Privacy Policy

Last updated: January 2025

This Privacy Policy explains how Renwella Ltd (“Renwella”, “we”, “us”) collects, uses, and protects your personal data when you use renwella.com and our companion app. We are committed to handling your information transparently and in line with the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA) where they apply to you.

1. Who is responsible for your data

Renwella Ltd is the data controller. For any privacy question or to exercise your rights, contact us at privacy@renwella.com.

2. What we collect

• Quiz answers — your goals, age band, gender, height, current and target weight, activity level, mobility limitations, and the general health considerations you optionally share. This helps us personalise your plan.
• Account data — your email address and authentication details.
• Subscription & billing data — your plan, status, and renewal dates. Card details are handled entirely by our payment processor; we never see or store your full card number.
• Consent records — your marketing and auto-renewal choices, with a timestamp, IP address, and browser information, kept as proof of consent.
• Usage & progress — lessons completed, streaks, and any optional weigh-ins you enter.
• Analytics & device data — pages viewed, funnel steps, approximate location (from IP), device and browser type.

3. Sensitive information

Some data you provide (such as weight and general health considerations) may be considered health-related. We use it only to tailor your fitness plan and keep exercises safe. We do not use it for advertising, and we do not sell it. Where required, we rely on your explicit consent to process this information, which you may withdraw at any time.

4. How we use your data (and our legal bases)

• To provide your personalised plan and run the app — performance of a contract.
• To process payments and manage your subscription — performance of a contract.
• To send you service emails (receipts, account notices) — legitimate interests / contract.
• To send marketing emails — only with your consent, which you can withdraw any time via the unsubscribe link.
• To measure and improve our product and advertising — consent (for non-essential cookies/pixels) and legitimate interests.
• To comply with legal obligations and prevent fraud — legal obligation / legitimate interests.

5. Who we share data with

We share the minimum necessary data with trusted processors who help us run the service, including: our hosting and database provider, our payment processor (as Merchant of Record for billing and tax), our email provider, and our analytics and advertising partners. Each is bound by contract to protect your data. We never sell your personal data. Some partners may process data outside your country; where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

6. Cookies & tracking

We use essential cookies to run the site and, with your consent, analytics and advertising technologies (for example, product analytics and advertising pixels). See our Cookie Policy for details and how to change your choices.

7. How long we keep data

We keep your account and plan data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution needs. Consent records are retained as long as needed to evidence compliance. You can ask us to delete your data sooner (see below).

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your data; to object to or restrict certain processing; and to withdraw consent. California residents may request details of data collected and opt out of “sharing” for cross-context behavioural advertising. To exercise any right, email privacy@renwella.com. You also have the right to complain to your local data protection authority.

9. Security

We use industry-standard measures including encryption in transit, access controls, and row-level security so that you can only access your own records. No system is perfectly secure, but we work hard to protect your information.

10. Children

Renwella is intended for adults. It is not directed at anyone under 18, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or in the app. The “last updated” date above always reflects the current version.

12. Contact

Renwella Ltd — Registered address on file — update in src/config/site.config.ts. Email: privacy@renwella.com.

This template is provided for implementation convenience and is not legal advice. Please have it reviewed by a qualified lawyer before launch and fill in your registered company details.