Privacy
What we keep.
Plain language, no legalese pretending to be a summary. Here is exactly what Baddies Only Club stores about you, and what it never does.
Your account
Signing in is handled by Clerk, our authentication provider. Clerk stores your email address, your chosen username, and your login credentials (we never see or store your password ourselves). We keep a local record tied to your Clerk account: your display name, your username, and your app preferences.
Your studio login
When you link a studio membership, your studio password is used exactly once, to log in on your behalf, and is never written to our database. What we keep afterward is an access token your studio’s booking system issues us, encrypted at rest, which lets Baddie book and manage your own reservations without asking you to log in again. That token is useless without our server’s decryption key, and it never leaves our systems.
Your bookings and Fee Guard
We read your reservation and waitlist history from your studio’s booking system so Baddie can hold your spot, show you your schedule, and warn Fee Guard about a booking that could turn into a late fee. This data lives in our database, tied to your account, for as long as your account is active.
Chatting with Baddie
The chat is powered by OpenAI. What you type, and enough context to answer it (like your upcoming classes), is sent to OpenAI to generate a response. We don’t sell that content or use it to train anything beyond what OpenAI’s own processing requires to answer you.
Push notifications
If you turn on notifications, your browser hands us a push subscription (an endpoint your device controls, not a phone number or email) so we can alert you when Baddie books or waitlists something for you. Turning notifications off in your browser or your profile removes it.
Friends and referrals
Friend connections (who you’re following, who follows you) and referral relationships (who invited you, who you’ve referred) are stored so the crew features and the referral program can work. We never share this with anyone outside the club.
Analytics
We use Vercel Analytics to see which pages get visited, in aggregate, without cookies or tracking you individually across sites. If Google Analytics is ever turned on alongside it, this page will say so and name what it adds.
What we never do
We never store your studio password. We never sell your data to anyone. We never book or cancel a class you didn’t ask Baddie to handle, and we never check you in automatically — check-in is always a button you tap yourself.
Questions
Email alessandromontelli+baddie@gmail.com for anything this page didn’t answer, including a request to delete your account and its data.
This page describes what the product does today. It is written by the person who built it, not a law firm, and it will be updated if what we store changes.