Privacy policy

My Lessons (“we”, “us”) is an online platform for independent sports instructors to handle bookings, scheduling, payments, class packs and related admin. This privacy policy explains which personal data we process and why.

Contact: hello@mylessons.io

Instructors / account users

• Name, email address, password (hashed) or Google sign-in
• Business details (business name, slug, sports, locations, Chamber of Commerce / VAT where provided)
• Subscription and invoice data via Stripe
• Connections such as Stripe Connect and optional Google Calendar
• Technical data (browser, IP, cookies) for security and to keep the product working

Instructors’ clients (via the public booking page)

• Name, email, phone number
• Booking, session and payment data
• Intake / waiver answers the instructor asks for
• Reviews, if left

For instructor data (accounts, subscriptions), My Lessons is generally the controller.

For end-client data of people booking with an instructor, that instructor is in principle the controller. My Lessons processes that data as a processor on the instructor’s behalf, so the platform can work (bookings, payments, emails, schedule).

Instructors stay responsible for their own privacy information towards clients (for example on their booking page or in their lesson terms).

• To run accounts and subscriptions
• To make bookings, waitlists, class packs and payments possible
• To send transactional emails (confirmation, reminder, review, waitlist)
• To run integrations (Stripe, Google Calendar)
• To prevent fraud, abuse and outages
• To meet legal obligations

We rely on:

• Contract — to deliver the subscription and the service
• Legitimate interest — security, product improvement, abuse prevention
• Consent — where required (for example optional cookies or marketing, if we add those later)
• Legal obligation — where it applies

We don’t sell personal data. We only share what’s needed with providers that help run the platform, for example:

• Hosting / infrastructure (incl. Vercel)
• Database (MongoDB)
• Payments (Stripe, including Stripe Connect to instructors)
• Email (Resend)
• Google (sign-in and/or Google Calendar, only if you connect it)

Client payments to instructors go through Stripe; My Lessons does not hold that lesson money as its own balance.

We use cookies that are needed to sign in and keep the site working. Analytics or marketing cookies are only used if that’s clear and, where required, with consent.

We keep data as long as needed for the account, booking history, support and legal duties. If you delete your account, we erase or anonymise data where that’s reasonably possible — except data we have to keep longer (for example invoicing).

Under the GDPR you can (where it applies) ask for access, correction, deletion, restriction, data portability and object. Email us at hello@mylessons.io. End clients of an instructor can also send their request to that instructor.

We take appropriate technical and organisational measures. No system is 100% safe; we can’t guarantee absolute security.

Some providers may process data outside the EEA. Where needed we use appropriate safeguards (such as standard contractual clauses).

The platform is for instructors and their clients. We don’t target children under 16. If someone books for a minor, the instructor / parent / guardian is responsible for the right consent and information.

We may update this policy. The date at the top shows the latest version. For material changes we’ll inform account users where that’s reasonable (for example by email).

Privacy questions? Email hello@mylessons.io.