Privacy Policy

Who we are

Art of You, based in Germany ("we", "us"), provides the sesh. app for coaches and is the controller for your account data. This policy explains what we store, why, and the choices you have. Questions: maria@art-of-you.com.

What we store

Your account: name, email address, sign-in method (email and password, Google or Apple) and your subscription status.

Your practice data: clients (name, contact details, goals, notes), sessions and session notes, to-dos, weekly intentions, invoices and payment records you enter.

Booking page settings and bookings made by your clients, including the name, email, phone number and message they provide.

Client portal data: check-ins your clients submit after a session, and one-time sign-in codes (deleted after use or expiry).

Technical data needed to run the service: device push tokens (if you turn notifications on), timestamps and error logs.

What we do not store

Voice recordings. Audio you dictate is transcribed instantly and the audio is discarded.

Card or PayPal details. Payments are handled by Stripe or PayPal; we only receive a confirmation and the amount.

Google or Apple passwords. Sign-in happens on their side; we receive a verified identity token.

Why we use it

To run the app for you: show your clients and sessions, send booking confirmations, reminders and invoices on your behalf, and sync your calendar when you connect one.

To offer optional assistant features: when you tap a button such as Progress recap or Follow-up email, the relevant client's notes are sent to an AI model to generate a draft. To-dos and client check-ins are categorised automatically. These models do not use your data for training.

To bill subscriptions through the App Store or Google Play (via RevenueCat).

Service providers

We rely on carefully selected providers that process data under contract and only on our instructions: hosting and database (Emergent), email delivery (Resend), payments (Stripe, PayPal), subscriptions (RevenueCat), AI models (OpenAI and Anthropic, through Emergent), calendar imports (Calendly) and, if you connect it, Google Calendar.

Some providers are located outside the EU/EEA. Transfers are protected by standard contractual clauses or equivalent safeguards.

Your clients' data

You are the controller of the client data you enter; we process it for you. Clients can see what you choose to share with them in the client portal, move or cancel their own bookings and submit check-ins. Client emails are sent only for bookings, reminders, invoices and portal sign-in codes, never for marketing.

Retention and deletion

Data is kept for as long as your account exists. You can delete clients, sessions and other records in the app at any time.

Deleting your account (Settings → Delete account) permanently removes your account and all practice data within 30 days, except records we must keep for tax or legal reasons (for example issued invoices).

Exports: you can download your clients, sessions and payments as CSV files at any time.

Your rights

Under the GDPR you can access, correct, export, restrict or delete your data, and object to certain processing. Most of this you can do directly in the app; for anything else, email us and we will respond within 30 days. You may also complain to a data protection authority, for example the one in your German federal state.

Security

Data is encrypted in transit. Access tokens for connected services are stored encrypted. Access is limited to what is needed to run the service.

Children

sesh. is for professionals and not directed at children under 16.

Changes

We may update this policy. The current version is always available in the app. Last updated: 3 October 2026.