Privacy Policy
The Muva's Class · How we handle your data
Version 2.0 · August 2026
This Privacy Policy applies to platform members and purchasers as well as to prospects who interact with us before any purchase — for example via Instagram or WhatsApp messages, our email list or a waitlist. It explains what personal data we collect, why we collect it, who receives it and what rights you have. The data controller is Abigail Kwakye Kwame (sole trader / Einzelunternehmen, trading as "Muvasclass"), Zurich, Switzerland. We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
In short: we collect what we need to run your membership and deliver the program, we never sell your data, we tell you exactly which tools we use, and you can exercise your rights or delete your account at any time.
1. What we collect
- Account details: name, email address, password (stored hashed) and, if you choose, phone number and profile photo. If you sign in with Google, we receive your name, email and verification status — never your Google password.
- Your work inside the program: check-ins, workbook and questionnaire answers, milestone submissions and proofs (which may include screenshots, shop links and revenue figures you choose to upload), wins, posts, questions and your progress through the platform.
- Purchase and billing data: plan, tier, purchase history, installment status, payment confirmations and a permanent log of payment events (charges, failures, retries, refunds and card updates). Payments are processed by our payment provider Mollie: card details entered at checkout are transmitted directly to Mollie and we never see or store your full card number. Purchases made before August 2026 were processed via Stan (using Stripe).
- Checkout and contract records: when you purchase, we record your acceptance of the Terms & Conditions together with a timestamp, your IP address and the Terms version, as agreed in the Terms (Section 12). This is our shared contractual record.
- Communication: emails, messages on the platform, Instagram/Meta direct messages, WhatsApp messages, Google Chat messages and support conversations with our team, including payment reminders and recovery outreach where amounts are owed.
- Call recordings and replays: sales, onboarding, coaching and group calls may be recorded and transcribed, as set out in the Terms (Section 10). Recordings of group calls, coaching calls, Q&A sessions and audits are also published inside the platform in the Replay Room, where other paying members can watch them on demand — see Section 7a, which explains exactly who can see what.
- Technical data: a secure session cookie, security logs, device and usage data, and analytics data described in Section 5.
2. How we use it
- To deliver the program: your classroom, timeline, milestones and their review, tools, resources, replays, reminders and support.
- To process purchases, memberships, upgrades and installment plans.
- To communicate with you about your account, progress and important updates, and — with your consent — to send marketing emails (see Section 6).
- To review milestone submissions and generate plans and feedback, partly using AI (see Section 4).
- To keep the service secure, prevent abuse, enforce our Terms, document our contractual relationship and resolve disputes, including payment disputes, chargebacks and debt enforcement. This includes maintaining an internal record of persons with outstanding unpaid amounts, prior chargebacks or prior removal from our programs, used solely to decide on acceptance or refusal of purchases under Section 2.5 of our Terms. This record is kept to the minimum necessary, is not shared beyond the recipients in Section 7 and is deleted once the underlying claim is settled or time-barred.
- To improve the program and understand how the platform is used (analytics).
3. Legal bases
Where GDPR applies, we rely on: performance of contract (delivering the program, processing payments, milestone reviews, making paid-for replays available to the members who bought access to them); consent (marketing emails, optional profile data, appearing in a call recording published in the Replay Room, use of your identifiable results or testimonials in marketing, non-essential cookies and analytics); legitimate interests (service security, abuse prevention, documenting and enforcing our contractual rights, improving the program, and counting page views in a form that identifies nobody); and legal obligation (accounting and tax retention duties). Under the Swiss FADP we process your data fairly, proportionately and only for the purposes described here.
4. AI-assisted processing
Parts of the platform use artificial intelligence — including milestone reviews, plan generation and tools. For these features, relevant content you submit (for example milestone answers or plan inputs) is processed via our AI provider Anthropic acting as our processor. AI outputs are combined with human oversight as described in the Terms; decisions that materially affect your access or progression are subject to human oversight, and you may request human review of any AI-assisted decision at any time. We do not use your data to train public AI models.
5. Cookies and analytics
- Essential — always on. A session cookie (
mc_session) that keeps you signed in, and a cookie recording your cookie choices themselves (mc_cookie_consent). These are strictly necessary: without the first you cannot stay logged in, and without the second we would have to ask you again on every page. Neither is used to track you and neither can be switched off. - Counting visits — always on, and it is not a cookie. We count how many times each public page is opened, using our own server and Vercel Web Analytics. No cookie is set, no IP address is stored, and nothing is kept that could identify you or follow you to another website: what is recorded is the page, the date, the general region, the kind of device, and where the visit came from. Addresses of pages are stripped of anything personal before they are counted, so confirmation links and account identifiers are never sent. This is a tally, not a profile, which is why it is not in the categories below and cannot be switched off. If you object to it, write to us.
- Analytics — off unless you say yes. We use, or intend to use, Google Analytics to understand how the platform is used and which parts are ignored. Unlike the counting above, this one does use cookies. IP anonymization is enabled.
- Marketing — off unless you say yes. We use, or intend to use, the Meta Pixel to measure the advertising we run on Meta platforms, so we can tell whether an advert reached anyone it should have.
No cookie based analytics or marketing tool is loaded before you consent. That means Google Analytics and the Meta Pixel; the cookieless counting described above is separate and is not one of them. When you first arrive you are asked, with everything except the essential cookies switched off, and neither of those two is placed on the page unless and until you agree. Declining is one button, the same size as accepting, and closing the banner is not agreement.
Changing your mind. Select "Cookie settings" in the site footer, or the Cookies section of your Settings page if you are a member, at any time. Turning a category off stops the scripts loading and deletes the cookies that category had already set on your device. Withdrawal takes effect immediately for anything not yet loaded and on your next page view for anything already running in the current tab.
Where Google Analytics or the Meta Pixel are not yet switched on, this section still describes the choice you are being offered, and the choice is honoured in advance: consent is recorded and respected before either tool is enabled, not after.
6. Email: what we send and who sends it
Transactional email — receipts and purchase confirmations, email verification, password resets, payment failure notices and reminders, program and progress notifications — is delivered by Resend, acting as our processor. These messages are part of running your account and your contract with us, so they are sent independently of marketing consent: you cannot unsubscribe from a password reset.
Marketing email runs on Klaviyo with double opt-in: you receive marketing emails only after confirming your subscription. Every marketing email contains an unsubscribe link.
We also receive email you send us, and replies to our messages, through our own inbox (Google) so that support conversations stay in one place.
7. Who we share it with
We do not sell your personal data. We share it only with providers who help us run Muvasclass, only as far as needed:
| Recipient | Purpose |
|---|---|
| Mollie (Netherlands, EU) | Checkout, payment processing, subscription billing and failed-payment retries |
| Stan (with Stripe) | Historical payment records for purchases before August 2026 and related disputes |
| Neon (Postgres database, EU / Frankfurt region) | The database the platform runs on: your account, your work, your progress and your billing records |
| Vercel (EU region) | Hosting and running the platform, and counting page views in aggregate (Section 5) |
| Anthropic | AI-assisted reviews, plans and tools (Section 4) |
| Resend | Sending transactional email: receipts, verification, password resets, payment notices and platform notifications (Section 6) |
| Klaviyo | Marketing email delivery (Section 6) |
| Optional sign-in, Google Analytics, Google Chat and our support inbox | |
| Meta Platforms | Instagram/Facebook messaging and Meta Pixel |
| ManyChat | Instagram DM automation |
| WhatsApp (Meta) | Client messaging, payment reminders and recovery outreach |
| Loom, Google Meet, Otter.ai | Video lessons, calls, recordings and transcription |
| Other paying members (Tier 2 and Tier 3) | Group and coaching call recordings published in the Replay Room (Section 7a) |
| Tyrone & Partners Ltd (UK) | Operations, client communication and program management on our behalf |
| Debt collection partners, Betreibungsamt, courts and legal advisors | Only where necessary to enforce unpaid claims or resolve disputes (Terms Section 9) |
These providers act as our processors or independent controllers within their own services and may be located outside Switzerland or the EU (for example in the USA or UK). Where data leaves Switzerland/the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses, the Swiss-approved equivalents and, where available, certification under the EU-US and Swiss-US Data Privacy Framework.
7a. The Replay Room — your calls are seen by other members
This is the one place where your personal data is shared with people rather than with companies, so it is set out separately and in full.
What is published. Recordings of group calls, coaching calls, Q&A sessions and audits are published by us in the Replay Room inside the platform. Not every call is published, and we may edit, trim, withhold or later remove any recording.
Who can watch them. Paying members on Tier 2 and Tier 3, for as long as they hold access. They are not public, not indexed by search engines and not available to Tier 1 members or to anyone without a paid account. They are program materials and are confidential: members may not record, screenshot, download or republish them, or repeat outside the platform what another member said in one (Terms Sections 13 and 15).
What those members see of you. What happened on the call: your voice; your name or display name as it appeared; your image if your camera was on; your screen if you shared it; and anything you chose to say, show or ask, including business figures, revenue numbers or personal circumstances you volunteered. Treat a live call as a room with other members in it.
The basis for it. Your consent, given by joining the call after being told that calls are recorded and shared this way, together with our contract with the members who have paid for access to those replays. Consent is asked of you before you speak, not after.
How to avoid appearing at all. Attending live is voluntary. You can watch the replay instead, with no effect on your membership, standing or progression, and you can send questions in writing beforehand to be answered without your name attached.
Changing your mind. You can ask us in writing to remove your contribution from a published replay and we will do so where technically feasible — by editing the segment out or withdrawing the recording. Removal works forwards: it cannot reach copies members have already watched, and it does not extend to recordings we must keep as evidence for a dispute (Section 9 and Terms Section 12). Withdrawing consent does not make the earlier recording unlawful.
8. Your content in marketing
Your submissions and results belong to you. Inside the platform we may show anonymized momentum (for example "six members submitted this week"), and recordings of calls you join may be shown to other members in the Replay Room as described in Section 7a. Outside the platform, we use your identifiable results, wins, testimonials or any footage of you in marketing only with your prior consent, which you can refuse or withdraw at any time without any effect on your membership. Consenting to appear in a replay for other members is not consent to appear in marketing; those are two separate permissions and we ask for them separately.
9. How long we keep it
- Account and program data: for as long as your account is active, deleted or anonymized within a reasonable period after account deletion.
- Contract, billing and enforcement records: up to ten (10) years, in line with Swiss accounting and record-keeping obligations (Art. 958f OR) and for the establishment, exercise or defense of legal claims.
- Call recordings, replays and transcripts: published replays stay in the Replay Room for as long as they are useful to current members, and are removed when the material is superseded, when we withdraw them or on a removal request under Section 7a. Recordings kept for quality, training or dispute resolution are held for the duration of the program relationship and as long as needed for those purposes, then deleted.
- Marketing data: until you unsubscribe or withdraw consent.
10. Your rights
You can ask us at any time to: access the personal data we hold about you; correct inaccurate data; delete your account and personal data; object to or restrict certain processing; receive a copy of your data in a portable format; and withdraw any consent, with effect for the future. You can manage your details and delete your account in Settings, or contact us at the address below. You also have the right to complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, your local supervisory authority.
Deletion requests do not affect data we must keep under Section 9 (for example billing records or records needed for ongoing disputes); such data is restricted and deleted once the retention ground ends.
11. Security
We protect your data with encryption in transit, hashed passwords, access controls, EU-region infrastructure and reputable providers. Access within our team and our operations partner is limited to what each role requires. No system is perfectly secure, but we take appropriate technical and organizational measures to keep your data safe.
12. Children
Muvasclass is a business education program for adults. It is offered exclusively to persons aged 18 or over (Terms Section 2.4) and we do not knowingly collect data from anyone under 18.
13. Changes
We may update this policy as the program evolves. For material changes we will update the version and date above and inform you appropriately (for example by email or platform notice).
14. Contact
Data Controller: Abigail Kwakye Kwame · Sole trader (Einzelunternehmen), trading as Muvasclass · Zurich, Switzerland
Email: muvvasclass@gmail.com
The Muva's Class · Zurich, Switzerland · Version 2.0, August 2026. Superseded versions are kept, so a member's record always points at the text she agreed to.
