Privacy Policy

Your account: email address, and a name and photograph if you add one. A phone number only if you give us one for notifications.

Your listings or bookings: what you wrote about a room, its address, its hours, and the sessions booked on it.

Documents you upload: proof you may sublicense a space, insurance certificates, and any certificate a practitioner chooses to keep on file.

Messages you send through the app, with phone numbers and email addresses removed automatically before they are stored.

An emergency contact, if you give us one.

Basic product usage: when the app opens and which public-site page is viewed. These first-party events use a random identifier that lasts only for that browser tab or app session. We do not include a full URL, search query, referrer, persistent device identifier, or precise location in these first-party events.

Push notifications, only if you turn them on: a random provider identifier, an unguessable account alias, your push token, permission state, app or browser version, device and operating-system details, language, timezone, country, session activity, and whether a notification was opened. We never put a name, address, booking time, amount, message, or door code in a push notification.

Card details are handled by Stripe and never reach us. We hold the identifiers Stripe gives us so we can charge and pay the right accounts.

Identity verification, for practitioners: we use Stripe for identity verification before you can book. Stripe may collect images of your ID and a selfie, identifying information, and device and fraud signals to run the check. We do not store copies of your ID or selfie images in our own database — we keep only the verification status and a reference to the check.

Stripe, for payments and payouts, and for identity verification: your card details and, for a practitioner, the ID and selfie images and identifying information you submit to verify — all of which go to them and never reach us, along with what a booking cost. Their own privacy policy governs what they hold.

Resend, for email: your address, and what the message says — a booking confirmation, a door code, a receipt.

OneSignal, only if you turn on push notifications: an unguessable account alias, push token, permission and delivery status, notification opens, session activity, and technical information about the browser or device. It receives only generic notification wording; booking details, addresses, times, prices, messages and door codes stay in the signed-in app.

Supabase, for storage: your account, your bookings, anything you upload, and your signed-in session.

Google, when you type an address into the search box, and if you sign in with a Google account. Address lookups go through us, so a half-typed address does not leave your device for Google directly.

MapTiler, for the map: which part of the map is on screen, and not who is looking at it.

Microsoft, if you sign in with a Microsoft account: your email address and name.

Twilio is set up for emergency SMS and is not switched on. Nothing is sent to them today.

We do not sell personal information. We do not use advertising trackers on the public site.

You can delete your account from your profile whenever you have no sessions still ahead of you.

Deleting removes you: your documents, your photograph, your profile, and your sign-in.

It does not remove a completed booking. That is a financial record belonging to two people, and erasing it would take a host's own income history with it.

Reviews are detached from your name rather than deleted, because a room's rating is partly what everybody else wrote.

Records we must keep for tax and accounting are kept for as long as the law requires, and no longer.

First-party app-open and public-site page-view events are deleted after 90 days.

Push subscriptions stay with OneSignal while they are active. Turning notifications off stops delivery, and signing out or deleting your account disconnects that device from your account. You can also ask us to delete any OneSignal user and subscription records associated with your unguessable alias.

To have your identity-verification data deleted or redacted, contact us and we will follow Stripe's identity-verification deletion or redaction process where it applies.

You can ask what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it.

Write to us and we will answer within 45 days. We will not ask you for anything beyond what is needed to check it is you.

Using any of these will never cost you anything, and will never change the price you are shown or the rooms you can book.

We do not sell or share personal information for cross-context behavioral advertising. Write to us if you have a question about how we handle your data.

If you think we have handled something badly, tell us first — and you may also complain to the California Attorney General.

Data is encrypted in transit and at rest by our hosting and payment providers. Access to documents is restricted to the people reviewing them.

No system is perfect. If a breach affects you, we will tell you.

Minimum Stress is for adults. It is not for anyone under 18, we do not knowingly collect anything from a child, and we delete it if we find we have.

If we change this policy in a way that changes what we do with your information, we will tell you before it takes effect rather than after.

Sharing your location is optional. Every part of the app works without it — you can browse everything, search by ZIP code, and book normally.

When you do share it, it is used once, to put the nearest rooms first. It is sent to our server, used to sort that one list, and not written down. It is not attached to your account and not kept after the request.

We never share it with anyone, and we never use it to build a picture of where you go.

You can stop at any time — the app forgets your answer the moment you close it, so it will ask again rather than assume.

Distances are deliberately imprecise. A listing's exact position is private until it is booked, so a room half a mile away is shown as half a mile away and never any closer than that.