Privacy Policy

Information we handle

We handle account details such as your name, email, phone number, organisation, role and password hash. Depending on the account and studio workflow, profiles may include date of birth, address, emergency contact details and attendance records. Studios also manage classes, bookings, class credits, subscriptions, orders and payment references.

Security and operational records may include IP addresses, browser or device information, login events, API activity and support communications. When you use a social sign-in provider, we receive the identity and profile information needed to link or authenticate your account. Mobile notification tokens are used when you enable supported notifications.

Payment providers process payment credentials under their own privacy notices. ClassM8 uses payment status and transaction references to manage access, receipts and subscriptions; do not send payment-card details in support messages.

How we use information

We use information to provide accounts and studio workspaces, process bookings and subscriptions, record attendance, communicate about the service, support users, prevent fraud and investigate security incidents. We also use records to meet applicable accounting, tax and legal obligations.

Studios decide how to use information for their own classes and student relationships. Please contact the relevant studio about its enrolment, attendance, marketing and retention practices. MUEBLE SOLUTIONS is responsible for its platform accounts and operations, and provides hosted tools for studio organisations.

Service providers and international processing

Information may be shared with authorised studio staff and providers supporting hosting, email, payments, authentication, security and mobile notifications, as needed for the feature you use. Supported integrations include Stripe, HitPay and social sign-in providers; Cloudflare Turnstile may be used for abuse prevention when enabled.

Providers and users may be located outside Malaysia. Information can therefore be processed internationally. We use access restrictions and service arrangements appropriate to the service, and assess applicable transfer requirements. Contact us with questions about a particular integration or processing location.

We may disclose information when required by law, to address abuse or protect legal rights, or as part of a business transfer subject to appropriate safeguards. We do not provide optional marketing or analytics tracking through the cookie controls unless you choose it.

Security and retention

ClassM8 uses password hashing, role-based access, studio separation and supported two-factor authentication to protect accounts. No online system can guarantee absolute security. Keep your credentials private, enable available two-factor authentication and report suspected unauthorised access promptly.

We retain information for the service, support, security and applicable legal obligations. Retention depends on the record and account relationship. Closing or deleting an account may not immediately remove backups, transaction records or records that a studio or applicable law requires us to retain.

Your rights and choices

Depending on the laws that apply to you, you may have rights to access, correct, obtain a copy of, delete, restrict or object to certain processing, withdraw consent, or raise a concern with a relevant authority. Some requests may require identity verification or coordination with your studio. Withdrawing consent does not affect earlier lawful processing.

Account settings allow you to update supported profile details and security choices. Contact your studio for requests about student or class records; contact us for platform-account and service-processing questions.

Cookies and local storage

Necessary cookies support sessions, request security and login. Local storage may remember interface preferences and cookie choices. Optional analytics and marketing categories are off by default. You can reject them, choose individual categories, or reopen Cookie settings in the footer. Essential features remain available regardless of your optional choices.

Third-party websites, payment pages and sign-in providers have their own notices. Following an external link may cause the third party to receive technical information such as your IP address.

Students and children

Studios are responsible for appropriate notices and permissions when enrolling children or recording emergency contacts. Where the guardian-permission flow is enabled, student registration below the configured age threshold requires a parent or legal guardian to confirm permission before child account details are entered. A permission request email contains the studio name and an expiring link, not a child's name or date of birth. Opening a link alone does not confirm permission.

Authorised studio administrators can record previously obtained guardian permission with an evidence reference. Records include the guardian's contact, relationship, notice version and confirmation or withdrawal time. Email confirmation demonstrates control of the supplied inbox; it does not independently verify age or legal guardianship. Studios must assess any further verification required in their jurisdiction.

Permission covers essential account administration, emergency contacts, bookings, attendance, payments and service security. It does not authorise advertising, optional analytics, photographs or publicity. Optional analytics requires an adult declaration and separate opt-in; private account and studio pages are excluded from the platform's website analytics.

A parent or guardian can contact the studio or supportclassm8@mueblegroup.com to request access, correction, withdrawal or deletion, subject to appropriate identity checks. Withdrawal can disable account access, but existing bookings, refunds and legally required retention need separate review. Unused permission requests expire after one hour and are eligible for cleanup after one day. Please do not submit unnecessary sensitive information.

Contact and updates

For privacy requests, contact MUEBLE SOLUTIONS through our contact page or supportclassm8@mueblegroup.com. Identify the studio and type of request without sending passwords or authentication codes.

We may update this notice as the service or applicable requirements change. The date above identifies the current version; significant changes may also be communicated through the service.