Privacy Policy

This Privacy Policy explains how Seforma ("Seforma", "we", "us") collects, uses, and protects your personal data when you use the Seforma mobile app and related services (the "Service"). Seforma is a platform that lets people in Cyprus discover fitness studios and book classes. We are the data controller for the personal data described here. You can reach us at support@seforma.app.

Data we collect

• Account details: your name, email address, city, chosen class categories, and notification preferences.
• Bookings: the classes and studios you book, including dates, times, and booking status.
• Payments: when you pay in-app, your card is processed directly by our payment provider (Stripe). We do not receive or store your full card number. We keep the payment status, amount, currency, and a payment reference.
• Device & push token: if you enable notifications, a device push token so we can send you booking-related messages.
• Usage & diagnostics: anonymous product analytics and crash reports, used to keep the app working and improve it. Analytics are only collected if you consent in the app.
• Sign-in identifiers: if you sign in with Apple or Google, we receive a secure identifier (and, with Apple, your name on first sign-in) to create your account.

How and why we use it

• To provide the Service (create your account, show studios, take and manage your bookings, process payments), necessary to perform our contract with you.
• To send booking-related notifications (e.g. a studio's message about your class), with your consent to notifications.
• To keep the app secure and working (crash reports, abuse prevention), our legitimate interest.
• To understand and improve the app (anonymous analytics), only with your consent, which you can withdraw at any time in the app's settings.

Who we share it with

We use trusted service providers who process data on our behalf:

• Supabase: database, authentication, and storage.
• Stripe: payment processing (handles your card details directly).
• PostHog (EU region), anonymous product analytics, consent-gated.
• Sentry (EU region), crash and error reporting.
• Expo: delivery of push notifications.
• Apple / Google: only if you choose to sign in with them.

We share your booking details (such as your name/contact) with the studio you book, so they can prepare for your class. We do not sell your personal data.

Where your data is processed

We aim to process personal data within the EU/EEA. Some providers may process data outside the EEA; where they do, they rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

How long we keep it

We keep your account data for as long as your account is active. If you delete your account, we remove it after a short grace period (currently 30 days), after which it is permanently deleted. Some records may be kept longer where required by law (for example, payment records for tax purposes).

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (you can export your data in the app);
• correct inaccurate data (you can edit your profile in the app);
• delete your account and data (available in the app under Settings);
• restrict or object to certain processing, and withdraw consent (e.g. analytics or notifications) at any time;
• data portability.

To exercise any of these, use the in-app controls or email support@seforma.app. If you are in the EU, you also have the right to lodge a complaint with your data protection authority, in Cyprus, the Office of the Commissioner for Personal Data Protection.

Children

Seforma is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above and, for significant changes, notify you in the app.

Contact

Questions about this policy or your data: support@seforma.app.