Privacy Policy

Effective October 4, 2026

1. Who We Are

The Pilates Project LLC operates the TPP digital platform, mobile app, and Bali studio. We are the data controller for all personal information collected through our services.

2. Information We Collect

Account information: name, email, subscription details. Payment information: processed securely by Stripe, we never store card details. Device and usage data: IP address, device type, pages viewed, session data. Workout activity: class history, favourites, program progress. Communications: support enquiries and messages. How you found us: the campaign or link you arrived from (for example an Instagram ad), recorded from the web address you landed on, and the page you first visited.

3. How We Use Your Information

To deliver and personalise your experience. To process payments and manage your subscription. To communicate updates, support, and where you have consented, marketing. To improve platform performance via analytics. To meet legal and security obligations.

4. Legal Basis for Processing

Consent for marketing, optional features and, in the UK, the EU and the EEA, advertising cookies. Contractual necessity for delivering your subscription. Legitimate interests for platform improvement and security. Legal obligation for compliance requirements.

5. How We Share Information

We share data only with trusted service providers operating under strict confidentiality: Supabase Inc for database and authentication, Stripe Inc for payment processing, Amazon Web Services Inc for cloud infrastructure, PostHog Inc for product analytics, Vercel Inc for website hosting and cookieless page statistics, Rewardful for referral tracking, and Meta Platforms for measuring our Instagram and Facebook advertising (see Cookies and Advertising). We never sell or rent your data.

6. Cookies and Advertising

Our website uses a small number of cookies. Needed to run the site: your sign in, the country you are visiting from (so we know whether to ask before using advertising cookies) and the cookie choice you make. How you found us: when you first arrive from a campaign link, we store the campaign details and the page you landed on in a cookie on our own domain for 90 days, and attach them to your account if you start a free trial. This tells us which campaigns bring members to TPP. Meta Pixel: with your permission where it is required, our website uses the Meta Pixel, which sets Meta cookies and tells Meta when you view a page, view the TPP Challenge, choose a plan or start a free trial. When you start a free trial or your first payment goes through, our server also tells Meta directly (the Meta Conversions API), sending your email address only in an irreversible scrambled (hashed) form, an internal account reference and the price. Meta uses this to measure and improve our ads and acts as a joint controller with us for this data; see Meta's Privacy Policy at facebook.com/privacy/policy. If you are in the UK, the EU or the EEA, we ask before using the Meta Pixel or the campaign cookie, and nothing is sent to Meta about you unless you accept. Elsewhere we use them by default. Wherever you are, you can change your choice at any time below, or ask us to stop by emailing hello@wearetpp.com. Our page statistics (Vercel Web Analytics) use no cookies.

Your current choice: not made.

7. Data Retention

We retain your data for as long as your account is active or as required by law. On deletion requests, personal data is removed or anonymised within 30 days. Backup copies may persist up to 90 days.

8. Security

We use encryption in transit and at rest, secure authentication, and regular audits. Access is restricted to authorised personnel under confidentiality agreements.

9. Your Rights

Depending on your location, you may have the right to access, correct, delete, or port your data, and to withdraw consent or object to processing. Contact us at hello@wearetpp.com to exercise these rights.

10. Children's Privacy

Our services are not directed at children under 16. If we become aware of data collected from a minor, it will be deleted promptly.

11. International Transfers

Data may be processed across jurisdictions. All transfers follow international safeguards including Standard Contractual Clauses where required.

12. Updates

We may update this policy periodically. Material changes will be communicated via the app, website, or email.

13. Contact

hello@wearetpp.com The Pilates Project LLC, 30 N Gould Street, Sheridan, WY 82801, USA