Privacy Policy

Last updated: June 27, 2026

Alyn Pilates Club ("we", "our", or "us") respects your privacy. This policy explains what data we collect and how we use it in our mobile application and services.

Data We Collect

• Account information (name, email, phone), used to create and manage your account.
• Booking and class attendance information to provide core app features.
• Device information (app version, device OS) for diagnostics and support.

How We Use Data

• To provide and improve app features (authentication, bookings, payments, profile).
• To communicate important service updates and support.
• To comply with legal obligations.

Data Sharing

We do not sell your personal data. We may share limited data with service providers under data processing agreements to operate the service (e.g., hosting).

Security

We use industry-standard security measures and transmit data over HTTPS. Sensitive credentials are protected and access-controlled.

Data Retention & Deletion

We retain your personal data only for as long as your account is active or as needed to provide our services:

• Account and profile data (name, email, phone, profile photo) is kept while your account is active and deleted within 90 days after you close your account or request deletion.
• Booking, class attendance, and package history is retained for the life of your account and removed or anonymized within 90 days of account deletion.
• Payment-slip images are retained only until the related payment is verified, and no longer than 12 months.
• Transaction and billing records may be retained for up to 5 years where required by applicable tax and accounting laws, then deleted.
• Push notification tokens are deleted when you disable notifications, sign out, or uninstall the app.

You may request deletion of your account and personal data at any time by contacting us via the support page. We verify and process such requests within 30 days, except for data we are legally required to retain.

Contact

Email: [email protected]

If you are a resident of a region with specific privacy laws (e.g., GDPR, PDPA), additional rights may apply. See our Support page to request access or deletion.