Privacy policy

[legal name of the company], [registered address], is responsible for your data in Palee (the controller). Contact: [privacy contact email].

When you train at a box that uses Palee, the box decides about its own records of you (membership, bookings, payments, documents you sign) and Palee processes them on its behalf. For those records you can also contact the box.

• Account: your name, @handle, email, password (stored only as a hash), language and settings.
• Profile: your photo, bio, the boxes you belong to and the people you follow.
• Bookings and attendance: the classes you book, check-ins and waiting lists.
• Training: your journal, workouts, results and personal records.
• Wellness and body: what you enter yourself, such as sleep, mood, weight, measurements and body photos.
• Health and device data: only if you connect Health Connect, Apple Health or Garmin, the workouts and readings you allow (such as heart rate).
• Messages and community: what you write in chats, posts and comments.
• Payments: what you pay a box, how, and a card's brand and last four digits. Full card numbers go only to the payment provider.
• Documents: receipts and invoices for your payments, and documents you sign with a box (such as the date of a health certificate).
• Location: the area you choose to see what is near you and the places you search for. Palee does not track your location in the background.
• Training partners: if you use them, your training partner profile, your swipes, matches and messages, how you were verified and the reports you make. The details are in “Training partners” below.
• Technical: device and notification identifiers, sign-in sessions and security logs.

Palee does not ask for your date of birth, does not sell your data and does not use it for advertising.

• To provide the app you signed up for: your account, bookings, training, messages and payments (performance of our contract with you).
• To keep the business records the law requires, such as receipts and invoices (legal obligation).
• Health and device data, and optional features such as AI help, only with your consent, which you can withdraw at any time.
• To keep Palee safe and working, for example to prevent abuse and fix errors (legitimate interest).

If you connect Health Connect, Apple Health or Garmin, Palee reads only the data types you allow, to show your workouts and progress in your journal. This data is never sold or used for advertising, and your box sees it only if you choose to share it. You can disconnect a device at any time from your devices page, and delete what was imported from your journal.

Training partners is optional and only for people aged 18 or older. When you use it, Palee processes the following, to run the feature you asked for and to keep it safe.

• Your training partner profile: your photo, name, level, training times, goals, disciplines and a short line of your own, shown only to other verified people in training partners. Your card also shows how you were verified and, while you are a member, your box's name, which you can hide. Your gender is optional, is used only to respect gender preferences and is never shown.
• Distance: only an approximate step (2, 5, 10 or 25 km) between the centre of your main neighbourhood and the other person's. Palee never uses your live location for this.
• Verification, once per account: either an active membership at a box, or an active package with an independent coach, on Palee (we record which one verified you), or two people who vouch for you plus a check by the Palee team. We keep who vouched for you and the outcome.
• Mobile number (only when two people vouch for you): stored encrypted, one number per account, and used only to send you an SMS code and to stop one person from verifying several accounts. Nobody else sees it; the Palee team sees only part of it.
• Selfie with a code (only when two people vouch for you): a photo of you holding a 4-digit code written on paper. Only a member of the Palee team sees it, to compare it with your profile photo. There is no face recognition and no automatic decision: a person decides. The photo is deleted as soon as the decision is taken, and at the latest 7 days after you upload it; only the outcome is kept. If you disagree with the decision, you can ask for a second review by writing to [privacy contact email].
• Consent: the phone and selfie check starts only after you give your consent in the app. You can withdraw it at any time by withdrawing your verification request: your number, the selfie and your open requests to sponsors are deleted. You can also hide yourself from training partners in your settings, or delete your account.
• Reports: reports in training partners are reviewed by the Palee team, not by your box. If an account is suspended after reports, the people who vouched for it are told and cannot vouch for anyone for 60 days.

These services process personal data on Palee's behalf, only for the purpose shown.

Garmin Connect (Garmin Ltd.): if you connect your Garmin account, Garmin decides about its own part under its own privacy policy, and Palee about the data it receives.

Some of these services may process data outside the European Economic Area, for example in the United States. Such transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses. [To be confirmed for each service.]

• Your account: until you delete it. When you ask, it is deleted after 7 days, and until then you can undo it.
• A box's records of you, including signed documents and their certificates: while you are its member, and for 5 years after the box is deleted from Palee.
• Receipts and invoices: as long as tax law requires, even after your account is deleted.
• Your data file: 7 days after it is ready.
• Training partners: your profile, matches, messages and verification until you delete your account; the selfie until the decision, and at most 7 days after upload; SMS codes for at most one day.
• Backups: [period]; after that, deleted data is gone from them too.

You can use these rights at any time, free of charge. Most of them work directly in the app:

• Access and portability: “Download my data” in Settings gives you a copy of your data as JSON files.
• Correction: change your profile and settings yourself, or ask your box about its records.
• Erasure: delete your profile or your whole account in Settings.
• Withdrawing consent: disconnect a device or turn a feature off; this does not affect what was done before.
• Restriction and objection: write to [privacy contact email].
• Complaint: you can complain to the data protection authority where you live or work ([supervisory authority]).

Palee is for people aged 16 or older, and we ask you to confirm it when you sign up. If we learn that someone younger has an account, we delete it.

Your data travels encrypted, each box sees only its own records, and staff can see only what their role needs.

If we change this policy in a way that matters, we tell you in the app before the change applies.