Privacy Policy
Last updated: 9 October 2026
This policy explains what personal information Scrunchio collects, why, who we share it with, and what you can ask us to do about it. It covers:
- people who visit scrunchio.com,
- studio owners and staff who use Scrunchio to run their studio, and
- how we handle students' information on behalf of the studios they book with.
"Scrunchio", "we" and "us" mean Scrunchio by MarginWalkers Inc., Clearview Township, Ontario, Canada.
Two different roles
When you're our customer (a studio owner, or a member of a studio's staff), we decide how your information is used. We're responsible for it under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, Quebec's Law 25.
When you're a studio's student, the studio decides how your information is used. You booked with them, on their website, under their name. We store and process your information only to run the studio's booking, payments, waivers and messages, on the studio's instructions. Questions about your information as a student go to the studio first. Their own privacy policy applies, and we'll help them answer you.
What we collect, and why
If you visit scrunchio.com
- Pages you view and how you arrived. We use Google Analytics (through Google Tag Manager) to count visits and see which pages work. It sets a cookie with a random ID. It runs when you visit; we don't ask first. You can block it in your browser's settings or with Google's opt-out add-on.
- What you type into our forms. Your name, email, studio name, your studio's website address, and your answers if you use the switching questionnaire or the site preview. We use these to reply to you, show you the preview you asked for, and follow up about Scrunchio.
- Your studio's public website, when you ask us to preview or import it. We fetch the public pages and read their colours, fonts, timetable, prices and teacher names. To read prose we send the visible text of those public pages to an AI model provider (Anthropic). We don't send them anything that isn't already public on that website.
If you run a studio on Scrunchio
- Account details: name, email address, phone (optional) and role, for each owner, manager and instructor.
- Billing details: we bill you through Stripe. Stripe holds your card. We keep only the Stripe customer and subscription IDs and your plan's status and dates.
- What you put into Scrunchio: classes, prices, pages, photos, waivers, messages and your students' records (see the next section).
- Sign-in and security records: when and from where you signed in, and a record of actions taken when our support team works inside your studio with your permission.
We use this to provide the service, bill you, keep it secure, support you, and tell you about changes to the service. We don't sell it, and we don't use it to advertise anyone else's products.
Students' information, on a studio's behalf
A studio may hold, through Scrunchio:
- name, email, phone and birthday (if given),
- bookings, attendance, passes, memberships and credit history,
- payments (the card itself stays with the studio's own Stripe account; we never see card numbers),
- signed waivers, with the signature and the time it was signed,
- message preferences and consent records for email and text,
- safety notes: health information a student chooses to share with the studio, such as an injury.
Safety notes are treated as sensitive. They're stored apart from other student records, only the studio's owner, managers and the teacher of a class the student is booked into can read them, and only around that class. Every read is logged. Scrunchio staff can't read them, including while helping a studio through support access.
We use students' information only to provide the service to the studio. We don't sell it, and we don't market to students. Scrunchio's name doesn't appear in a studio's booking flow, and we don't contact students except to deliver the messages the studio sends through us.
Who we share information with
We use a small number of service providers to run Scrunchio. Each only gets what it needs for its job and is bound by contract to protect it. The current list, what each one does and where it stores data is in our Subprocessors list.
We also share information:
- with a studio's own Stripe account, when a student pays that studio. That's a relationship between the studio and Stripe; Scrunchio takes no part of the payment,
- when the law requires it, for example a valid court order,
- if Scrunchio or its business is sold or merged, with the buyer, under the same protections as this policy. We'd tell you first.
Where your information is stored
Our main database is in Canada (Montreal). A studio chooses where its files (photos, signed waiver PDFs) are kept when it's set up: Canada, the United States, the European Union, or no restriction. Some of our providers process data outside Canada, for example to send email or serve the website from the server closest to a visitor. When that happens your information may be accessible to authorities in that country under its laws. The Subprocessors list says which providers, and where.
How long we keep it
- Studio data stays as long as the studio has an account. After a studio cancels, its data is kept for 90 days so it can come back or export everything, then deleted, except what we must keep for tax and accounting.
- Studio export is free and unlimited, including after cancelling, for as long as we hold the data.
- Billing records are kept for 6 years, as Canadian tax law requires.
- The notification history a studio's staff see is deleted after 90 days.
- Questionnaire results you're sent a link to are kept for 180 days.
- Marketing site analytics are kept for 14 months.
Cookies
| Cookie | Where | What it's for | How long |
|---|---|---|---|
sc_session | app and studio sites | Keeps you signed in | Until you sign out or it expires |
sc_support | app | Marks a support session a studio allowed | Length of that session |
st_preview | studio sites | Lets staff see draft pages before publishing | Short-lived |
sc_src | studio sites | Remembers which kind of link brought a visitor (for example "instagram"), so an enquiry can say so. Stores only one word from a fixed list | Browser session |
sc_theme | scrunchio.com | Remembers the look you picked in the preview | 1 year |
sc_cid | scrunchio.com | A random ID so Google Analytics can count visits | 2 years |
Google Analytics (_ga, _ga_*) | scrunchio.com | Counting visits | Up to 2 years |
Sign-in pages use Cloudflare Turnstile to block bots. It may read browser signals but doesn't track you across sites. Studios' own sites don't load Google Analytics or other trackers from us.
Email and text messages
We follow Canada's Anti-Spam Legislation (CASL). Every marketing email has a one-click unsubscribe link. A studio's messages to its students go out under the studio's name, with the student's consent recorded and an unsubscribe link in each one. Booking reminders and receipts are transactional and can be turned off separately.
Your rights
You can ask us to:
- tell you what personal information we hold about you and how it's used,
- correct it if it's wrong,
- delete it, where we're not required to keep it,
- give you a copy in a portable format,
- withdraw a consent you gave, for example to marketing email.
Email privacy@scrunchio.com. We'll answer within 30 days. If you're a student, we'll pass your request to your studio and help them answer it.
If you're not happy with our answer you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or in Quebec to the Commission d'acces a l'information.
Privacy contact
Our Privacy Officer is responsible for protecting personal information at Scrunchio. You can reach them at privacy@scrunchio.com.
Security
Every studio's data is separated from every other studio's in the database itself, not only in the app. Connections are encrypted. Staff access is limited to what each person needs, and support access to a studio's account is time-limited, recorded, and can't reach safety notes. No system is perfectly secure. If a breach puts you at real risk of significant harm, we'll tell you and the Privacy Commissioner as the law requires.
Children
Scrunchio is for studios and their adult students. A studio that accepts students under 18 is responsible for getting a parent's or guardian's consent.
Changes
If we change this policy in a way that matters, we'll email studio owners at least 30 days before it takes effect and update the date at the top.