Privacy Policy

We respect your privacy and protect your personal data in accordance with GDPR (EU 2016/679). This page explains what data is collected, why, and your rights.

Data controller: Association Bonum, 10 rue de l’Église Neuve, 30610 Sauve, France – SIREN 821 988 136 – contact@cpilatesflow.fr. No data protection officer has been appointed.

We may collect the following information when you use the app or website: • email address (if you create an account or contact us) • name and message content when you use the contact form • technical information and usage statistics, only after you consent to Google Analytics • technical ID for push notifications (if enabled) • purchase and access-right information (CPilatesFlow does not retain your bank card details) We do not request health data or other sensitive data. Please do not include any in the contact form’s free-text fields.

An email address and password are required to create an account; without them, the service cannot be provided. Name, email and message are required to handle a contact request. Google Analytics and notifications are optional. No decision producing legal effects is made solely by automated means.

Your data is used only for: • providing access to content • improving the platform • ensuring security • sending reminders if you have enabled notifications Processing required for accounts, security, content delivery and purchase tracking is based on performance of the contract or our legitimate interest in securing the service. Google Analytics audience measurement is based on your consent, which you can withdraw at any time through “Cookie settings”.

Under GDPR, you have the right to: • access your data • correct your data • delete your data • restrict processing • object to processing • data portability To exercise these rights, contact: contact@cpilatesflow.fr

You may withdraw consent at any time, including through Cookie settings. You may also lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

Retention: account and progress data remains active while the account is used and is deleted when the account is deleted, subject to legal duties. Necessary accounting and transaction records are archived for 10 years. Contact requests are kept while handled and for no more than 3 years after the last exchange. Notification identifiers are kept until disabled, invalid or the account is deleted. Analytics data follows the retention period configured in Google Analytics and is deleted or aggregated when it expires.

Recipients are authorised Association Bonum personnel and its processors Google/Firebase, Stripe, Scalingo and Web3Forms, within their respective duties. Scalingo hosts the application in France. Where Google, Stripe or Web3Forms process data outside the EEA, transfers rely, depending on the provider and country, on an adequacy decision such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Applicable safeguards can be requested at contact@cpilatesflow.fr.

The app is not intended for children under 13.

This policy may be updated. The online version is the reference.

contact@cpilatesflow.fr