Pilavio ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your data when you use our service at pilavio.com.

1. Information We Collect

We collect information you provide directly to us:

Account information: your name, email address, and password when you register.
Profile data: optional avatar image and display name stored in your Supabase Auth metadata.
Usage data: Pilates exercises, routines, and schedules you create, which are stored in our Supabase database and associated with your account.
Payment information: Billing is processed by Stripe. We do not store your full credit card details on our servers.

We also automatically collect certain technical data when you use our service, including browser type, operating system, IP address, and usage analytics.

2. How We Use Your Information

We use your information to:

Provide, operate, and improve the Pilavio service.
Process payments and manage your subscription via Stripe.
Send transactional emails (e.g., password resets, billing receipts).
Respond to your support requests.
Enforce our Terms of Service and prevent fraud or abuse.

We do not sell your personal information to third parties.

3. Cookie Policy

Pilavio uses essential cookies and local storage to keep you logged in and save your app preferences. We do not use advertising cookies or tracking cookies. By using Pilavio you consent to our use of essential cookies. You can disable cookies in your browser settings however this may affect your ability to use certain features of the app.

4. Data Sharing and Third Parties

We share your data only in these limited circumstances:

Supabase: Our database and authentication provider (Supabase, Inc.). Data is stored in their secure cloud infrastructure.
Stripe: Payment processing. Stripe's privacy policy governs its handling of your payment data.
Google (Gemini AI): Your exercise library content is sent to Google's Gemini API to generate routine suggestions. No personally identifiable information is included in these requests.
Legal requirements: we may disclose data if required by law or to protect the safety of our users.

5. Data Retention Policy

We retain your personal data for as long as your account is active. If you delete your account all personal data including your exercise library, saved routines, and profile information will be permanently deleted from our servers within 30 days. Billing records may be retained for up to 7 years as required by Canadian tax law.

6. Data Security

We use industry-standard security practices including encrypted connections (HTTPS/TLS), Row Level Security (RLS) policies on our database, and hashed password storage via Supabase Auth. Despite these measures, no internet transmission is 100% secure, and we cannot guarantee absolute security.

7. GDPR & CCPA Compliance

If you are located in the European Union you have the right to access, correct, and delete your personal data at any time. If you are located in California you have the right to know what personal data we collect, request deletion of your data, and opt out of the sale of your personal data. Pilavio does not sell your personal data to any third party. To exercise any of these rights please contact us at infos.pilavio@gmail.com and we will respond within 30 days.

8. Data Deletion Requests

If you would like to request the deletion of your personal data please email infos.pilavio@gmail.com with the subject line 'Data Deletion Request' and include the email address associated with your Pilavio account. We will process your request within 30 days and confirm once your data has been permanently deleted.

9. Children's Privacy

Pilavio is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice within the app or sending an email to your registered address. Continued use of Pilavio after changes take effect constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us at infos.pilavio@gmail.com.