Privacy Policy | Embody By Alexandra

**Last Updated: February 26, 2025**

Embody by Alexandra ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"). Please read this policy carefully.

---

1. Information We Collect

1.1 Account and Authentication Information

When you create an account or sign in, we collect:

- **Email address** – When you sign up or sign in with email and password

- **Password** – Stored securely and hashed by Firebase Authentication (we do not have access to your plain-text password)

- **Name and profile information** – When you sign in with Google, we receive your name and email from your Google account (you control what Google shares with us)

1.2 Profile and Preference Information

To personalize your pilates experience, we collect:

- **Pilates experience level** – Your self-reported confidence level (e.g., beginner to expert)

- **Focus areas** – Body areas you want to work on (e.g., glutes, abs, arms, core)

- **Modifications and conditions** – Any physical considerations you share, such as:

- Shoulder modifications

- Pregnancy-safe modifications

- Lower back considerations

- Wrist-friendly options

- **Workout duration preference** – Your preferred workout length (e.g., 20 minutes)

1.3 Daily Check-In and Wellness Information

When you complete a daily check-in, we may collect:

- **Emotional state** – How you're feeling (e.g., present, busy, happy, discouraged)

- **Body parts to focus on** – Areas you want to target that day

- **Preferred positions** – Positions that work for you (standing, lying, sitting, kneeling)

This information is used solely to generate personalized workouts and is not shared for marketing purposes.

1.4 Workout and Usage Data

We collect and store:

- **Workout history** – Moves completed, focus areas, completion status, and timestamps

- **Favorite workouts** – Workouts you save for easy access

- **Progress and statistics** – Completed workouts, weekly activity, and streaks

- **Video playback data** – Which videos you watch and completion status (stored locally and in the cloud for sync)

1.5 Device and Technical Information

When you use the App, we may automatically collect:

- **Device information** – Device type, operating system version, and unique identifiers

- **App usage data** – Features used, session duration, and crash reports (via Firebase Analytics)

- **IP address** – For security and to prevent abuse

---

2. How We Use Your Information

We use the information we collect to:

- **Provide the App** – Create and deliver personalized pilates workouts based on your profile and daily check-ins

- **Authenticate your account** – Verify your identity and manage sign-in

- **Improve the App** – Analyze usage patterns to enhance features, fix bugs, and optimize performance

- **Communicate with you** – Send password reset emails, important updates, and (with your consent) promotional communications

- **Ensure security** – Protect against fraud, abuse, and unauthorized access

- **Comply with legal obligations** – Respond to lawful requests from authorities

---

3. Third-Party Services

We use the following third-party services that may collect or process your information:

3.1 Google Firebase (Google LLC)

We use Firebase for:

- **Firebase Authentication** – Account creation, sign-in, and password management

- **Cloud Firestore** – Storing your user profile, workout data, and video metadata

- **Firebase Storage** – Hosting and delivering workout videos

- **Firebase Analytics** – Understanding how the App is used (anonymized where possible)

Firebase's privacy practices are governed by [Google's Privacy Policy](https://policies.google.com/privacy). Firebase processes data in accordance with our instructions and applicable data processing agreements.

3.2 Google Sign-In

If you choose to sign in with Google, Google shares your name and email address with us. Google's use of your information is governed by [Google's Privacy Policy](https://policies.google.com/privacy).

3.3 Apple

If you make in-app purchases (e.g., subscriptions), payment processing is handled by Apple. We do not store your payment card details. Apple's privacy practices are governed by [Apple's Privacy Policy](https://www.apple.com/legal/privacy/).

---

4. Data Storage and Security

4.1 Where Your Data Is Stored

- **Cloud** – User profiles, workout metadata, and account information are stored in Firebase (Google Cloud). Data may be processed in the United States or other regions where Firebase operates.

- **Your device** – Workout history, preferences, and cached videos may be stored locally on your device (e.g., in UserDefaults and local files).

4.2 Security Measures

We implement industry-standard security measures, including:

- Encrypted connections (HTTPS/TLS) for all data in transit

- Secure authentication via Firebase Auth

- Access controls and authentication for our backend services

- Regular security reviews of our infrastructure

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

---

## 5. Data Retention

- **Account data** – Retained for as long as your account is active. You may request deletion at any time.

- **Workout and profile data** – Retained to provide the App's features. Deleted when you delete your account.

- **Analytics data** – Firebase Analytics may retain aggregated, anonymized data for up to 14 months by default.

- **Local data** – Stored on your device until you uninstall the App or clear app data.

---

6. Your Rights and Choices

Depending on your location, you may have the following rights:

6.1 Access and Portability

You may request a copy of the personal data we hold about you.

6.2 Correction

You may update your profile and preferences directly in the App. For other corrections, contact us.

6.3 Deletion

You may request deletion of your account and associated data by contacting us. We will process your request within a reasonable timeframe, subject to legal retention requirements.

6.4 Opt-Out of Analytics

You can limit ad tracking in your device settings (Settings → Privacy → Tracking on iOS). Note that we do not use your data for cross-app advertising.

6.5 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know, delete, correct, and opt out of the "sale" or "sharing" of your personal information. We do not sell your personal information. We may "share" data with service providers (e.g., Firebase) for the purposes described in this policy.

6.6 European Economic Area, UK, and Switzerland (GDPR/UK GDPR)

If you are in the EEA, UK, or Switzerland, you have the right to:

- Access your personal data

- Rectify inaccurate data

- Erase your data ("right to be forgotten")

- Restrict or object to processing

- Data portability

- Lodge a complaint with a supervisory authority

Our legal basis for processing includes: performance of our contract with you, your consent, and our legitimate interests in providing and improving the App.

---

7. Children's Privacy

The App is not intended for children under 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will delete it.

---

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer data, we take steps to ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses approved by the European Commission).

---

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

---

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

**Embody by Alexandra**

Email: alexandra@embodybyalexandra.com

---

11. Additional Disclosures

11.1 Health-Related Information

The modifications and conditions you provide (e.g., pregnancy, shoulder issues, lower back) may be considered health-related information. We use this solely to tailor your workouts and do not use it for advertising or share it with third parties for marketing.

11.2 Do Not Track

Some browsers offer a "Do Not Track" signal. We do not currently respond to Do Not Track signals, but we honor your choices within the App and your device settings.

11.3 No Sale of Data

We do not sell your personal information to third parties.

---