Privacy Policy (Datenschutzerklärung / Politique de confidentialité)
At a glance
A summary of the sections below. The sections themselves are what applies.
| What we do | What data | Legal basis | How long we keep it |
|---|---|---|---|
| Deliver and secure the website | IP address, browser and device, page and time of access | Legitimate interest (GDPR Art. 6(1)(f); FADP Art. 31) | Up to 30 days |
| Answer your inquiry or sign-up | What you enter: name, email, studio, message | Steps you ask for before a contract, and/or consent (GDPR Art. 6(1)(b), (a)) | Until your request is handled, or until you ask us to delete it |
| Provide Linyup to Customers | Account, profile, billing and usage data | Performance of the contract (GDPR Art. 6(1)(b)) | For the contract, then as long as legal retention requires (generally 10 years for accounting records) |
| Payments | Transaction details from Stripe (status, amount, reference), never card details | Performance of the contract (GDPR Art. 6(1)(b)) | As billing data above |
| Product news by email | Name and email address | Consent, withdrawable at any time (GDPR Art. 6(1)(a)) | See section 5 |
| Website analytics | Usage of the website, only if you accept | Consent, withdrawable at any time (GDPR Art. 6(1)(a); FADP) | See section 5 |
| App analytics, for Customers | Usage of the app; you can opt out in the app | Legitimate interest (GDPR Art. 6(1)(f); FADP Art. 31) | See section 5 |
| Live demo analytics (demo.linyup.com) | How the demo is used, including session recordings with everything you type hidden | Legitimate interest (GDPR Art. 6(1)(f); FADP Art. 31); you can opt out in the demo | Recordings 30 days; see section 5 |
| A studio’s own contacts | Whatever the studio records about its members | The studio is the controller and decides; we process on its behalf | As the studio decides; see section 9 and the Data Processing Agreement |
1. Who is responsible
The controller responsible for processing personal data described here is:
Franco D’Agostino, trading as “D’Agostino Production”
Kleinhüningerstrasse 205, 4057 Basel, Switzerland
Email: hello@linyup.com
For Customers and visitors in the EU/EEA, this controller processes personal data in connection with offering its service in those markets.
2. What data we collect and why
a) When you visit the website
When you load linyup.com, our hosting provider automatically processes technical data needed to deliver the site securely: IP address, browser and device type, referring page, and date and time of access. This is necessary to operate and secure the site.
Legal basis: legitimate interest (GDPR Art. 6(1)(f)) / FADP Art. 31.
b) When you contact us or join a waitlist
If you fill in a contact or sign-up form, we process the data you provide, such as your name, email address, studio name, and message.
Purpose: to respond to you and, where you ask for it, to keep you informed about Linyup.
Legal basis: steps taken at your request before entering a contract (GDPR Art. 6(1)(b)) and/or your consent (GDPR Art. 6(1)(a)).
c) When you create an account or become a Customer
To provide the service we process account and profile data (name, email, language, login credentials), billing data, and usage data.
Legal basis: performance of the contract (GDPR Art. 6(1)(b)).
d) Payments
Payments are processed by Stripe. Card and payment details are entered directly with Stripe and are not stored by us; we receive limited transaction metadata (such as status, amount, and a reference). See Section 4.
Legal basis: performance of the contract (GDPR Art. 6(1)(b)).
e) Marketing emails
If you opt in, we may send you product news through our email provider. You can unsubscribe at any time using the link in each email.
Legal basis: consent (GDPR Art. 6(1)(a)); withdrawable at any time.
3. Cookies and analytics
We use PostHog for product analytics — to understand which pages and features visitors engage with (for example, expanding the pricing comparison or opening a feature detail) so we can improve the site. We do not use advertising cookies, advertising pixels, or cross-site tracking, and session recording is switched off.
Analytics only runs if you agree to it. On your first visit we ask for your consent through a banner, and nothing analytics-related loads until you choose: if you accept, we load PostHog and set analytics cookies on your device; if you decline — or simply don’t choose — PostHog is never loaded and no analytics cookies are set. You can change your decision at any time via the “Cookie settings” link in the site footer. Your analytics data is hosted in PostHog’s EU region, and we never use it to identify you personally or track you across other websites.
Legal basis: your consent (GDPR Art. 6(1)(a) / FADP), which you may withdraw at any time with effect for the future.
Inside the Linyup app (for Customers). When you are signed in and using the product, we also use PostHog to understand how the app is used so we can improve it. There, analytics is on by default under our legitimate interest in operating and improving the service (GDPR Art. 6(1)(f) / FADP Art. 31); we note which studio a page belongs to, so we can see how each studio uses the product, but we do not link this to your name, email address or account; session recording is switched off (the live demo below is the one place it is not), and you can opt out at any time from the user menu in the app. The consent banner above governs the public website only.
In the live demo (demo.linyup.com). The demo is a separate copy of Linyup where you can try the product before becoming a Customer. Its studios are made up, except where we have prepared a demo for a business we are talking to, built from that business’s public information. There we use PostHog to learn how people find their way around the product, so we can improve it and our demos. Unlike the app, the demo records sessions: a recording captures what appears on the screen and your mouse movements, clicks and scrolls, so we can replay how a page was used. Anything you type into a form field is hidden in the recording and never reaches us. We note which demo studio you are signed in to, but we do not link your use of the demo to your name, email address or any account of your own. The exception is a demo we prepared for your business: activity in it can be attributed to your business, and we use it to prepare our conversations with you. Demo analytics is kept in its own PostHog project, separate from the website’s and the app’s, in PostHog’s EU region. It is on by default under our legitimate interest in understanding how prospective customers try the product (GDPR Art. 6(1)(f) / FADP Art. 31), and you can opt out at any time from the user menu of any demo studio.
For two strictly functional purposes we use your browser’s local storage: to remember your light or dark theme preference, and to remember your analytics-consent choice. These are essential to honor your own settings, are kept only on your device, hold no personal data, and are not shared — so no separate consent is needed for them.
To display the site, your browser loads some resources from third-party content-delivery networks — web fonts from Google Fonts (Google) and interface icons from unpkg. Fetching those files makes your IP address and browser information visible to those providers; we do not use this to track you. When you submit an email form, the address you enter is sent to Google Firestore to record your request (see Sections 2 and 4).
4. Service providers and recipients
We use carefully selected providers who process data on our behalf under contract. We do not sell personal data.
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud / Firebase (Google) | Hosting, database, file storage, and serverless functions | EU / Switzerland (europe-west6, Zurich) |
| Brevo (Sendinblue SAS) | Transactional and marketing email, and SMS | France (EU) |
| PostHog (PostHog, Inc.) | Product analytics (website, app and live demo) | EU region (Frankfurt); provider based in the United States |
| Stripe (Stripe Payments Europe, Ltd.) | Payment processing | Ireland (EU), with group processing in the United States |
Our application infrastructure runs in Google’s europe-west6 (Zurich, Switzerland) region and our email provider is in France (EU), so most processing stays within Switzerland and the EU/EEA. Some providers may process data outside Switzerland and the EU/EEA (for example in the United States). Where this happens, transfers are protected by recognized safeguards such as the EU and Swiss Standard Contractual Clauses and, where applicable, an adequacy mechanism such as the EU-U.S. / Swiss-U.S. Data Privacy Framework.
5. How long we keep data
We keep personal data only as long as needed for the purposes above or as required by law.
- Website logs: up to 30 days (Google Cloud’s default log retention).
- Contact and waitlist data: until your request is handled, or until you ask us to delete it.
- Live demo analytics: session recordings are deleted after 30 days; other demo usage data after at most 12 months.
- Customer account and billing data: for the duration of the contract and for as long as legal retention duties (for example Swiss accounting law, generally 10 years for accounting records) require.
- Backups: deleted or anonymized data may remain for a limited time in encrypted backup copies, kept in Switzerland for disaster recovery only. They are not used to run the service and are deleted on a fixed rotation. If a backup has to be restored, we re-apply the deletions and anonymizations we can identify before the data is used.
- Documents a Customer issues through Linyup to its own contacts — health-insurance reimbursement receipts (Tarif 595) and invoices — are accounting records of the Customer and are kept for as long as the Customer’s own retention duties require (generally 10 years); see Sections 9 and 10.
6. Your rights
Depending on the law that applies to you (Swiss FADP and/or EU GDPR), you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted, where no legal duty requires us to keep it;
- restrict or object to certain processing;
- receive your data in a portable format and, where applicable, have it transferred;
- withdraw any consent at any time, without affecting prior processing.
To exercise any of these, email hello@linyup.com. You also have the right to lodge a complaint:
- in Switzerland, with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB), edoeb.admin.ch;
- in the EU/EEA, with your local data-protection supervisory authority.
7. Data security
We use appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access, including encryption in transit and access controls. No method of transmission over the internet is fully secure, so we cannot guarantee absolute security.
8. Children
The service is intended for businesses (coaches and studios), not for use by children directly. Where a studio stores data about minors among its contacts, the studio is responsible for the lawful basis for doing so, including any guardian consent. See Section 9.
9. Data you upload as a Customer (contacts)
When you use Linyup to manage your own people (your “contacts,” such as your members, students, or clients), you remain the controller of that data and Linyup acts as your processor. This means:
- you decide what data to collect and how to use it, and you are responsible for having a lawful basis and for informing your contacts;
- we process that data only on your documented instructions, as set out in our Data Processing Agreement;
- where you store data about minors, you are responsible for any required guardian consent.
Health-insurance receipts and invoices (Switzerland). If you enable the Tarif 595 plugin to issue reimbursement receipts (Rückforderungsbelege) for your members’ supplementary insurers, you may record, per contact, their AHV social security number, their health insurer and their insured number, because the Swiss XML 5.0 invoice standard and the insurers’ guidance require them on the receipt. This is your decision as controller: you are responsible for the lawful basis for collecting the AHV number and for telling your members why you hold it. Linyup keeps these values in a record that only your managers and owners can read — never in the member’s profile as shown in the member app, and never on any public page — and prints them only on the receipts you issue. A receipt or invoice, once issued, is a frozen document with the details printed on it; it is kept as your accounting record, can be downloaded by your managers, and is sent to the member as a PDF attachment by email through Brevo (Section 4) when you choose to send it.
10. The Linyup member app
This section is for members: the students, clients and athletes who sign into the Linyup app because a studio, coach or club invited them.
Who is responsible for your data. Your studio is. You appear in Linyup because your studio put you there — it decides what to record about you and why, which makes it the controller. Linyup runs the software on the studio’s behalf as its processor, under our Data Processing Agreement. So a question about why your studio holds something, or a request to correct it, goes to your studio first. Section 6 sets out your rights and Section 4 who else may see the data.
Signing in. The app has no password. You enter your email address, we email you a six-digit code, and entering it opens a session on your device that expires. The app does not create a new record about you — it signs you into the one your studio already holds.
What the app shows you is that record: your name and contact details, your bookings and attendance, your membership or subscription, and whatever else your studio chose to keep. It is the same data your studio sees.
What the app writes back is deliberately close to nothing. When you open it, it records that you were last seen, the app version you are running, and which over-the-air update your device has. That exists so support can tell which version a problem happened on.
What the app does not do. No advertising and no advertising identifier. No third-party analytics or tracking SDK. No tracking of you across other apps or websites. No location collection.
Notifications. The app can be reached by notifications about your bookings — but only if you have turned them on yourself. It never asks: on a new install notifications are off, and the app registers your device only when you have already enabled them in your phone’s settings. When you have, we store a device token — an identifier your phone issues so a message can reach it — with the app version it registered under. It addresses a device, not you. Turning notifications off in your phone’s settings stops them, and a token that has stopped working is deleted.
Health-insurance receipts and invoices. If your studio is recognized by a Swiss health-insurer label and uses Linyup to issue the reimbursement receipt (Rückforderungsbeleg) you hand to your supplementary insurer, your studio may record your AHV number, your insurer and your insured number, because the Swiss invoicing standard requires them on that document. Your studio decides to collect them and must tell you why; ask your studio if you have questions. These values are visible only to your studio’s managers — they are not shown in the app or your member space. The receipt you receive (by email, as a PDF, or in your member space) prints them, together with your name, address and date of birth. The same applies to invoices your studio issues you with a Swiss QR-bill.
The camera is used for exactly one thing: scanning your studio’s check-in QR code. The permission is requested the first time you scan, the image is read on your device to find the code, and no photo or video is stored or transmitted.
Deleting your account. In the app: Profile → Delete account. Without the app: linyup.com/delete-account.
Either route schedules the deletion 30 days ahead. Your account keeps working for that whole window, and signing in and canceling stops it — so an accidental tap costs you nothing. At the deadline your record is anonymized rather than deleted outright: the details that identify you are removed, while your studio’s financial and consent records of things that actually happened survive with no person attached to them. The insurer data described above (AHV number, insurer, insured number) is deleted with the identifying details. A receipt or invoice your studio has already issued to you is a frozen document and keeps what was printed on it, because your studio must keep it as an accounting record. Your studio is required by law to keep those, which is why they cannot simply vanish. If you want your studio to erase something beyond this, ask the studio directly — as controller, that is its decision to make.
Children. Where a studio records data about minors, the studio is responsible for any guardian consent (Sections 8 and 9).
11. Changes
We may update this policy as the service evolves. The current version is always available at linyup.com, with the date of the last update shown below.
Last updated: 22 October 2026