Privacy
Last updated November 2, 2026. This is a plain-language summary, not legal advice. The signed agreement with each business governs.
Whose data this is
Cuework Labs builds workflows and tools for fitness and wellness businesses. The client data we handle belongs to each business and its clients. We use it only on that business's behalf, and only for that business.
What we read
With the business's written approval, we read its own records from the systems it already uses, such as its booking software (for example Mariana Tek): clients, visits, bookings, orders, memberships and packs. Access is read-only. We never create or change a record in those systems.
Where it's stored
Each business's copy is stored encrypted, in accounts set up in that business's own name. It is never pooled with another business's data, shared or sold.
Who else handles the data
A few service providers run the tools. Each works under its own security and privacy terms, in the business's own account:
- Supabase: the database that holds the business's copy
- Vercel: hosts the dashboard
- Resend or Gmail: sends the team's digest emails
Before setup, we tell each business which providers its build uses and where its data is stored.
AI and automation
Today, Cuework's workflows run on fixed rules and templates. No AI service reads your clients' data.
- Rules decide who needs attention, for example a new client who hasn't booked a second visit.
- Templates write the draft, using only a client's first name, usual class or service, usual time of day, days since their last visit and how many visits they've made. Never payment details.
- Your team sends every message. Nothing goes to a client automatically.
If a build would ever use an AI service, we will name the provider, show you exactly which details it would see, and get your written approval first. We would only use business terms under which the provider does not train its models on your data. You can say no and keep the rules-based version.
Messages to clients
Drafts are suggestions for your team to edit and send. Marketing messages respect each client's opt-in choices.
Deletion
A business can ask for its data to be deleted at any time. When a contract ends, our access is removed and the business's copy is deleted, unless the law requires otherwise.