Privacy Policy

We are committed to protecting your privacy. This document explains what information we collect, why we collect it, and how we use it, in accordance with the EU General Data Protection Regulation (GDPR), applicable French law, and applicable U.S. privacy laws.

When you download and use the App, we may collect the following information:

• Profile data: first name, age, height, current weight, target weight, fitness level, injury history, body type
• Health and wellness data: weight, body measurements, intermittent-fasting data, and — if you enable this feature — menstrual-cycle data (period dates, symptoms, mood)
• Nutrition data: logged meals, calories and macronutrients, and meal photos (see "Photos and Artificial Intelligence Analysis")
• Progress photos you choose to add
• Your device's IP address
• Advertising identifier (IDFA) and marketing-attribution data (see "Advertising and Attribution Measurement")
• Pages viewed within the App, date and time of your visit, and time spent in the App
• Your mobile device's operating system
• Usage and progress data within the App

The App does not collect precise location data.

Most of your personal data (profile, health, cycle, body measurements, progress photos) is stored locally on your device and, where applicable, in your private iCloud space, which the Service Provider cannot access.

With your explicit permission, the App may read and write data in your device's health app — Apple Health (HealthKit) on iOS, or Google Fit / Health Connect on Android:

• Recording your Pilates sessions in your health history
• Reading physical-activity data to personalize your program

If you enable menstrual-cycle tracking, this particularly sensitive data is handled with extra care: it remains stored locally on your device (and in your private iCloud), and is never transmitted to our servers, shared with third parties, or used for advertising or attribution purposes.

This health data is never shared with third parties, sold, or used for advertising purposes. It stays on your device and is used exclusively to provide the App's features.

You can revoke access at any time in your device's health settings (Settings > Health on iOS, or Health Connect / Google Fit on Android).

The App lets you take photos of your meals so that their calories and macronutrients can be estimated automatically. To perform this analysis, the meal photo is securely transmitted to our artificial-intelligence provider, Google (Gemini), only for the duration of processing.

• These photos are used exclusively to provide the requested nutritional estimate.
• They are not linked to your identity, are not used for advertising purposes, and are not retained by the Service Provider beyond processing.
• The progress photos you add, by contrast, remain stored locally on your device and in your private iCloud; they are never transmitted to third parties.

AI processing is carried out in accordance with Google's privacy policy: policies.google.com/privacy.

To measure the effectiveness of our marketing campaigns and understand how users discover the App, we use the attribution service Tenjin. For this purpose, the App may collect and share your advertising identifier (IDFA) along with install and event data (for example, the start of a free trial).

In accordance with Apple's requirements, the App asks for your permission via the "App Tracking Transparency" prompt before any tracking for advertising purposes. If you decline, no advertising identifier is used for tracking. You can change your choice at any time in Settings > Privacy & Security > Tracking.

This data may be matched with third-party data for advertising-measurement purposes. See Tenjin's policy: tenjin.com/privacy-policy.

Payments are processed exclusively by your device's platform — Apple via the App Store (In-App Purchase) on iOS, or Google via the Google Play Store on Android. The Service Provider does not collect or store your payment card details.

RevenueCat, our subscription-management partner, receives anonymized technical data about your transactions so that we can manage your Premium access. See their privacy policy: revenuecat.com/privacy.

The Service Provider uses the information collected to:

• Personalize your Pilates program based on your profile
• Track and display your progress
• Send you reminders and notifications (with your consent)
• Improve the App using anonymized, aggregated data
• Contact you with important information about the service

Legal basis (GDPR): Processing is based on the performance of the contract (Article 6.1.b), your explicit consent (Article 6.1.a) for health data, and our legitimate interest in improving the service (Article 6.1.f).

Certain data is transmitted to third-party service providers strictly to operate the App (attribution measurement, AI nutritional analysis, subscription management), as detailed below. In addition, the Service Provider may share your information only in the following cases:

• Legal compliance: if required by law, subpoena, or legal process
• Protection of rights: to protect our rights, your safety, or the safety of others
• Service providers: with trusted partners bound by confidentiality obligations

Third-party services used by the App:

• RevenueCat — Subscription management
• Tenjin — Marketing and advertising attribution measurement (advertising identifier)
• Google (Gemini) — AI analysis of meal photos
• Open Food Facts — Nutrition database (barcode scanning)

As a user located in the European Union, you have the following rights:

To exercise these rights, contact us at drfgroup.group@gmail.com. We will respond within 30 days. You may also lodge a complaint with the CNIL, the French data-protection authority (cnil.fr).

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you additional rights regarding your personal information.

Categories of personal information we collect:

• Identifiers: first name, IP address
• Health and fitness information you provide: weight, body measurements, fitness level, injury history, intermittent-fasting data, and — if enabled — menstrual-cycle data (stored locally on your device, as described above)
• Purchase information: subscription and transaction data processed by Apple or Google and RevenueCat
• Device and advertising identifiers: IDFA and install/event data used for attribution measurement via Tenjin

Sale and sharing of personal information: GoPilates does not sell your personal information in the traditional sense (we do not exchange it for money). However, our use of an advertising-attribution SDK (Tenjin) together with your advertising identifier may be considered "sharing" for cross-context behavioral advertising under the CPRA. You can opt out of this at any time by declining the iOS "Ask App Not to Track" prompt, or via Settings > Privacy & Security > Tracking. If you opt out, your advertising identifier is not used for tracking.

Your rights: Subject to applicable law, you have the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising any of these rights.

How to exercise your rights: Contact us at drfgroup.group@gmail.com. We will verify your request and respond within the timeframes required by law.

Users under 16: We do not knowingly collect, sell, or share the personal information of consumers under 16 years of age.

Your data is retained for as long as you use the App, and for a reasonable period after your last use, in accordance with our legal obligations.

To request the deletion of your data, contact us at drfgroup.group@gmail.com. Your request will be processed within a reasonable time.

You can also stop all data collection by uninstalling the App using your device's standard process (App Store on iOS, Google Play on Android).

The App is intended for people aged 13 or older. The Service Provider does not knowingly collect any personal data from children under 13.

If we discover that a child under 13 has provided us with personal information, we will delete it immediately. If you are a parent or guardian and become aware that your child has provided us with data, contact us at drfgroup.group@gmail.com.

The Service Provider implements physical, electronic, and organizational safeguards to protect the confidentiality of your information.

However, no method of electronic transmission or storage is 100% secure. We encourage you to protect access to your device.

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes by updating this page. We encourage you to review it regularly.

Continued use of the App after changes are posted constitutes acceptance of the updated terms.