for its own classes: your attendance, payments made to it, and its own news emails if you agree to them.

What we collect

• Account: your name, email address, mobile number and, if you use Google sign-in, your Google profile name and photo.
• Bookings: classes you book, guests' names (and phone numbers if you give them), attendance, cancellations, waitlists, reviews you write and studios you save.
• Payments: GCash receipt screenshots and reference numbers you upload, credit packages you buy and promo codes you use. We never see your GCash PIN or card details.
• Consent: the waivers you sign, including your drawn signature and when you signed.
• Technical: basic server logs (IP address, browser, pages requested) kept for security and to fix problems, and searches that returned no classes (without your name).

Why we use it

• To run your bookings: holding your spot, telling the studio who is coming, confirming payments and sending booking emails, reminders and waitlist alerts (contract).
• To keep consent and safety records the studios need (legal obligation and legitimate interest).
• To send news and offers only if you opt in. You can opt out any time on your account page or with the link in each email (consent).
• To improve search and see which classes people look for (legitimate interest, using data without names where we can).

Who we share it with

• The studio you book with sees your name, contact details, booking and payment details, attendance and signed waiver for that studio.
• Service providers that run the platform for us under contract: Supabase (database and file storage), Cloudflare (hosting), Resend (email delivery) and Google (sign-in, if you choose it). Some store data outside the Philippines with safeguards required by law.
• Authorities, when the law requires it.

We don't sell your personal data.

Reviews show your first name and last initial publicly. Everything else about your bookings is private to you, the studio and our team.

How long we keep it

• Your account, until you delete it.
• Booking, payment and attendance records, for as long as studios need them for their accounts (up to 5 years, as Philippine tax rules can require), with your name removed if you delete your account.
• Signed waivers, for as long as a claim could be made about a class (up to 10 years).
• GCash receipt images, up to 1 year after the class or purchase.

Your rights

You can ask to see your data, correct it, object to or limit how it's used, get a copy in a common format, or have it deleted. You can edit your profile and email preferences on your account page, and delete your account there too. For anything else, email privacy@wellnest.fit. We reply within 15 days.

If you think we've mishandled your data, you can complain to the National Privacy Commission (privacy.gov.ph).

Security

Data is encrypted in transit, access is limited by role (a studio only sees its own customers), and payment receipts and signatures are kept in private storage. If a breach affects you, we'll tell you and the National Privacy Commission as the law requires.

Changes

We'll update this page when things change and tell you by email if the change is significant.