Privacy Policy

Personal Information

Contact and Profile Information:

• First and last name
• Email address, and whether you have confirmed it
• Date of birth (optional)
• Profile photo (optional)
• Preferred language (English or Spanish)
• Your time zone, so dates such as your workout days follow your own calendar

Health and Fitness Information (optional):

• Health conditions relevant to your training
• Physical activity level and exercise habits
• Activity frequency and types of physical activities
• Experience level
• Available equipment for workouts
• Personal fitness goals
• Additional notes about your training preferences

Account Information

• Account credentials (passwords are stored only as secure hashes)
• Subscription status and history
• Payment method (processed by the Apple App Store or Google Play; we never see your card details)

Coaching and Workouts (only if Daniela coaches you)

If Daniela coaches you personally, or invites you to one of her coaching programs, we also keep:

• Your invitation (the email address it was sent to and whether you accepted it) and your access: which program you are in, your start and end dates, and whether your access is active, paused or ended
• The workout plan Daniela prepares for you, her notes to you and her replies
• Your workout data and your consent decisions, described in Workout Data and Health Information below

Content You Post

• Comments you post on classes. Comments are public to other members, shown with your name and profile photo.

Usage Information

• Classes you watch, your progress and time watched in each class
• Sign-in activity, such as when your sessions were created or renewed

Technical Information

• IP address and basic request information, used to keep the Services secure (for example, to limit repeated sign-in attempts)
• Device identifiers (for purchase validation in the apps)
• Device type, browser or operating system, and app version

What We Save

• Your workout log: the exercises and sets you mark as done, the repetitions, weight or time you record, exercises you skip or swap for the easier option, and workouts you finish or skip, with the reason you choose (for example “No time” or “Not feeling well”).
• Your check-ins: how a workout felt, how hard it was, the wellbeing tags you choose (such as “Slept poorly” or “Low energy”), whether you felt any discomfort, and your notes for Daniela, including notes you add when you ask for a change to an exercise.
• Items for Daniela to review: when you report discomfort, change an exercise because of discomfort, or skip a workout because you are not feeling well, we flag it so Daniela sees it. She may also get an email that says only that a client left feedback, with no details.
• Daniela’s replies to your workouts and check-ins, and when you saw them.
• Your decisions: whether you agreed to us saving this information, which version of the text you agreed to, when, and on which platform; and your confirmation that you are 18 or older.

Why We Save It, and Your Consent

We use your workout data only to provide your coaching: so you can follow your progress and see your history, and so Daniela can adjust your plan and answer you. We save it only with your explicit consent, which you give in the Workouts privacy step by choosing “I agree” and confirming that you are 18 or older. If you choose “Not now,” you can still see your plan and the demo videos, but nothing about how your workouts went is saved. You can agree later at any time.

Workouts and coaching are for adults only. We do not knowingly save workout data of anyone under 18.

Who Can See It

Only you, Daniela and authorised members of The Body team can see your workout data. Other members never see it. We do not sell it, and we never use it for advertising, marketing or analytics. Our emails and our service providers’ logs never contain your check-ins, notes or other workout details. We keep a record of which members of the team opened your workout details, and when.

Not Medical Care, and Not Monitored in Real Time

Workouts are fitness coaching, not medical care, and your workout log is not a medical record. Daniela reads what you send, but not in real time. In an emergency, call your local emergency number (911 in Costa Rica and the US). Check with a healthcare professional before starting or changing your exercise.

Seeing, Deleting and Withdrawing

• You can read your workout history at any time in Workouts, including after a program ends.
• You can withdraw your consent at any time in Privacy & workout data (in Workouts on the website, and in the apps where Workouts is available). We then stop saving how your workouts go. What was already saved stays until you delete it, but while your consent is withdrawn Daniela and the team no longer see how you felt, how hard it was, your wellbeing tags, any discomfort you reported, your notes, or your reasons for skipping or changing a workout or an exercise. They may still see which workouts and exercises you completed, skipped or changed, and that an item is waiting for review, without its details.
• You can delete your workout history at any time in the same place. This permanently deletes your workout log, check-ins, notes, items to review and Daniela’s replies to them. The plan Daniela prepared for you stays. We keep a record that a deletion took place, without any of its content.

Provide and Maintain the Services

• Create and manage your account, and confirm your email address
• Process your subscription and verify your access to premium content
• Stream classes to you and remember where you left off
• Show your comments to other members
• Give the people Daniela coaches their workouts, demo videos, history and her replies, and let her prepare and adjust their plans

Personalize Your Settings

• Help our team understand your goals, experience and any injuries or limitations, so they can guide you safely (for example, when you ask in the comments)
• Provide the Services and our emails in your preferred language (English or Spanish)
• Remember your settings and preferences

Communicate With You

• Send transactional emails: welcome and email confirmation, password resets and password-change alerts, subscription confirmations, invitations to a coaching program, and notices that your workouts are ready
• Respond to your support and privacy requests

Operate and Protect the Services

• Understand which classes are watched (for example, view counts) to improve our content
• Detect and prevent abuse, fraud and unauthorized access
• Comply with legal obligations

Service Providers

We work with service providers who process information on our behalf to run the Services:

• Microsoft Azure: hosting of the Services and their database (including workout data), storage of profile photos, and technical logs, which never contain workout details.
• Brevo: delivery of our transactional emails (your name, email address and preferred language). Emails never contain your workout details.
• BunnyStream (bunny.net): video delivery, including workout demo videos. It receives your IP address, device and player information, and what you watch, in order to stream videos. It receives no workout data.
• RevenueCat: subscription management. It receives your purchase data and a random billing identifier created only for this purpose (not your name), plus your email address as an attribute so we can find your purchases when you contact support. RevenueCat may collect device identifiers for purchase validation. It receives no workout data.
• Apple App Store and Google Play: app distribution and payment processing for subscriptions.

Other Members

Comments you post on classes are visible to other members, together with your name and profile photo. Your workout data is never shown to other members.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders or government agencies).

Business Transfers

If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.

Strictly Necessary Cookies (website)

• the-body-auth-token: keeps you signed in. Expires after 1 hour and is renewed automatically while your session is active.
• the-body-refresh-token: renews your sign-in so you stay signed in for up to 30 days. Sent only to our sign-in endpoints.
• the-body-session: tells the website you are signed in on this browser, so it can open your classes without asking you to sign in again. Contains no personal information. Expires after 30 days.

These cookies cannot be read by scripts on the page and are deleted when you log out.

Preference Cookie (website)

• the-body-language: remembers the language you chose (English or Spanish), so pages open in it. Set only when you pick a language, open a link in a specific language, or sign in to an account that uses one. Contains no personal information. Expires after 1 year.

Local Storage (website)

• the-body-language: also remembers the language you chose. It stays in your browser until you clear your site data.
• A few display settings, such as whether your workout calendar shows a week or a month, and the time zone last sent for your account, so it is sent again only when it changes. They contain no workout details, and stay in your browser until you clear your site data.

On-Device Storage (apps)

The iOS and Android apps keep your sign-in tokens and language choice in your device’s secure storage (the iOS Keychain or Android Keystore). Sign-in tokens are removed when you log out.

Account Information

You can review and update your account information at any time in your profile settings in the app.

Subscription Management

You can manage or cancel your subscription in your Apple App Store or Google Play account settings.

Data Access and Deletion

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to, or ask us to restrict, our processing of your personal information
• Withdraw your consent to the processing of health information

You can read your workout history, withdraw your consent and delete your workout history yourself at any time in Privacy & workout data. To exercise any of these rights, you can also email us at contact@teamthebody.com. To delete your account, you can also follow the steps on Delete your account.

Marketing Communications

We do not send marketing emails. All communications are transactional or related to your account and the Services.