Skip to content
Legal

Privacy policy

Last updated 21 October 2026

What we collect, why we collect it, and what you can tell us to do with it. Written to South Africa's Protection of Personal Information Act (POPIA).

Draft for review. This document is a working draft pending sign-off by a South African attorney.

1. Who is responsible for your information

K2026589086 (SOUTH AFRICA) (registration number 2026/589086/07), trading as hoppir, is the responsible party for the personal information described here. Our address is Unit 301 The Edge, 247 Bree Street, Cape Town, 8001, South Africa, and our phone number is 071 471 9459.

Our Information Officer is Kai Millar, and our Deputy Information Officer is Gabriel Brozin, both registered with the Information Regulator as POPIA requires. You can reach them at support@hoppir.app.

2. What we collect

When you use the app

  • Account details: your name and email address, or the Apple/Google identifier you sign in with. If you sign in with Apple and choose to hide your email, we only ever see the relay address.
  • Bookings and credit activity: the classes you book, cancel and attend, and every credit movement in your wallet. We keep this as a ledger because it is what makes your balance reconcilable.
  • Your location: only if you allow it. On your phone, the app uses it to show where you are on the map, and that never leaves your phone. When you check yourself in, the app sends us a single location reading to confirm you are actually at the studio. We compare it to the venue and keep only the resulting distance in metres on the check-in record, not your coordinates, and not a location history. We never use it to sort, rank, filter or recommend studios, and hoppir does not track you in the background. Browsing, booking and paying all work with location switched off; if it is off when you arrive, you show your booking code to the studio’s staff instead.
  • Payment details: handled by our payment provider, Paystack South Africa. Your card details are entered in their secure checkout rather than in the hoppir app; we store a token and the last four digits of your card so a membership can renew, and we never see or store your full card number.
  • What you send support: your messages, and any screenshots you attach. A first answer may be written by our AI provider, Anthropic, from your messages and the facts of your account (your first name, bookings, credits, payments and membership); a person can always take over.
  • Reviews you write about a studio, and the names you type in when you book a private class for other people.
  • Your agreement to the terms: which version you accepted, when, and that you told us you are 18 or older.
  • Crash reports: when the app fails, a report of what went wrong reaches our error-tracking provider, with your email, sign-in tokens, location and message text taken out first.
  • Usage statistics, only if you opt in in the app: which screens you use, tied to a random identifier rather than your name or email, and with your internet address discarded.

When you use this website

  • Your email address, if you give it to us to be notified about something specific (for example, Android availability). We use it for that, and nothing else.
  • What you send us on the contact page: your name, your email address and the message itself. We use it for one purpose: answering what you asked. It is not stored in a database or a helpdesk system; it reaches us as an email to our support inbox, sent through our email provider, and it lives in that inbox alongside the reply.
  • A question you type into “Ask anything else” under our FAQ: the question itself. We send it to our AI provider, Anthropic, so hoppir can write an answer from what this site says, and we keep the question for 90 days, with no name, email or address attached, to learn which questions the FAQ does not answer yet. To stop one visitor sending hundreds, we also keep a scrambled one-way code made from your internet address for one day; we never store the address itself. Please leave personal details out of your question.
  • Optional advertising cookies, only if you allow them. If you accept when we ask, we load Meta’s Pixel, which sets an advertising cookie (two, if you arrived from one of our Meta ads, the second recording which ad brought you) and tells Meta which pages here you visited and whether you joined a list or clicked through to apply as a studio, so we can measure whether our ads work and show them to fewer wrong people. It never sees your email address or anything you type. If you decline, or never answer, the Pixel is not loaded at all, nothing is sent to Meta, and every part of this site works exactly the same. Withdrawing consent below removes both cookies. You can change your mind either way, at any time.

When you run a studio on hoppir

  • Your application: your name, email address and phone number; your studio’s name, address, place on the map and website; what you teach and how you take bookings; anything you write in the box for anything else we should know; and the studio’s public Google listing (its phone number, website, opening hours and rating), which we look up to check that the studio is real. You and each person on your team sign in with an email address, and a password if you choose to set one.
  • Your team: the name, email address and role of each person on your team; the instructors you list, with the bio and photo you add, which members see in the app; and, for anyone on your team who asks for booking notices on WhatsApp, their WhatsApp number, when they agreed and to which wording, and a reference to the message they agreed in (never its text).
  • Your business and where we pay you: the business’s registered name and type, its registration and VAT numbers, and the bank account we pay, with the account holder’s name and their South African ID, passport or company registration number, because our bank needs it to confirm the account is theirs. We keep every set of bank details you save, a record of each check we run on them (including our note of any call we make to confirm a change), and who made each change.
  • Your agreement to the studio terms: which version of the words was accepted and when, the name, email address and role of the person who accepted them, and the commission, minimum rate and payout figures in force at that moment.
  • Your studio’s own members, if you add them: the names, phone numbers and email addresses you type in, and, for each person who asks to join your list through your link, the name, email address and phone number on their hoppir account, so they can book as your members. We hold these on your behalf and use them for nothing else. When you remove someone, we keep their entry so a past booking still shows whose it was.
  • What you send us: support conversations and the photos you attach to them, the timetables you upload, the logo, cover and instructor photos you upload, and the logo and a photo of the room we take from the website you give us on your application.
  • Our assistant: a first answer to a support message may be written by our AI provider, Anthropic, from the messages and photos and the facts of your studio’s account: the first name and role of each person on your team, your studio’s setup, timetable and instructors, and, when someone asks about the studio’s numbers, the bookings, attendance, statements and payouts it reads for them. Earnings are among them only in an owner’s own private conversation. A person can always take over.
  • Delivering your check-in stand: the name and phone number of the person who receives it and the address we send it to, which the courier delivering it also receives.
  • The studio app and portal: a push token for each phone or browser that asks for notifications (with the browser’s name, such as “Chrome on Mac”), whether the emails we send you were delivered, crash reports from the portal with personal details taken out, and usage statistics only if you opt in.

3. Why we may lawfully process it

  • To perform our contract with you: taking payment, holding your credits, booking your seat, and letting the studio know you are coming; for a studio, reviewing its application, selling its classes and paying it.
  • With your consent: location, push notifications, usage statistics in the app, marketing email, booking notices on WhatsApp for studio staff, and the advertising cookies on this website. Each is optional, and you can withdraw consent at any time without losing access to the rest of hoppir.
  • To meet a legal obligation: tax and financial record-keeping, including the record of what we paid each studio and where.

4. Who we share it with

  • The studio you book with receives your name and the class you booked, so they can check you in. If the studio runs its timetable on Mindbody or Wix, we also add your name and the booking to that system, with a hoppir address in place of your email. Studios do not receive your email address, phone number, payment details or your activity at other studios, with one exception: if you join a studio’s own member list through its link, that studio sees the name, email address and phone number (if there is one) on your hoppir account.
  • For a studio’s own members, the roles are the other way round: the studio is responsible for the list it keeps, including the details of anyone who joins it through its link, and we process the list only to run its bookings.
  • Our operators, the companies that run parts of hoppir for us. Each one’s terms with us commit it to keep your information confidential and secure.
  • Supabase (Germany): our database, sign-in and file storage.
  • Paystack (South Africa): card and Apple Pay payments, and sometimes checking a studio’s payout account.
  • FNB (South Africa): our bank, which pays studios, and whose account check we use to confirm that a payout account belongs to its holder.
  • Vercel (Germany and the United States): hosting for this website and the studio and staff portals.
  • Fly.io (South Africa): the computer that runs our background jobs, such as sending bookings to studios.
  • Anthropic (United States): writes answers in support conversations, from the account facts section 2 describes, and in the ask box under our FAQ, and reads timetables studios send us. It does not train its models on what we send.
  • Resend and Postmark (United States): email, including sign-in codes and replies to the contact page.
  • Sentry (United States): crash reports, with personal details taken out.
  • PostHog (Germany): usage statistics, only if you opt in.
  • Meta (Ireland): WhatsApp booking notices to studio staff who ask for them (a notice names you by first name and surname initial, with the class and its time), and the advertising cookies described in section 2, only if you allow them.
  • Apple and Google (United States): Sign in with Apple or Google, push notifications, and Google’s address search and business listings when a studio gives us an address.
  • A courier (South Africa): delivers a studio’s check-in stand, with the name, phone number and address of the person receiving it.
  • Slack (United States): alerts to our own team, which can include the name of a person applying for a studio.

We do not sell your personal information. The one thing an advertiser can ever receive is described in section 2: if, and only if, you allow the advertising cookies on this website, Meta receives the page visits and sign-up events it describes, under Meta’s own privacy policy. Nothing from the app is ever shared with advertisers: not your account, not your bookings, credits, payments or location.

5. Information sent outside South Africa

Most of our operators hold data outside South Africa, in the European Union, Ireland and the United States, as section 4 lists. POPIA section 72 allows that where the information stays protected to a comparable standard. In the European Union and Ireland, the law there does that. For providers in the United States, it is their data processing terms with us, which include the standard contractual clauses written for exactly this.

6. How long we keep it

We keep your account and booking history for as long as you have an account, and afterwards only where a law requires it: financial records, for example, must be retained for five years. Credit ledger entries are never deleted or edited while your account is open, because doing so would break the record your balance is built from. Website email sign-ups are kept until you unsubscribe, which every email lets you do for free. After that we keep only your address, the words you agreed to and the dates you joined and left, so we can show you agreed and never email you again. Ask us and we delete those too. If you delete your account in the app, we remove your name, email address, support conversations and screenshots, and the words of your reviews. If you joined a studio’s own member list, that studio’s entry for you, with the name and contact details on it, stays on its list, because the list is the studio’s. What we keep is the record of your payments and credit movements, without your name or email attached, for the five years tax law requires. For a studio, we keep its application, the terms it accepted, its statements and payouts, and every set of bank details it gave us. We do not delete these on a timetable: they stay after a studio leaves, and an application we decline stays too. Statements, payouts and bank details are the record of what we paid and why, which tax law requires us to keep for at least five years; you can ask us to delete the rest, as section 7 explains. A team member’s access ends when the studio removes them, and so do any booking notices to their WhatsApp number. A WhatsApp number also stops receiving notices the moment its owner sends STOP; we keep the record that they agreed and that they stopped. Questions typed into the ask box under our FAQ are deleted after 90 days, and the scrambled code that limits how often one visitor can ask, after one day.

7. Your rights

Under POPIA you may, at any time:

  • Ask what personal information we hold about you.
  • Ask us to correct or delete information that is wrong, irrelevant, or no longer needed.
  • Object to processing based on our legitimate interests.
  • Withdraw a consent you previously gave.
  • Ask us for a copy of your information in a portable format.

Write to support@hoppir.app and we will respond within 30 days. Our PAIA manual sets out the records we hold and how to ask for them. If you are not satisfied, you may complain to the Information Regulator of South Africa at inforegulator.org.za.

8. Security

Everything is transmitted over encrypted connections and stored on infrastructure with access controls that limit each account to the data it is entitled to. No system is perfectly secure, but if a breach ever affected your personal information we would notify you and the Information Regulator as POPIA requires. For a studio’s own members, we tell the studio at once, and the studio tells them.

9. Children

hoppir is not intended for anyone under 18. We do not knowingly collect information from children, and will delete it if we discover we have.

10. Changes

If we change this policy in a way that materially affects you, we will tell you in the app or by email before the change takes effect.