Privacy Policy

Neutral Pilates Inc.

Effective Date: May 21, 2026

Neutral Pilates Inc. ("we," "us," or "our") operates the Neutral Point mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our App, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

By using the App, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Phone number (required)
• Profile photo (optional)

1.2 Payment Information

We use Stripe as our third-party payment processor. When you make a purchase, your payment details (such as credit card numbers) are collected and processed directly by Stripe. We do not store your full credit card number on our servers. We retain only transaction records necessary for bookings, session packages, and membership management.

1.3 Usage Data

We collect information about how you use the App, including:

• Class booking history
• Class attendance records
• Session package and membership purchase history
• Loyalty points activity (points earned, redeemed, and tier status)
• Coach reviews and ratings you submit
• Training content preferences

1.4 Device Information

We may collect:

• Device type and operating system
• Push notification tokens (to deliver class reminders and notifications). You may choose whether to receive push notifications. You can enable or disable notifications at any time through your device settings.
• App version
• Error reports including device platform, app version, and stack traces, sent to our own servers to diagnose and fix app issues.

1.5 Location Information

We do not collect precise GPS location data. If location-based features (such as displaying your nearest studio) are implemented in the future, we will update this policy and request your consent before collecting location data.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process class bookings across our studio locations
• Manage your session packages, memberships, and payment transactions
• Operate the loyalty points program, including calculating points earned, managing tier status, and processing point redemptions
• Send class reminders, booking confirmations, and service notifications via push notifications
• Display coach reviews and ratings to other members
• Provide training and educational content
• Improve the quality and reliability of our services, including developing and enhancing personalized features and recommendations
• Respond to your inquiries and support requests
• Comply with legal obligations

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share your information only with the following third-party service providers, strictly for the purposes of delivering our services:

Service Provider	Purpose
Stripe	Payment processing
Mindbody	Class booking and scheduling (Downtown location)
Wix	Class booking and scheduling (North York, Richmond Hill, Markham, and Pilates 8 locations)
Cloudinary	Profile photo storage
Expo	Delivering push notifications to your device. On Android devices, Expo relays push notifications via Google's Firebase Cloud Messaging (FCM) service.
Resend	Transactional email delivery
Supabase	Secure database hosting

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

We may also disclose your information if required by law, regulation, legal process, or governmental request.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Authentication: JSON Web Token (JWT) based authentication
• Password protection: Passwords are hashed using bcrypt before storage
• Database security: Row Level Security (RLS) policies enforced at the database level via Supabase
• Encryption in transit: All data transmitted between the App and our servers is encrypted using HTTPS/TLS
• API key protection: Third-party API keys are encrypted at rest using AES-256-GCM

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

5. Your Rights

Under PIPEDA and applicable privacy legislation, you have the right to:

• Access your personal information held by us
• Correct any inaccurate or incomplete personal information
• Withdraw consent for the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)
• Request deletion of your personal account and associated data, either directly through the App's account settings or by contacting us
• Opt out of push notifications at any time through your device settings

To exercise any of these rights, please contact us using the information provided in Section 10.

6. Data Retention

• We retain your personal information for as long as your account is active and as needed to provide our services.
• If you request account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial transaction records).
• Booking history, transaction records, and loyalty points ledger entries may be retained in anonymized form for business analytics and audit purposes.

7. Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us immediately.

8. Cookies and Tracking

• The App does not use cookies.
• We do not use third-party advertising trackers or analytics SDKs that track you across other apps or websites.
• We do not participate in cross-app or cross-site tracking.
• We do not use Apple's App Tracking Transparency (ATT) framework as we do not track users across third-party apps or websites for advertising purposes.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by other appropriate means. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Neutral Pilates Inc.
North York, Ontario, Canada
Email: dev@neutralpilates.com

This Privacy Policy was last updated on May 21, 2026.