Who we are
Ollan is operated by Dale Burton trading as Ollan in New Zealand. Ollan provides booking and studio-access software for independent fitness businesses and their communities.
For privacy questions or requests, email privacy@ollan.app. This website, ollan.app, is our online contact address.
What we collect
For the first pilot, Ollan may handle:
- your account email address, Ollan user identifier, and authentication records;
- your first and last name, or single name, and display name;
- studio invitations and studio membership or role;
- bookings, cancellations, session attendance where the pilot needs it, and booking access;
- limited audit and security records needed to explain protected changes; and
- for studio operators, the studio name, business contact email, timezone, venues, services, and schedules.
Why we use it
We use this information to create and secure accounts; connect people to the correct studio; provide schedules, bookings, cancellations and booking access; help studio operators run sessions; provide support; investigate security or privacy issues; meet legal obligations; and maintain the service.
We do not use pilot information for advertising, sell it, or add it to marketing lists.
Where it comes from
Most information comes directly from you when you sign in or use Ollan. A studio operator gives us your email address and name to invite you. You can confirm or correct your name when joining. The invitation tells you which studio supplied that information, why it was collected, who may receive it, and how to exercise your rights.
Joining is optional, but an account email is necessary to secure your account and provide booking access.
Overseas processing
Ollan's primary application database for the pilot is intended to be hosted by Supabase in Sydney, Australia. Supabase account, support, or subprocessor services may involve other locations.
Resend processes transactional-email recipient addresses, message content, and delivery metadata in the United States. Ollan's current email sending route uses an Asia-Pacific region, but that does not change Resend's storage location. Invitation messages contain only the information needed to identify the inviting studio, deliver the one-time invitation, and provide the privacy notice.
We review providers before production use and when their terms, subprocessors, locations, or our scale changes.
How long we keep it
- Invitation records are deleted 30 days after they expire, are revoked, or are claimed.
- Direct member identifiers are removed or pseudonymised 30 days after verified membership closure.
- Bookings, booking-access records, and audit history are deleted or pseudonymised after 12 months under the approved lifecycle.
- Working copies made for a privacy request are deleted 30 days after secure delivery.
A documented dispute, incident, accounting requirement, or legal obligation may pause deletion only for the affected records. Managed and independent backups age out under Ollan's backup schedule; if a backup is restored, applicable closure records are reapplied before service resumes.
Your choices and rights
You can ask whether Ollan holds personal information about you, request access to it, or ask us to correct it. Email privacy@ollan.app to request a data export. We verify your identity and, for business requests, your authority, agree the scope, and arrange secure delivery. The app does not provide self-service downloads. Do not send member records or sign-in codes with your request.
You can ask to close one studio membership or your whole Ollan account. We verify the requester, provide any requested export first, revoke access promptly, and apply the retention periods above. Closing a studio membership does not delete unrelated studio access; closing a whole account removes the authentication identity after the approved period unless a documented hold applies.
If you do not want to join an inviting studio, you do not need to claim the invitation. You may ask us about or delete unnecessary invitation information.
Contact us
Contact Ollan's Privacy Officer at privacy@ollan.app. Please do not email passwords, one-time codes, identity documents, health information, or another person's information.
We will verify requests proportionately and respond as soon as reasonably possible. If you are not satisfied with how we handle a privacy concern, you may contact the Office of the Privacy Commissioner.