Privacy Notice

1. Who We Are

À La Gym LLC ("À La Gym", "we", "us") operates the À La Gym website and app. We act as the data controller for personal data collected through the Service, except where our payment processor Paddle acts as the Merchant of Record for a transaction.

2. What We Collect

• Account data: name, email address, login credentials.
• Fitness data: assessment responses, goals, workout history, equipment, preferences, notes you submit.
• Support data: messages you send us and their attachments.
• Usage & device data: pages visited, features used, IP address, browser and device identifiers, crash and error logs.
• Cookies: essential session cookies. Optional analytics cookies only where you consent.

Payment-related data (card number, billing address, tax location) is collected by our Merchant of Record, Paddle, and handled under Paddle's privacy notice.

3. Why We Use It

• Provide the Service — create your account, deliver workouts, remember your preferences (legal basis: performance of the contract).
• Support — respond to your questions and troubleshoot (legal basis: legitimate interests / contract).
• Security & fraud prevention — detect abuse, protect accounts (legitimate interests, legal obligation).
• Product improvement — understand aggregate usage to make the Service better (legitimate interests).
• Communications — service messages (contract) and marketing where you've opted in (consent).
• Legal compliance — retain records where required by law.

4. Who We Share It With

• Merchant of Record (Paddle): for sale of memberships and one-time orders, subscription management, payments, tax compliance, invoicing, and refunds.
• Service providers / subprocessors: hosting, database, authentication, email delivery, analytics, error monitoring, and customer support tooling.
• Professional advisers: legal, accounting, and insurance where necessary.
• Authorities: when required by law, subpoena, or to protect rights and safety.

We do not sell your personal data.

5. International Transfers

Your data may be processed in the United States and other countries where our providers operate. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Retention

We keep personal data only as long as needed for the purposes above or as required by law. Account and fitness data is retained while your account is active and for a reasonable period after closure for legal, accounting, and dispute-resolution purposes, then deleted or anonymized.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (right to erasure).
• Restrict or object to certain processing.
• Portability of data you provided.
• Withdraw consent at any time (without affecting past processing).
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us through your account or the support link on our site. We aim to respond within one month.

8. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and audit logging — to protect personal data. No system is perfectly secure; help us keep your account safe by using a strong password and reporting anything suspicious.

9. Cookies

We use essential cookies to keep you signed in and remember preferences. Optional analytics cookies (used only with your consent where required) help us understand how the Service is used. You can manage cookies in your browser settings.

10. Children

À La Gym isn't directed at children under 13 (or under 16 in the EEA/UK). We don't knowingly collect personal data from them.

11. Changes

We may update this notice as the Service evolves. Material changes will be signaled by updating the "Last updated" date and, where appropriate, through in-app notice.

12. Contact

À La Gym LLC — reach us through your account or the support link on our site.