Privacy Policy

• Account information — your first name, email address and authentication data used to sign you in.
• Onboarding and Pilates preferences — goal, experience, session length, frequency, equipment and focus areas, used to build your 28-day path.
• Activity and progress — completed sessions, check-ins, streaks and points.
• Optional progress photos — only if you choose to add them.
• Subscription data — your plan, status, renewal dates and transaction identifiers received from our payment provider. We never receive your full card number.
• Marketing attribution — campaign parameters present in the link you arrived through (such as UTM parameters and fbclid).
• Technical and security data — device and browser information, IP address, and application/error logs.

To provide the app and authenticate you; to personalize your Pilates path; to keep your progress, streaks and points across devices; to give and verify subscription access; to answer support requests; to keep the service secure and prevent fraud and abuse; and to understand which campaigns bring people to Rielleva.

Where the law requires a legal basis, we rely on performance of our contract with you (providing the membership), our legitimate interests (security, fraud prevention, service improvement and attribution measurement), your consent where we ask for it (such as optional progress photos), and legal obligations (such as accounting records).

Progress photos are entirely optional. They are stored in a private storage area of our backend that only your authenticated account can open, and they are never shown publicly or to other users. You can delete them at any time.

We do not automatically analyze your photos to score appearance or transformation, and we do not perform biometric identification on them.

Rielleva does not store full card details. Checkout and payment processing are handled by Paddle.com, which acts as Merchant of Record for all orders and handles billing, tax and invoicing. Paddle shares subscription status and transaction identifiers with us so we can unlock your membership. Subscriptions may renew automatically until you cancel; the price and billing interval are shown before purchase.

We use service providers who process data on our behalf to operate Rielleva:

• Supabase — database, authentication and private file storage.
• Paddle — Merchant of Record: checkout, payments, subscription management, tax and invoicing.
• Application hosting infrastructure — the platform that serves the website and its server functions.
• Professional advisers, and authorities where we are legally required to disclose.

We do not sell your personal data. Data may be processed outside your country by these providers; where required we rely on recognised safeguards such as standard contractual clauses or adequacy decisions.

We keep your account data while your account exists, and delete or anonymise it after closure except where we must retain records (for example transaction records for accounting). Progress photos are deleted when you delete them or when your account is deleted.

We apply appropriate technical and organisational measures, including encryption in transit, authenticated access, and row-level access rules so that your records are readable only by your account. No service can promise perfect security, and we do not claim any certification that has not been independently established.

We use storage that is essential to run the app — keeping you signed in and holding your onboarding answers and progress on your device. Campaign parameters from your first visit are stored to measure attribution. We do not run third-party advertising cookies in the app.

Depending on where you live, you may ask for a copy of your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests, and withdraw consent at any time. You may also complain to your local data protection authority. Write to support@rielleva.com and we will respond within the period required by applicable law (normally one month).