Privacy Policy

Last updated: April 17, 2026

This Privacy Policy describes how the Core Academy mobile application and web platform (together, the “Service”) handle information about you. By using the Service you agree to the practices described here.

1. Who we are

The Service is operated by the administrator of Core Academy. For questions about this policy or your data, contact contact@fivesstudio.com.

2. Information we collect

We only collect what is needed to provide the Service:

  • Account information: your name, email address, and, where you provide one, a password. This is supplied when you sign up or when an administrator creates an account for you.
  • Booking and attendance data: the classes, events, and passes you book, check in to, or are assigned by Core Academy.
  • Technical data: basic device and session information (such as a session identifier stored on your device) used to keep you signed in and to keep the Service secure.

3. Camera permission

The Core Academy mobile app requests access to your device’s camera only so that you can scan QR codes for check-in at the entrance of a class or event. The camera preview is processed on your device. We do not record, store, upload, or transmit any photos, video, or other camera imagery. Camera access is only used while the scanner screen is open, and you can revoke the permission at any time from your device’s system settings.

4. How we use your information

  • To authenticate you and keep your session secure.
  • To show you your bookings, credits, schedule, and account details.
  • To let Core Academy manage classes, memberships, events, and check-ins.
  • To fix bugs, prevent abuse, and improve the Service.

We do not sell your personal data, and we do not use it for advertising.

5. Sharing

We share your information only with:

  • Core Academy staff, who can see your bookings and contact details to administer your account.
  • Service providers that host and operate the platform on our behalf (such as hosting and database providers), under agreements that require them to protect your data.
  • Authorities, where required by law or to protect the rights, property, or safety of our users or the Service.

6. Data retention

We keep account and booking information for as long as your account is active and for as long as needed to comply with legal obligations (for example, accounting requirements). You can request deletion of your account at any time by contacting us at the email above.

7. Your rights

Depending on where you live (including under the EU General Data Protection Regulation), you have the right to access, correct, export, or delete your personal data, to object to or restrict its processing, and to withdraw any consent you have given. To exercise these rights, email contact@fivesstudio.com. You may also lodge a complaint with your local data protection authority.

8. Children

The Service is not directed to children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Security

We use industry-standard measures (including encrypted transport and hashed passwords) to protect your information. No system is 100% secure, so we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the “Last updated” date above. Material changes will be communicated through the Service.

11. Contact

Questions about this policy or your data? Email contact@fivesstudio.com.