Étude Pilates — Privacy Policy
DRAFT. This is a sensible starting draft, not legal advice. Have a qualified lawyer review it before you publish, especially if you will have users in the EU, UK, or other regions with their own privacy laws, and to confirm UAE PDPL wording. Replace every [BRACKETED] placeholder. No em dashes used.
Effective date: [DATE] Last updated: [DATE]
1. Who we are
Étude Pilates is operated by The Active Healer LLC, registered in the SHAMS free zone, United Arab Emirates ("we", "us", "our"). The service includes a library of 551 exercises across Reformer, Mat, Tower, and Chair. For any privacy question, contact us at hello@etudepilates.com.
This policy explains what we collect, why, and your choices.
2. Information we collect
Account information: your name, email address, and password (stored securely, in hashed form by our authentication provider).
Profile and settings: your plan, preferences, and your acceptance of our practitioner disclaimer, including the date you accepted it.
Content you create: the classes you build and save, and any client records you choose to add, such as a client's name, level, focus, notes, and the injury or prenatal flags you set. You decide what to enter here.
Payment information: if you subscribe, our payment provider collects and processes your payment details. We do not store your full card details; we receive limited information such as your subscription status and the last four digits of your card.
Usage information: basic technical and usage data such as device and browser type, pages viewed, and actions taken, used to run and improve the service.
Cookies and similar technologies: used for sign-in, security, and basic analytics. See section 9.
3. How we use your information
We use your information to: create and run your account; provide the class builder, catalogue, client profiles, and Teach Mode; process subscriptions and payments; respond to your requests; keep the service secure and prevent misuse; understand how the service is used so we can improve it; and meet our legal obligations.
4. Legal bases
Where applicable privacy law requires a legal basis, we rely on: performance of our contract with you, to provide the service; our legitimate interests, to keep the service secure and to improve it; your consent, where we ask for it, for example non-essential cookies; and compliance with legal obligations.
5. Your clients' information
If you add client records, you control that information and you are responsible for having a lawful basis and any necessary consent to store it. We process it on your behalf to provide the service, and we do not use your client records for any other purpose. You can edit or delete client records at any time.
6. Who we share information with
We use trusted service providers to run Étude, and we share information with them only as needed to provide the service:
- [Supabase] for database, authentication, and storage.
- [Stripe] for payment processing.
- [Lovable] for application hosting.
- [Email provider] for account and service emails.
We do not sell your personal information. We may disclose information if required by law, or to protect the rights, safety, or property of our users or the Company.
7. International transfers
We and our providers may process information in countries other than your own. Where we transfer information internationally, we take steps to protect it consistent with applicable law.
8. How long we keep information
We keep your account and content for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, or security needs. You can ask us to delete your account, and we will delete or anonymise your information except where we must keep it by law.
9. Cookies
We use essential cookies for sign-in and security, and limited analytics cookies to understand usage. You can control cookies through your browser settings. [Add a cookie banner and detail here if you use non-essential analytics.]
10. Security
We use technical and organisational measures to protect your information, including encrypted connections and access controls. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any issue.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your information, to object to or restrict certain processing, and to withdraw consent. To exercise any right, contact us at hello@etudepilates.com. You may also have the right to complain to your local data protection authority.
12. Children
Étude is a professional tool for adults and is not intended for children. We do not knowingly collect information from children through this service.
13. Changes to this policy
We may update this policy from time to time. If a change is material, we will give reasonable notice in the app or by email. The "last updated" date shows the current version.
14. Contact
Questions or requests about your privacy: hello@etudepilates.com.