Privacy Policy

We collect only the data needed to manage your account and your access to the studio's classes:

• Account data: name, email address and phone number.
• Authentication credentials: your password is stored securely (hashed) and is never accessible in plain text.
• Profile photo (optional): only if you choose one from your device's library.
• Service usage records: bookings, attendance, plans and records of payments made to the studio.
• Push notifications (optional): a device token so we can send you class and booking reminders, if you allow it.
• Preferences: language and theme, stored locally on your device.
• Technical and analytics data (optional): if analytics are enabled, we collect anonymised or pseudonymised usage data via PostHog to improve the App.

We process your data for the following purposes:

• To provide the service — manage your account, bookings, plans and payments (performance of a contract).
• To authenticate your access and keep the App secure (performance of a contract and legitimate interest).
• To send relevant notifications about your classes (consent, which you can withdraw in your device settings).
• To set a profile photo (consent).
• To improve the App through usage analytics (consent / legitimate interest).

We do not sell your data. We share data only with service providers that process it on our behalf (processors), under contract and only as necessary:

• Expo (Expo / EAS): delivery of push notifications and App updates.
• PostHog: usage analytics and error tracking (when enabled).
• Our API and database hosting provider, where your account data is stored.

We may also disclose data where required by law or a competent authority.

Where possible, data is processed within the European Economic Area (EEA). If any processor handles data outside the EEA, we ensure appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

We keep your data while your account is active and for as long as needed to fulfil the purposes described or legal obligations (for example, accounting obligations relating to payments). When no longer needed, data is deleted or anonymised.

Under the GDPR, you have the right to access, rectify, erase, restrict or object to the processing of your data, as well as the right to data portability and to withdraw consent at any time. To exercise these rights, contact us using the details above.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD, www.cnpd.pt).

We apply appropriate technical and organisational measures to protect your data, including encrypted communication (HTTPS), secure on-device storage of credentials (the operating system's secure storage) and access controls.

The App is not intended for children under 16 without the consent and supervision of a parent or guardian. If we learn that we have collected a minor's data without such authorisation, we will delete it.

We may update this Privacy Policy. We will post the revised version here with its update date. We recommend you review it periodically.

For any question about this policy or your data, you can contact us at privacy@remov.pt, or in writing at Av. Vasco da Gama 774, 4430-247 Vila Nova de Gaia, Portugal.