Cantalog is a membership app and management software for any business that runs on memberships — dance and music schools, yoga and fitness studios, martial-arts academies, gyms, and community clubs. It handles class scheduling, QR check-ins, Stripe billing, and member communication in one place.

Is Cantalog made in Canada?

Yes. Cantalog is built in Canada and priced in CAD. Canadian businesses get FX-free Stripe Connect deposits to a Canadian bank account.

Can I use Cantalog outside Canada?

Yes. Cantalog works for studios, schools, gyms, and clubs anywhere in the world. Subscriptions are billed in CAD via Stripe, which converts automatically from your card's native currency at the prevailing rate. Member payments via Stripe Connect deposit to bank accounts in 40+ countries.

How much does Cantalog cost?

Plans start at $35 CAD per month for the Basic tier (up to 30 members) and scale to $219 CAD for Enterprise (500 members). Pricing only changes with member count — every feature ships on every plan.

Does Cantalog support Stripe?

Yes. Cantalog uses Stripe Connect, so member payments flow directly to your business bank account. Cantalog never holds your money; we add a 2% platform fee on each transaction.

Can members check in with a QR code?

Yes. Every member has a personal QR code in the app. Any staff member — front desk, manager, or instructor — can scan it from their own phone. Cantalog debits a session, logs attendance, and welcomes the member by voice automatically.

Is there a free trial?

Yes. Once your business application is approved (usually within one business day), your free trial begins and the full dashboard unlocks.

Legal

Privacy Policy

Effective date: May 2, 2026

Ingrok Inc. (“Ingrok,” “we,” “us,” or “our”) operates the Cantalog membership management application (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard the personal information of members, business administrators, and visitors who use the Service.

Ingrok Inc. is a Canadian company headquartered in Ontario, Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. This policy follows the ten fair information principles set out in Schedule 1 of PIPEDA.

1. Accountability

Ingrok Inc. is responsible for personal information under its control. We have designated a Privacy Officer who is accountable for our compliance with this policy and applicable privacy laws.

Privacy Officer — Ingrok Inc.
Email: cantalog.app@gmail.com
Mailing address available on request.

2. Why we collect personal information

We collect personal information only for purposes that we identify to you at or before the time of collection. Those purposes are:

To create and manage your member or administrator account on the Service.
To enroll you with one or more businesses that use the Service.
To enable each business you join to track your enrollment status, tier, join date, and notes that the business itself maintains.
To authenticate you, secure the Service, and detect or prevent fraud and abuse.
To communicate with you about your account, enrollments, and important changes.
To respond to your inquiries, support requests, and access or correction requests.
To meet legal, regulatory, accounting, audit, and tax obligations.

3. Consent

We collect, use, and disclose your personal information with your knowledge and consent, except where PIPEDA or other applicable law allows or requires otherwise. By creating an account, signing in, or submitting personal information through the Service, you consent to the collection, use, and disclosure described in this policy.

Withdrawing consent. Subject to legal or contractual restrictions and reasonable notice, you may withdraw your consent at any time by contacting our Privacy Officer. Withdrawing consent may affect our ability to continue providing the Service to you.

4. What personal information we collect

We limit the collection of personal information to what is necessary for the purposes identified above. The categories we collect include:

Account information

Name, email address, password (stored as a salted hash, never in plain text).
Authentication identifiers from third-party sign-in providers (e.g., Google, Apple) where you choose to use them.

Member profile information

Phone number, postal address, date of birth, and emergency contact details.
Profile photo, if you provide one.

Enrollment information (per business)

Membership status (active, paused, expired), tier, join date, and notes maintained by the business administrator.

Business information

Business name, contact details, address, category, and administrator profile.

Technical and usage information

IP address, device and browser information, log files, and pages or features accessed.
Cookies and similar technologies, as described in Section 11.

5. How we use and share information

Multi-tenant isolation

The Service is multi-tenant. Each business that uses the Service operates inside its own isolated data scope. A business cannot see your enrollment with any other business, and businesses cannot see one another’s member lists. Your global member profile (name, contact details, etc.) is shared only with the businesses you choose to join, and only to the extent necessary for them to operate your enrollment.

Sharing within a business

Administrators of a business you join can see your member profile and the enrollment information that business maintains about you. Other members of that business cannot see your information except to the extent the business publishes a member directory and you consent to be listed.

Service providers

We share personal information with carefully selected service providers who help us operate the Service, such as cloud hosting, email delivery, analytics, payment processing, and customer support. These providers are bound by contract to protect your information and to use it only for the purposes we specify.

Legal & safety disclosures

We may disclose personal information when required by law, in response to valid legal process, to enforce our terms, or to protect the rights, safety, and property of Ingrok Inc., our users, or the public.

No sale of personal information

We do not sell your personal information. We do not share it with third-party advertisers for advertising on other websites or services.

6. Keeping information accurate

We make reasonable efforts to keep your personal information as accurate, complete, and up to date as is necessary for the purposes for which it is to be used. You can review and update your information at any time from your profile in the Service. If you cannot make a correction yourself, contact our Privacy Officer.

7. Security safeguards

We protect your personal information using safeguards appropriate to its sensitivity, including:

Encryption in transit (HTTPS/TLS) for all communication with the Service.
Encryption at rest for stored data and database backups.
Salted password hashing; we never store passwords in plain text.
Token-based authentication (JWT) scoped to the business you are signed into.
Role-based access controls so administrators see only what they are entitled to.
Logging, monitoring, and regular review of administrative access.
Operational practices including least-privilege access for employees and contractors.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Breach notification. If we experience a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA, and keep records of the breach as the law requires.

8. How long we keep your information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to provide the Service, and to meet legal and regulatory obligations. Specifically:

Account information is retained while your account is active.
Enrollment information is retained while your enrollment with a business is active and for a reasonable period afterward to address disputes and meet record-keeping obligations.
Backups and audit logs may persist for a limited additional period in line with industry practice.
When personal information is no longer needed, we delete it or anonymize it so that it can no longer be associated with you.

9. Where we store your information

We primarily store personal information on servers located in Canada. Some of our service providers may process information outside Canada. Where personal information is processed outside Canada, it is subject to the laws of those jurisdictions and may be accessible to local authorities under lawful orders. We use contractual and technical safeguards designed to provide a comparable level of protection wherever your information is processed.

10. Your rights

Subject to limited exceptions under PIPEDA, you have the right to:

Access the personal information we hold about you.
Correct information that is inaccurate or incomplete.
Withdraw your consent to the collection, use, or disclosure of your information, subject to legal and contractual restrictions.
Receive a copy of your information in a portable format where reasonable.
Delete your account and associated personal information, subject to retention obligations described above.
Lodge a complaint with our Privacy Officer (see Section 14) or with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, contact our Privacy Officer at cantalog.app@gmail.com. We will respond within 30 days as required by PIPEDA. We may need to verify your identity before acting on a request. There is normally no charge to access your information; if a request is excessive or repetitive, we may charge a reasonable fee and will tell you in advance.

11. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, understand how the Service is used, and improve performance. You can configure your browser to refuse cookies or to alert you when cookies are being sent. If you reject cookies, parts of the Service may not function correctly.

12. Children’s privacy

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without parental consent. If you believe a child has provided us with personal information, contact our Privacy Officer and we will take steps to delete it.

Where a business that uses the Service collects information about minors as part of its own operations, that business is responsible for obtaining any necessary parental or guardian consents.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective date” at the top and notify you through the Service or by email. Your continued use of the Service after a change takes effect means you accept the updated policy.

14. Contact us / challenging compliance

If you have a question, concern, or complaint about how we handle your personal information, please contact our Privacy Officer first. We take complaints seriously and will investigate and respond.

Privacy Officer — Ingrok Inc.
Email: cantalog.app@gmail.com

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. You may also have rights under provincial privacy laws (for example, in British Columbia, Alberta, and Quebec) and may contact the relevant provincial privacy commissioner.