Privacy Policy
Last updated: 2 June 2026
This Privacy Policy describes how PT Gravity Stretching Canggu ("we", "us", "our") collects, uses, and protects your personal information when you use our website at bookgravity.com (and its subdomains) and our mobile applications "Gravity Stretching" for iOS and Android (together, the "Service").
1. Who we are
The Service is operated by PT Gravity Stretching Canggu, an Indonesian limited liability company (Perseroan Terbatas) with foreign capital status (PMA), registered under the laws of the Republic of Indonesia.
- Registered office: Jalan Raya Padonan Gang Pilot, Tibubeneng, Kecamatan Kuta Utara, Kabupaten Badung, Bali 80365, Indonesia
- NIB (Business Identification Number): 2304260281773
- NPWP (Tax ID): 10.000.000.0-931.2478
- Email: admin@bookgravity.com
- Phone: +62 821 3130 468
For the purposes of GDPR (where applicable), PT Gravity Stretching Canggu acts as the data controller of your personal information.
2. What we collect
When you book a class, we collect:
- Your name
- Your email address
- Your phone number (used for WhatsApp confirmations)
- The class date, time, and any additional services you select
When you sign in to the mobile app as a client, trainer, or administrator we also collect:
- Your email and a hashed password
- A device push notification token (Expo / APNS / FCM) so we can deliver reminders and booking notifications
- Your device model and operating system, for debugging
We do not collect: payment card numbers, government ID, location data, biometric data, contacts, browsing history, photos, or advertising identifiers. The mobile app uses the camera only to scan check-in QR codes on the device — no photos are uploaded or stored.
3. How we use it
- To create and manage your class bookings
- To send you booking confirmations and reminders by email and WhatsApp
- To let your trainer see who is booked into their class
- To send push notifications about your upcoming classes (mobile app only)
- To prevent double-booking and manage class capacity
The legal basis for processing this data is the performance of the contract between you and PT Gravity Stretching Canggu when you book a class, and your consent for push notifications.
4. No tracking, no advertising
We do not use any third-party analytics SDKs, advertising networks, or advertising identifiers. We do not track you across other websites or applications. The Service does not display advertisements. We do not sell, rent, or trade your personal information to anyone for any purpose.
5. Who we share it with
We share the minimum necessary data with the following processors:
- Resend (United States) — to deliver transactional emails (confirmations, reminders)
- Meta Platforms, Inc. via the WhatsApp Business Cloud API (Ireland / United States) — to deliver WhatsApp confirmations and let our team chat with you about your booking
- Expo (United States), Apple Push Notification Service, and Google Firebase Cloud Messaging — to deliver push notifications to your device
- Vercel Inc. (United States) — hosting and edge delivery of our web and API endpoints
- Turso (United States) — managed database hosting
Each processor is bound by its own terms of service and acts under our instructions for the purposes described above only. We never sell your data, and we never share it for marketing purposes with third parties.
6. International data transfers
PT Gravity Stretching Canggu is based in Indonesia. Some of the processors listed above store and process data in the United States or the European Union. Where personal data is transferred outside your country of residence, we rely on appropriate safeguards offered by each processor (such as Standard Contractual Clauses for transfers governed by GDPR). By using the Service, you understand that your personal data may be transferred to and processed in these jurisdictions.
7. Retention
Booking records are kept for accounting purposes for up to 5 years, consistent with Indonesian tax and bookkeeping requirements. You can request earlier deletion by emailing us. Push notification tokens are deleted automatically when you sign out of the mobile app or uninstall it. Trainer and administrator accounts are deleted within 30 days of the staff member leaving the studio.
8. Your rights
You may at any time:
- Request a copy of the personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your account and associated bookings
- Withdraw consent for push notifications (in iOS / Android settings) or WhatsApp messages (by replying "STOP")
- Object to or restrict certain processing of your data, where applicable under your local law
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email admin@bookgravity.com. We will respond within 30 days.
9. Children
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. We comply with the United States Children's Online Privacy Protection Act (COPPA) and the European General Data Protection Regulation provisions for children (GDPR-K). If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
Minors aged 13 or older may use the Service only with the supervision and consent of a parent or legal guardian.
10. Data Safety form alignment
The disclosures in this Privacy Policy align with the data collection and sharing declarations we provide in the Apple App Store privacy questionnaire and the Google Play Data Safety form. If you spot any discrepancy, please let us know — the Privacy Policy is the source of truth.
11. Security
We protect your data with HTTPS in transit, encrypted database storage at rest, hashed passwords (bcrypt), and access controls that limit staff access on a need-to-know basis. No method of transmission or storage is 100% secure, but we work to follow industry-standard practices.
12. Changes
We may update this policy from time to time. The latest version will always be available at this URL with an updated date. Material changes will also be communicated through the Service.
13. Contact
Questions, concerns, or data-related requests? Write to admin@bookgravity.com.
PT Gravity Stretching Canggu
Jalan Raya Padonan Gang Pilot
Tibubeneng, Kuta Utara
Badung, Bali 80365, Indonesia