Last updated 24 April 2026
Privacy policy
Clay App is a product of Alt F Awesome (altfawesome.com) and respects your privacy. This policy explains which personal data we collect, why we collect it and how you can stay in control of your data, in line with the General Data Protection Regulation (GDPR).
1. Data controller
For the marketing site and admin portal, Alt F Awesome, trading as Clay App: acts as the data controller. Alt F Awesome is established at Wijttenbachstraat 50, 1093 JD Amsterdam, the Netherlands (KvK 96640413, VAT NL005222275B75). For data inside a specific gym tenant, Clay acts as a processor and the gym owner is the controller.
2. Data we collect
Account: name, email, username, hashed password and role. Bookings: classes, memberships, credits and related timestamps. Payments: only reference IDs; full card details are processed by Mollie. Technical: IP address, browser user agent and strictly necessary cookies for login and locale preference.
3. Why we process data
To perform the contract (account, bookings, memberships), to process payments via Mollie Connect, to provide support, for security and fraud prevention, and to improve the platform via aggregated, anonymised usage analytics.
4. Processors and third parties
We use: Mollie (payments, KYC), Render (CMS hosting and database), Vercel (frontend hosting), Resend (transactional email) and optionally WhatsApp Business for reminders. Data processing agreements are in place with all of these and any transfer outside of the EU is covered by Standard Contractual Clauses.
5. Retention
Account data is retained while the account is active and up to thirty days after cancellation. Booking and invoice data is retained in line with Dutch tax retention obligations (seven years). Log data is retained for at most ninety days.
6. Your rights
You have the right to access, rectification, deletion, restriction, portability and objection. Requests can be sent to daniel@altfawesome.com and we respond within one month. If you disagree with our handling, you may file a complaint with the Dutch Data Protection Authority.
7. Cookies
We only use functionally necessary cookies for session management (NextAuth) and language preference (next-intl). We do not deploy tracking or advertising cookies without explicit consent.