Pilates Studio Tech Guide: Booking, Wi-Fi, and Payments

A Pilates studio’s technology comes down to one booking and payment platform, a check-in device and card reader that stay connected, Wi-Fi designed around a room full of metal equipment, a legal and reliable way to play music, and staff accounts that match what each person does. Get the platform decision and the network right and most day-to-day problems disappear. This guide covers how to choose and set up each piece, with current vendor facts as of September 2026.

For the services we offer studios, see IT support for Pilates studios. This post is the how-to behind it.

Which booking and payment platform fits a Pilates studio?

The platform is the most consequential choice because it holds your schedule, memberships, stored cards, waivers, and client list. Moving later is possible but painful, so compare on what you will use daily, not on the feature count.

Platform	Published pricing (September 2026)	Notes from the vendor’s own pages
Mindbody	Starter from $79 per month per location. Higher tiers by quote.	Integrated payments, unlimited staff users per location, listing in the Mindbody consumer app. Pick-a-Spot (clients choose a specific reformer) starts at the Accelerate tier.
WellnessLiving	Starter $69, Business $199, BusinessPro $349 per month, less if billed annually.	Self check-in kiosk and web app on every plan. Card processing built in. Livestream and on-demand video sold as add-ons.
Arketa	Individual plan $49 per month billed annually. Studio plans by quote.	Payments run through Stripe (2.9% plus $0.30 per US card charge on the published rate). Point of sale starts at the Studio Core plan. On-demand library on all plans.
Momence	By quote only.	Positions itself as bookings, payments, and marketing in one platform, with memberships, packs, and intro offers.
Mariana Tek	Not published on its main site.	Part of Xplor. Built for boutique fitness, including multi-location brands. Pick-a-spot floor plans, branded mobile app, retail sales.

Promotions come and go, so treat any discount as temporary and compare the regular price.

What to ask on the demo

1. Can clients book a specific reformer, and which plan includes that?
2. What is the card processing rate, in writing, including for stored-card membership renewals?
3. Which card readers and check-in devices are supported, and do we buy them from you?
4. How do we export our client list, purchase history, and signed waivers if we leave? In what format?
5. What happens to stored cards if we switch processors or platforms?
6. Does every staff member get their own login at no extra cost, and what roles exist?
7. Is there multi-factor authentication for owner and manager accounts?
8. What does the front desk do if your service is down during a class changeover?

Questions 4 and 5 deserve the most attention. Stored cards usually live with the payment processor as tokens (stand-in values that only work with that processor), so a platform change can mean asking every member to re-enter a card.

Front desk check-in hardware

Keep it short and boring. A typical front desk needs:

• One tablet or computer dedicated to check-in, on a stand, on a charger, signed in with a front desk role rather than the owner’s account.
• The card reader your platform supports. Readers are tied to processors, so buy what the platform specifies.
• A receipt or label printer only if you sell retail and clients want paper.
• A battery backup (UPS) for the modem, router, and network switch, so a brief power dip does not take check-in offline for five minutes while everything restarts.

If the check-in device is an iPad that clients touch, Apple’s Guided Access locks it to a single app so nobody can wander into settings or email. The path is Settings > Accessibility > Guided Access, as Apple documents.

Card readers have network rules

When a reader keeps disconnecting, check the network against the vendor’s requirements before replacing the reader. Two examples from vendor documentation:

• Square states its Terminal cannot connect to a captive portal network, the kind that shows a sign-in or terms page. Payments taken offline must be uploaded within 72 hours, and are lost if someone signs out or resets the device first.
• Stripe’s Terminal network requirements require a password-protected Wi-Fi network, the reader and the point of sale device on the same local network when they talk to each other directly, an IP address the reader can keep for a full workday, and either Wi-Fi or Ethernet on a reader but not both at once in that setup.

The takeaway: readers belong on the staff network, never on guest Wi-Fi, and any “client isolation” setting that blocks devices from seeing each other must not apply to the network the reader and tablet share.

How do you get reliable Wi-Fi in a room full of equipment?

Reformers, towers, and chairs put a lot of metal between a router and a tablet. Apple’s guide to wireless interference ranks metal as having very high interference potential, with concrete and plaster high, and water, brick, and marble medium. A router on the floor behind the front desk, with a row of reformers between it and the far wall, is working against physics.

What helps, in order of value:

1. Mount access points on the ceiling. Signal then travels down over the equipment rather than through it. One access point per room, including the front desk area, is a reasonable starting point, confirmed with a signal test once the equipment is in place.
2. Wire each access point back to the router with Ethernet. Wireless “mesh” links between units have to fight through the same metal.
3. Use Ethernet for anything that does not move: the front desk computer, a printer, a wired card terminal, the music streamer.
4. Create three networks: staff (tablets, readers, computers), guest (clients’ phones, internet only), and devices (speakers, TVs, smart locks, cameras). Our network segmentation guide explains why and how.
5. Put a time or speed cap on guest Wi-Fi so a full class streaming video does not starve check-in.

Bluetooth shares the 2.4 GHz band with Wi-Fi, and Stripe notes that interference on that band can disrupt Bluetooth card readers. If a Bluetooth reader or speaker drops out at the same time each day, look at what else is transmitting nearby.

If the connection drops everywhere at once, the cause may be the internet line rather than Wi-Fi. The steps in why office Wi-Fi keeps dropping help tell the two apart.

Music and AV without the mid-class dropout

Two separate issues hide here: licensing and reliability.

Licensing. Spotify’s own support page says the service is for personal use and that you cannot play it publicly from a business, naming stores, salons, and dance studios, and it points businesses to a commercial service instead. Check the terms of whichever service you use. Which licenses your studio needs is a question for a music licensing provider or your attorney, not an IT decision, but the account you stream from should be a business one.

Reliability.

• Prefer a wired or Wi-Fi speaker system over a phone paired by Bluetooth. A phone that takes an incoming notification, or walks out of range in an instructor’s pocket, stops the music.
• Give the music source a fixed home: a small streamer or a dedicated tablet on the devices network, on power.
• If instructors use a headset microphone in larger rooms, label the mixer inputs and tape a one-page start-up sheet inside the cabinet.
• Keep one known-good cable as a fallback.
• For lobby or studio TVs showing schedules, check whether your platform has a display app (Arketa lists Apple TV and Roku displays on its top studio plan) before buying screens.

Membership billing and card data: what is your PCI scope?

PCI DSS is the card industry’s security standard. The PCI Security Standards Council states it applies to all merchants regardless of size or transaction volume, with validation requirements set by the card brands and your acquirer (the processor or merchant bank). The current version is 4.0.1.

“Scope” means the people, devices, and networks that touch card numbers. The goal for a studio is to make that scope as small as possible:

• Let the platform and processor handle every card number. Clients enter cards in the platform’s app or web checkout, or tap a supported reader. Recurring memberships then bill from the processor’s stored token.
• Never write card numbers down: not on paper intake forms, not in client notes, not in a spreadsheet, not in email. This is the single most valuable rule.
• Do not key cards into a general-purpose computer that is also used for email and browsing if you can avoid it. Use the reader.
• Keep readers and the check-in tablet off guest Wi-Fi.
• Inspect readers periodically for tampering or swapped devices, and know their serial numbers.

Who does the paperwork varies by processor. Square says it maintains PCI compliance on sellers’ behalf so they do not need to validate individually. Stripe describes compliance as a shared responsibility in which the business attests annually, made simpler by using its low-risk integrations. Ask your platform which applies to you and whether there is a yearly questionnaire to complete. Our PCI DSS guide for small businesses covers the questionnaire types.

Instructor and staff accounts

Shared logins are tempting in a small studio because they are convenient and because instructors come and go. They also mean nobody can tell who changed a booking or issued a refund.

Role	Should be able to	Should not need
Instructor	See own rosters, check clients in, add class notes	Reports, payouts, client export, pricing
Front desk	Book, sell, check in, take payment, edit client profiles	Payout bank details, staff management, integrations
Manager	Schedules, staff, most reports, refunds	Ownership transfer, bank details
Owner	Everything	Nothing less than multi-factor authentication

Then the habits that keep it clean:

• One login per person. Mindbody, for instance, includes unlimited users per location, so cost is not a reason to share.
• The business owns the owner account, the domain, the email, and the Wi-Fi administration. Use a business email address, not an individual’s personal one.
• Turn on multi-factor authentication for owner and manager roles, and for the email account that receives password resets.
• Store shared items (Wi-Fi admin, music account, smart lock admin) in a business password manager, not a notebook at the desk.
• Remove access the day an instructor leaves: booking platform, door code or lock app, music account, group chats, email. An onboarding and offboarding checklist makes this routine.

Common mistakes, stated neutrally

• Card readers or the check-in tablet joined to the guest network.
• One owner login used by everyone at the desk.
• A consumer mesh kit placed at floor level behind equipment.
• Music from a personal streaming account on someone’s phone.
• No export of the client list ever tested, so nobody knows what leaving the platform would involve.
• Modem and router plugged straight into the wall with no battery backup.

When you do not need much of this

A single-room studio with an owner who teaches most classes, one tablet, and one reader does not need three access points or a managed firewall. A good router placed high and central, a separate guest network, a UPS, unique logins, and MFA on the owner account cover it. A one-time setup may be all that is needed, with help again when you add a room, a location, or door access.

More structure pays off with multiple rooms, several part-time instructors, retail sales, or a second location sharing one platform account.

Common questions

Do we need a separate internet line for payments?

No. A separate network on the same line is what matters: staff devices and readers on one, guests on another. A second internet line is a resilience choice, useful if an outage during peak classes would cost more than the monthly fee. Some readers can also accept payments offline for a limited time. Square Terminal is one example, with the 72-hour upload limit noted above.

Can we use an instructor’s personal iPad for check-in?

It works technically, but the studio then has client data on a device it does not control. If the instructor leaves, so does a signed-in session. A studio-owned tablet, locked to the check-in app and signed in with a front desk role, avoids the problem for the price of a basic iPad.

Is a Pilates studio really subject to PCI DSS?

Yes, if it accepts cards. The standard applies to every merchant. What changes with size is how you validate. A studio that only uses its platform’s hosted checkout and approved readers has a small scope, and the processor may handle most of the validation. Storing card numbers yourself is what makes it large.

How fast does studio internet need to be?

Booking, check-in, and payments use very little bandwidth. Stability matters more than speed. Guest Wi-Fi and any livestreaming are what consume capacity, especially upload. If you stream classes, check your plan’s upload speed rather than the headline download figure.

How we can help

Coastal Growth Co. can survey the studio’s Wi-Fi, set up separate staff, guest, and device networks, get check-in and payment hardware connected the way the vendor requires, and tidy up accounts so each person has the right access. Booking, payment, and lock vendors stay responsible for their own products, and we coordinate with them. See our network and Wi-Fi services or the Pilates studio page, then tell us about your setup. Scope and price are agreed before paid work begins.