SESSION BLACK CARD

Your data, simply.

Updated November 4, 2026. Bendy Leg LLC, doing business as SESSION Pilates, operates this service. Questions or requests: ted@sessionpilates.com.

What we collect and why

Your account and eligibility: name, email, member number, selected home market, membership plan/status and eligibility dates. We use these to sign you in, display your card, and make benefits available to qualifying members. Reserve supplies membership eligibility information. Your chosen market is a preference; the app does not request GPS location.
Sign-in and security: protected code hashes, sessions, request-rate records, and operational audit records help prevent unauthorized access. Our hosting and delivery providers also process network information, such as IP addresses, to operate and protect the service.
Benefit usage: offer views, directions taps, pass downloads and uses of older verification links are recorded with an account identifier to understand benefit usage and maintain the service.
Optional notifications and Wallet: Apple device tokens, app version and delivery/registration records allow notices and Wallet pass updates. Your Wallet pass contains your name, member number and eligibility dates. You control notifications in iOS Settings and can remove a pass in Apple Wallet.
Support: if you contact us, we receive the information you choose to send so we can respond. Please do not email payment-card details or unnecessary sensitive information.

What we do not do

The app does not collect payment-card details, HealthKit data or precise location. It does not sell personal information, use advertising SDKs, or track you across other companies’ apps and websites for advertising. Buying a studio membership and managing classes or billing happen separately.

Service providers and sharing

We use Amazon Web Services (AWS), Vercel and Neon to host the service and store account data and partner artwork during our hosting transition. Vercel also supports compatibility for older app versions. We use Resend for account emails, Apple for notifications and Wallet, and Reserve for membership eligibility. These providers process information needed for those services. Processing may occur in the United States and other locations where our providers operate.

Showing your card shares its visible information with the partner you choose. Older passes may have a verification link showing first name, last initial and eligibility, but not your email or class history. Partner websites and map apps have their own privacy practices. We may disclose information when legally required or necessary to protect the service and its users.

Retention and deletion

Your profile is retained while your Black Card account exists. Daily cleanup removes expired sign-in challenges, sessions and request-rate records after a one-day buffer, and removes identifiable benefit usage, delivery history and operational audit/sync history older than 90 days. A cleanup run can add up to one day to these periods.

Choose Account → Delete Black Card account to remove your active profile, sessions, identifiable usage, notification registrations and associated delivery records. Audit references are de-identified. We retain a protected email hash and, where applicable, the source membership identifier to prevent automatic re-enrollment. This suppression record remains while needed to respect your deletion request; contact us to discuss it or to rejoin.

Deletion does not cancel your studio membership, classes or payments, and it does not remove a pass already saved on your phone. Remove that pass in Apple Wallet. Records held by the studio’s separate membership service follow its own retention requirements.

Active-database deletion is immediate after a successful deletion request. Restricted recovery copies are retained separately from the active database. Automated AWS database recovery history is retained for up to 14 days. Migration backups and copies on our previous hosting providers remain restricted until migration and rollback checks are complete. Recovery copies are not used for normal operations; any restoration must reapply account deletions before service resumes. Provider security and email-delivery logs and support correspondence may remain separately for operational, legal or request-resolution needs. Contact us for help with a deletion request covering these records.

Your choices and requests

You can change your selected market, disable notifications, sign out, or delete the app account. You may contact ted@sessionpilates.com to request access, correction or deletion of your information, or ask about applicable privacy rights. We may need to verify your identity. The service is intended for qualifying studio members and is not directed to children under 13.

Security and policy updates

We restrict administrative access, use encrypted connections, and protect sign-in credentials and device tokens. No system can guarantee absolute security. We will update this page when our practices change and provide additional notice when required.