Privacy Policy
Last updated: February 24, 2026
The short version
We collect what we need to run Tala. We don't sell your data. We don't share it with advertisers. We don't do anything creepy with it.
1. Who we are
Tala is built by Sihaya LLC. When we say “we,” “us,” or “Tala,” we mean Sihaya LLC. The person behind this is Justin Schafer. You can reach him at justin@schafer.co.
2. What data we collect
Studio owner data
- Name, email, phone number
- Studio name and location
- Stripe account connection
- Login credentials (passwords are hashed, never stored in plain text)
Member data
- Name, email, phone number
- Membership and class pack details
- Attendance history
- Payment history (card details are stored by Stripe, not by us)
- Waivers and emergency contacts
Usage data
- Pages visited, features used, general usage patterns
- Browser type, device type, IP address
- We use Vercel Analytics and Google Analytics for this
3. How we store your data
Your data is stored in Turso (a distributed SQLite database). Data is encrypted in transit and at rest. We use HTTPS everywhere. Backups are encrypted.
We host on Vercel. Payments are processed through Stripe. Both are SOC 2 compliant and widely trusted in the industry.
4. What we do with your data
- Run the software. Your data powers scheduling, billing, member management, and analytics within your studio.
- Send you emails. Transactional emails (receipts, booking confirmations, password resets) and occasional product updates. You can opt out of product updates.
- Improve Tala. Aggregated, anonymized usage data helps us understand which features matter and what to build next.
5. What we don't do with your data
- We don't sell it. To anyone. Ever.
- We don't share it with advertisers.
- We don't use it to train AI models.
- We don't give it to third parties except what's needed to run the service (Stripe for payments, Vercel for hosting, email providers for transactional messages).
6. Data retention and deletion
- Active accounts: We keep your data as long as your account is active.
- After cancellation: Your data is available for 90 days so you can export it. After that, we delete it.
- Deletion requests: Email us and we'll delete your data within 30 days. Some data may be retained as required by law (like financial records).
- Data export: You can export all your data at any time from your account settings.
7. California privacy rights (CCPA)
If you're a California resident, you have the right to:
- Know what personal information we collect about you
- Request deletion of your personal information
- Opt out of the sale of your personal information (we don't sell it, so this is already covered)
- Not be discriminated against for exercising these rights
To exercise any of these rights, email justin@schafer.co. We'll respond within 45 days.
8. Cookies
We use essential cookies to keep you logged in and remember your preferences. We use analytics cookies (Vercel Analytics, Google Analytics) to understand how people use Tala. No advertising cookies. No tracking across other websites.
9. SMS & text messaging
If you opt in to SMS notifications, Tala may send text messages to your phone number for operational purposes related to your studio, including:
- Scheduling updates and class reminders
- Member alerts and notifications
- Payment and billing notifications
- Sub coverage requests and updates
- System and account notifications
Message frequency
Message frequency varies based on studio activity. You can typically expect 5–20 messages per month.
Opting out
You can opt out of SMS messages at any time by replying STOP to any message. You will receive a confirmation and no further messages will be sent. Reply START to re-subscribe.
Help
Reply HELP to any message for support information, or email justin@schafer.co or call (202) 644-6875.
Data & privacy
- Phone numbers are stored securely and never shared with third parties for marketing purposes.
- Standard message and data rates may apply.
- Consent to receive SMS is not required to use Tala, but is required for SMS-based features.
- Carriers are not liable for delayed or undelivered messages.
10. Changes to this policy
If we make meaningful changes, we'll email you before they take effect. Minor clarifications may be made without notice.
Contact
Questions about your data? Email justin@schafer.co. I'm a real person and I take this seriously.