Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you sign up, use the Service, or contact us, including:

• Name and email address, collected via our website when you join our waitlist or sign up for an account (including via Google OAuth);
• Professional credentials, including your Pilates instructor certification body and training enrollment status, as provided during account registration;
• Payment information, processed securely by Stripe. We do not receive or store your full credit card number — Stripe handles all payment data directly;
• Class plans, cue sequences, and other content you create, save, or export (including as PDFs) within the Service (“User Content”);
• Subscription and usage data, including your selected plan, plan generation counts, and billing history; and
• Support communications, including the content of emails you send to us at hello@cuepilates.fit.

1.2 Information Collected Automatically

When you use the Service or visit our website, we and our third-party providers may automatically collect:

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Pages visited, features used, time spent on the platform, and other usage and analytics data;
• Referring URLs (how you arrived at our site); and
• Cookies and similar tracking technologies (see Section 5 for details).

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account;
• Provide, operate, and improve the Service, including AI-powered class plan generation;
• Process payments and manage your subscription;
• Store and serve your saved class plans and PDF exports;
• Send transactional emails such as account confirmations, billing receipts, and important Service updates;
• Send marketing and promotional emails where you have opted in (you may opt out at any time);
• Respond to your support inquiries;
• Monitor usage and analytics to understand how the Service is used and to improve it;
• Detect, investigate, and prevent fraudulent or unauthorized activity; and
• Comply with applicable legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share your data only in the following limited circumstances:

3.1 Third-Party Service Providers

We work with the following third-party providers who may process data on our behalf:

• Supabase — our authentication and database provider. Supabase securely stores your account information, profile data, and saved class plans. If you sign in via Google OAuth, Supabase facilitates that authentication flow. Supabase’s privacy policy is available at supabase.com/privacy.
• Stripe — our payment processor. Stripe collects and processes your payment information directly and securely. Stripe’s privacy policy is available at stripe.com/privacy.
• Anthropic (Claude API) — the AI service that powers our class plan generation. Content you enter into the platform may be processed by Anthropic’s API to generate responses. Anthropic’s privacy policy is available at anthropic.com/privacy.
• Vercel — our hosting and infrastructure provider. Vercel serves the application and may process request metadata (such as IP addresses and device information) as part of delivering the Service. Vercel’s privacy policy is available at vercel.com/legal/privacy-policy.
• Email Marketing Provider — we use a third-party email platform to send marketing communications. We only use providers that offer appropriate data protections and honor unsubscribe requests promptly.

3.2 Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

3.3 Business Transfers

If CuePilates.Fit is acquired, merged, or its assets are transferred, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Service if such a transfer occurs.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Class plans and other User Content are stored for as long as your account is active. If you close your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (for example, Stripe transaction records).

Upon account deletion, all plan data is permanently removed within 30 days. We recommend exporting any plans you wish to keep beforehand. Support emails and communications may be retained for up to 2 years for quality and legal purposes.

5. Cookies & Tracking Technologies

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. We and our third-party providers use cookies and similar technologies (such as pixels and local storage) to operate and improve the Service.

5.2 Types of Cookies We Use

• Essential cookies — necessary for the Service to function, such as keeping you logged in and maintaining session security. These cannot be disabled.
• Analytics cookies — used to understand how users interact with the Service to help us improve the platform.
• Third-party cookies — Stripe may set their own cookies when you interact with their services. Please refer to their respective privacy policies for details.

5.3 Your Cookie Choices

Most web browsers allow you to control cookies through your browser settings. You can choose to block or delete cookies, though doing so may affect your ability to use certain features of the Service. For users in the European Economic Area (EEA) or the United Kingdom, we will request your consent before placing non-essential cookies on your device.

6. Data Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or disclosure. These include encrypted data transmission (HTTPS), secure payment processing via Stripe, and access controls on our systems.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at hello@cuepilates.fit.

7. Your Rights

7.1 All Users

Regardless of your location, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Request deletion of your personal data (subject to legal retention requirements);
• Opt out of marketing emails at any time by clicking “unsubscribe” in any email or contacting us at hello@cuepilates.fit; and
• Request a copy of your data in a portable format.

7.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale of your personal information (we do not sell personal data), and the right not to be discriminated against for exercising your privacy rights.

To exercise your CCPA rights, please contact us at hello@cuepilates.fit. We will respond to verified requests within 45 days.

7.3 European & UK Users (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to access, rectify, or erase your personal data; the right to restrict or object to processing; the right to data portability; the right to withdraw consent at any time; and the right to lodge a complaint with your local data protection authority.

Our lawful bases for processing your data include: performance of a contract (providing the Service), legitimate interests (improving the Service and ensuring security), legal compliance, and consent (marketing emails and non-essential cookies).

To exercise your GDPR rights, please contact us at hello@cuepilates.fit. We will respond within 30 days.

8. International Data Transfers

CuePilates.Fit is based in the United States. If you are accessing the Service from outside the U.S., please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For users in the EEA or UK, we rely on appropriate safeguards for such transfers, including standard contractual clauses where applicable. By using the Service, you consent to this transfer.

9. Children’s Privacy

The Service is intended for adults who are licensed Pilates instructors. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at hello@cuepilates.fit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the Service prior to the change becoming effective. The “Effective Date” at the top of this policy reflects when it was last updated. Your continued use of the Service after the effective date constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

CuePilates.Fit
Email: hello@cuepilates.fit
Website: cuepilates.fit