Privacy Policy

This Privacy Policy explains how Seforma ("Seforma", "we", "us") collects, uses, and protects your personal data when you use the Seforma mobile app and related services (the "Service"). Seforma is a platform that lets people in Cyprus discover fitness studios and book classes. We are the data controller for the personal data described here. You can reach us at support@seforma.app.

Data we collect

• Account details: your name, email address, city, chosen class categories, and notification preferences.
• Bookings: the classes and studios you book, including dates, times, and booking status.
• Reviews you write: your rating, your review text, and the display name shown beside it. Reviews are public — anyone using the app can read them. You can only review a studio you have actually been to and paid for. Reviews cannot be edited or deleted from within the app; email us at support@seforma.app and we will remove yours.
• Payments: when you pay in-app, your card is processed directly by our payment provider (Stripe). We do not receive or store your full card number. We keep the payment status, amount, currency, and a payment reference.
• Device & push token: if you enable notifications, a device push token so we can send you the notifications described below.
• Usage & diagnostics: product analytics and crash reports, used to keep the app working and improve it. Analytics are anonymous and are only collected if you consent in the app. Crash reports are linked to your account, so that we can tell whether a problem affects one person or everyone.
• Sign-in identifiers: if you sign in with Apple or Google, we receive a secure identifier (and, with Apple, your name on first sign-in) to create your account.

Your location (stays on your device)

With your permission, the app can use your device's location to show you fitness studios near you and to sort results by distance. We have designed this to be fully private:

• It never leaves your device. Your location is used only on your phone to measure distance to studios. It is never sent to Seforma's servers, never stored in our databases, and never saved between sessions.
• It is never shared. We do not share, sell, or disclose your location to studios, to our analytics or crash-reporting providers, or to any other third party. The studios you book see only your booking details, not your location.
• It is optional. If you decline the location permission, the app simply uses the city you chose in your profile instead. Everything keeps working.
• It is foreground only. We only ever request your location while you are actively using the app. We do not track your location in the background.
• You stay in control. You can grant or revoke the location permission at any time in your device's system settings.

Because your location is processed only on your device and never collected by us, there is no stored location data for us to access, share, or expose.

How and why we use it

• To provide the Service (create your account, show studios, take and manage your bookings, process payments), necessary to perform our contract with you.
• To send you notifications you have switched on, with your consent. See the section below for exactly which kinds we send.
• To keep the app secure and working (crash reports, abuse prevention), our legitimate interest.
• To understand and improve the app (anonymous analytics), only with your consent, which you can withdraw at any time in the app's settings.

Notifications we send

Push notifications are off until you turn them on, and each kind below has its own switch in the app under Settings, Notifications. Turning one off stops that kind entirely; you can turn any of them off at any time without affecting the others.

• Booking reminders: a reminder roughly an hour before a class you have booked and paid for.
• Class updates: a message from a studio about a class you have booked, and a notice if that class is cancelled.
• New studios: a note when a studio joins Seforma in the city saved on your profile. This is marketing, and it is off unless you switch it on.
• Offers: occasional promotions from studios, also targeted using the city saved on your profile. This is marketing, and it is off unless you switch it on.

The last two use the city in your profile so we only tell you about places you could realistically get to. They do not use your device location, which never reaches our servers at all (see the section above). You can withdraw consent for marketing notifications at any time in the app, or by turning off notifications for Seforma in your device settings.

Who we share it with

We use trusted service providers who process data on our behalf:

• Supabase: database, authentication, and storage.
• Stripe: payment processing (handles your card details directly).
• PostHog (EU region), anonymous product analytics, consent-gated.
• Sentry (EU region), crash and error reporting.
• Expo: delivery of push notifications.
• Apple / Google: only if you choose to sign in with them.

We share your booking details (such as your name/contact) with the studio you book, so they can prepare for your class. We do not sell your personal data.

Where your data is processed

We aim to process personal data within the EU/EEA. Some providers may process data outside the EEA; where they do, they rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

How long we keep it

We keep your account data for as long as your account is active. If you delete your account, we remove it after a short grace period (currently 30 days), after which it is permanently deleted. Some records may be kept longer where required by law (for example, payment records for tax purposes).

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (you can export your data in the app);
• correct inaccurate data (you can edit your profile in the app);
• delete your account and data (available in the app under Settings);
• restrict or object to certain processing, and withdraw consent (e.g. analytics or notifications) at any time;
• data portability.

To exercise any of these, use the in-app controls or email support@seforma.app. If you are in the EU, you also have the right to lodge a complaint with your data protection authority, in Cyprus, the Office of the Commissioner for Personal Data Protection.

Children

Seforma is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above and, for significant changes, notify you in the app.

Contact

Questions about this policy or your data: support@seforma.app.