Contents
1. What we collect
We collect only what is necessary to book and deliver your sessions, communicate with you, and meet legal and accounting obligations.
- Contact details — your name, phone number, and email address, as you enter them on the booking form or membership signup.
- Waiver acceptance metadata — the typed-name signature, the date and time you accepted, your IP address, and your browser user-agent string. This is stored as evidence that the waiver was signed by you.
- Booking and session history — the locations, times, durations, and session types you book, along with minute-pack and membership purchases.
- SMS consent preferences — the two opt-in flags (transactional and promotional) that you can independently toggle on the booking form. Both default to off.
- Payment information — payment-card details are entered directly into our third-party payment processor (Helcim) and are not stored on Stretchy.Us systems. We see only the last 4 digits and a payment token.
We do not knowingly collect personal information from children under 13.
2. How we use it
- Service delivery — to confirm your booking, contact you about your session, run the session, and bill you accurately.
- Account communications — sent over the channel(s) you have permitted (email by default; SMS only with your explicit opt-in).
- Marketing — we send promotional emails or SMS only if you have explicitly opted in via the marketing-SMS or membership signup. You can withdraw consent at any time.
- Legal and accounting — to maintain records of waiver acceptance, taxable revenue, and any disputes.
3. SMS consent and opt-outs
Stretchy.Us treats transactional and promotional SMS as two independent opt-ins. Neither is required to book or use the service. Each opt-in is recorded with a timestamp tied to your account.
Transactional / informational SMS
When you check the transactional box on the booking form, you authorize Stretchy.Us to send SMS messages about your bookings, account notifications, schedule changes, and customer care. We do not send promotional content over this channel.
Promotional / marketing SMS
When you check the promotional box on the booking form, you authorize Stretchy.Us to send occasional promotional SMS messages (offers, new packs, new locations). This box is always optional and is never required to complete a booking.
For both categories: message frequency may vary, message and data rates may apply, reply HELP for help or STOP to opt out at any time. Opting out does not affect your ability to book or receive your sessions — we will simply fall back to email or phone call.
Your phone number and SMS consent state are never shared with third parties for their own marketing purposes.
4. Sharing and processors
We do not sell or rent your personal information. We share data only with the third-party processors that run the platform on our behalf, and only the minimum each processor needs to perform its function:
- Convex — backend database and serverless functions (stores booking, session, and account data).
- Twilio — SMS delivery for transactional and (where opted in) promotional messages.
- Helcim — payment processing.
- Cloudflare — email delivery for booking confirmations and signed-waiver copies, plus content delivery / DNS.
- Google Analytics — aggregated traffic measurement for the marketing site (no booking data is sent to GA).
Each processor is bound by its own privacy and security commitments to its customers. We do not share booking, contact, or waiver data with anyone outside this list except as required to comply with the law, enforce our Terms of Service, or protect against fraud.
5. Cookies and analytics
The Stretchy.Us marketing site uses Google Analytics to measure aggregate page-view traffic. Google Analytics sets first-party cookies in your browser. We do not use these cookies to identify individual visitors, and we do not transmit any booking or account data to Google.
The booking application uses a session cookie to remember your selections (location, time, duration) within a single visit. This cookie is not shared with third parties.
After you successfully purchase a pack, sign up for a membership, or sign in to your account at /me, we set a long-lived first-party cookie (stretchy_id, 1-year expiry) that contains only your internal account identifier. The marketing site reads this cookie to personalize your pricing-page view (for example, showing your remaining minute balance) and to greet you by name. This cookie is never shared with third parties and grants no access to your account — managing your account still requires the email magic-link sign-in flow. You can clear this cookie at any time via your browser's cookie controls.
When you sign in to your account at /me, we set a separate HttpOnly session cookie (stretchy_portal_session) that holds a 30-day rolling sign-in token. This cookie is read only by our server — not by any JavaScript or third party — and is cleared on sign-out. We do not use passwords; sign-in uses single-use 60-minute email magic links sent from onboarding@stretchy-us.sendssl.com via Cloudflare Email Sending. Magic-link request records (email, timestamp, requester IP) are retained for 90 days for abuse forensics, then deleted.
6. Retention
We retain your contact details, waiver acceptance record, and booking history for as long as your account is active, plus a reasonable additional period to satisfy legal, accounting, and dispute-resolution obligations (typically up to seven years for financial records, per California guidance).
SMS consent state is retained as long as your account exists. If you withdraw consent via STOP, we retain the opt-out record so we do not accidentally re-message you, but we suppress further marketing or transactional sends per your choice.
7. Your rights
You have the right to:
- Request a copy of the personal data we hold about you.
- Correct inaccurate information.
- Withdraw consent for either or both SMS channels.
- Request deletion of your account and associated data, subject to the legal-retention exceptions above.
Send any of these requests to the contact addresses below. We respond within a reasonable timeframe (typically within 30 days).
8. Contact
Stretchy.Us LLC
Email: Stretchy.Us@gmail.com
Phone / Text: 916-812-4190
See our Terms of Service for the rules that apply when you book and use a session.
Note: Stretchy.Us is not a HIPAA-covered entity. The intake information you provide is not protected health information (PHI). Any health-related disclosures you choose to make to your assistant during a session are voluntary and not retained as medical records.