Privacy Policy

Arumi Moves LLC (“Naya,” “we,” “us,” or “our”) respects your privacy. This Policy explains how we collect, use, disclose, and protect information when you use our website, account portal, booking services, or studio services (collectively, the “Services”).

We do not sell personal information or use it for targeted advertising, and we do not send health information or payment card details to our analytics or diagnostics providers.

• Contact, account, and booking information, such as your name, email address, telephone number, account identifier, reservations, purchases, and attendance.
• Health and fitness information you choose to provide, such as injuries, limitations, or goals, so we can provide safe and appropriate instruction.
• Payment and transaction information. Payments are processed by Stripe. We do not store full payment card numbers on our servers.
• Device and usage information, such as IP address, browser and device type, referring page, pages viewed, actions taken, timestamps, performance data, approximate location derived from IP address, and cookie or similar identifiers.

We use information to provide and administer the Services; process bookings and purchases; communicate with you; personalize and improve the customer experience; maintain security; prevent fraud; diagnose errors and performance problems; comply with law; and protect our rights and the safety of our clients and staff.

We use cookies, local storage, and similar technologies to understand use of the Services and maintain their reliability:

• PostHog processes page views, navigation, selected booking and purchase steps, general product or class categories, transaction value, performance measurements, and pseudonymous identifiers. Signed-in activity is associated with a one-way, pseudonymous customer identifier rather than your contact information. We disable indiscriminate click and form autocapture and do not use PostHog session replay.
• Sentry processes errors, stack traces, performance traces, logs, metrics, and a limited sample of sessions to help us diagnose problems. Session replay is configured to mask text and form inputs and block images and other media. We also restrict request bodies, headers, cookies, query strings, and user profile data from diagnostic events.

Browser-based product analytics is disabled when your browser sends a Do Not Track or Global Privacy Control signal. Essential security and diagnostic processing may continue where reasonably necessary to operate and protect the Services.

We disclose information only as reasonably necessary to service providers that support our business, including providers of booking and account management, payment processing, hosting, communications, analytics (PostHog), and diagnostics (Sentry). These providers may process information only to perform services for us and are subject to contractual or legal obligations. We may also disclose information to comply with law, protect rights or safety, complete a business transaction, or with your direction or consent.

Our providers may process information in the United States and other locations where they or their subprocessors operate.

We maintain reasonable administrative, technical, and physical safeguards appropriate to the nature of the information. No system is completely secure. We retain information only for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security, and operational requirements, after which it is deleted or deidentified where practicable.

Depending on where you live, you may have the right to access, correct, delete, or obtain a portable copy of personal information and to opt out of its sale, use for targeted advertising, or certain profiling. We do not sell personal information, use it for targeted advertising, or profile users to make legal or similarly significant decisions. You will not be discriminated against for exercising a privacy right.

You may update account details through your account, unsubscribe from promotional email using the link in the message, or submit a privacy request through our contact information below. We may need to verify your identity before completing a request. If we deny a request, you may appeal by replying to our decision.

Our online Services are not directed to children under 13, and we do not knowingly collect personal information online from children under 13 without appropriate authorization. Please contact us if you believe a child has provided information to us improperly.

We may update this Policy from time to time. We will post the revised Policy and update the “Last Updated” date. Material changes will be communicated as required by law.

To ask a question or exercise a privacy right, use our contact form or contact us at: