Privacy Policy

Information we collect

Account information. When you create an account we collect your email address and an encrypted password (managed by our authentication provider). If you tell us your name during onboarding we store it with your profile so we can personalize the app.

App usage data. We store the settings, goals, streaks, completed exercises, earned minutes, and reminder times that you create inside Pilates Pass so we can sync them across your devices.

Device and diagnostic data. We may collect basic technical information such as browser type, operating system, and error logs to keep the service running. We do not collect precise location, contacts, photos, health data, or motion/fitness sensor data.

Payment information. If you subscribe, payments are processed by our payment provider (Stripe). We receive a subscription status and the last four digits of your card, but we never see or store your full card number.

How we use information

To operate the app: create your account, save your settings, sync progress, run reminders, and process subscription payments.

To improve the app: understand which features are used and diagnose bugs and crashes.

To communicate with you: send transactional emails (sign-in links, receipts, security notices) and, if you opt in, product updates.

We do not sell your personal information, we do not share it with data brokers, and we do not use it for third-party advertising or cross-app tracking.

How data is stored and shared

Your data is stored with our backend and authentication provider (Supabase, hosted in the United States) and our payment provider (Stripe). These providers act as processors on our behalf and are contractually required to protect your data.

Data in transit is encrypted with TLS. Data at rest is encrypted by the underlying cloud provider. Access to production systems is restricted to Pilates Pass administrators.

We may disclose information if required by law, to protect the safety of users, or as part of a business transfer (e.g. merger or acquisition), in which case we will notify you.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to keep records for legal, tax, or fraud-prevention reasons.

Your rights and choices

You can review and update your profile inside the app.

You can disable notifications at any time in Settings or in your browser/OS settings.

You can request a copy of your data, correction of inaccurate data, or deletion of your account by emailing us at hello@pilatespass.app. Depending on where you live (for example, the EU, UK, or California) you may have additional rights under GDPR, UK GDPR, or the CCPA/CPRA, including the right to object to processing and to lodge a complaint with your local data protection authority.

Children

Pilates Pass is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top and, where appropriate, notify you in the app or by email.

Contact us

Questions about this policy or your data? Email hello@pilatespass.app and we will respond as soon as we reasonably can.