App Privacy Policy

When you create an account: your name, your email address and a password. We store only a protected form of the password, and nobody at PCI can read it. Studio staff can also create an account for you, using your name, your email address and your phone number if you give it.

If you choose to add it to your profile:

• your phone number
• a photo, which you pick from your phone's library
• an emergency contact: a name, a phone number and, if you wish, their relationship to you
• medical notes, which are health information. You decide whether to add any, and what they say. Nothing in the app requires them.

If you hand in a proof of enrolment for the student discount: the image you upload, and the studio's decision about it.

As you use the app:

• your bookings, waitlist places, attendance and cancellations, and your packages and credits
• your notification settings
• if you allow notifications, a token that lets us reach your phone
• the screens you open, the classes you view and the bookings you try to make, including ones that fail, with the app's version and your phone's platform, linked to your account
• anything you write in Send feedback, with the screen you were last on, the app's version and the platform

If the app crashes or hits an error: the error's message and technical details, the sessions it happened in, an ID for that installation of the app, your device model and operating system, and the app's version. These reports do not include your name, your email address or your account ID.

Technical records: our hosting provider records sign-ins and requests, as most online services do. These records can include your IP address and device details.

The app shows no advertising, and it does not track you across other companies' apps or websites.

• Face ID: if you turn on the app lock, your phone checks your face. We never receive your face data.
• Your photo library: you choose one image at a time, and only that image is uploaded.
• Your calendar: "Add to calendar" fills in an event for you to review. On iOS 17 and later the app does not need access to your calendar. On earlier versions it asks first.
• Saved information: the schedule, your bookings and your packages are saved on your phone for up to seven days, so you can check them with no connection. Your medical notes and emergency contact are not saved this way.

• to run your account, and to book, move, cancel and manage your classes and packages
• to send you the emails and notifications the service needs, such as a booking confirmation, a waitlist offer, a cancelled or moved class, or a class reminder
• to reach your emergency contact if your safety calls for it
• to know about injuries, conditions or allergies you've told us about, and to help first responders in an emergency, as described under "Who can see it"
• to decide whether you qualify for the student discount
• to find and fix problems, and to learn how the app is working during the test, including whether members can book without help
• to read and respond to your feedback
• to keep a record of what staff do in the system, so that it can be checked

We don't sell, trade or rent your information, and we don't use it for advertising. We use your medical notes only for the two purposes above.

Other members can't see your details.

Instructors see the name, photo and booking status of the people booked into classes they teach. They do not see your medical notes, your emergency contact, or whether you are a student.

The studio's owner and administrators can see and change member accounts, including medical notes and emergency contacts, and they review proofs of enrolment. The owner alone can read feedback, the record of app use and the staff activity record.

The people who maintain the app can reach all of it when the work requires, and they also look after the backups. Feedback is emailed to the person who reads it for PCI.

If you teach at PCI, your name and photo appear on the schedule.

First responders. We don't hand over your medical notes as a document. In an emergency, for example if you are incapacitated, staff may tell first responders what your notes say, as far as it may be necessary for your treatment.

We may also disclose information when the law requires it.

• Supabase hosts the database, files and sign-in. It handles everything described above, apart from crash reports and what stays on your phone. Stored in Canada.
• Resend sends the app's email. It handles your email address, your name and the content of each message, such as a class's name, time and location. United States.
• Expo delivers push notifications, and receives crash reports. It handles your phone's notification token, the words of each notification (a class's name, time and location), and the crash reports described above. No name or email. Based in the United States. It doesn't say where it stores this.
• Apple delivers notifications to iPhones, and runs TestFlight. It handles the notification on its way to your phone. Apple handles TestFlight under its own terms, and gives us your tester details and any feedback or crash reports you send through it. United States.
• Google (Gmail) is the studio's email. It handles anything you email to the studio. United States.

These providers can process information outside Canada, where it is subject to the laws of the country it is in.

Each provider handles your information under its own terms, which commit it to security measures and to confidentiality. We share with them only what they need to do the work above, and we expect them to protect your information as well as this policy does.

• Your account, profile, bookings, packages and feedback: until you delete your account or ask us to.
• The record of screens, classes and booking attempts: 180 days.
• Our copy of each email and notification: 30 days.
• A proof of enrolment image: deleted 30 days after it stops counting. The record of the studio's decision stays until your account is deleted.
• Backups: up to 30 days. They are encrypted.

We are still confirming these periods during the test. If one changes, this policy will change with it, with a new date.

An account that studio staff deactivate is not deleted. It is kept until you or the studio delete it.

See or correct your information. Most of it is in the app, under Account. To see or correct anything else, email us, and we'll answer within 30 days.

Change your mind. You can remove your photo, emergency contact, medical notes or phone number at any time, under Account → Profile. You can change your notifications under Account → Notifications, or turn them off in your phone's settings. The app has no setting to stop recording which screens you use. If you object to it, contact us, or delete your account.

Delete your account. Go to Account → Delete account, or email us and we'll do it for you. This deletes your profile and photo, your emergency contact and medical notes, your proofs of enrolment, your packages and credits, your bookings past and upcoming, your feedback, your notification tokens and your record of app use. It can't be undone, and it does not refund anything: refunds are between you and the studio.

Some things remain after you delete your account:

• Backups hold your details for up to 30 days, and then they are gone from those too.
• A record that staff acted stays in the activity log: who did it, when, what they did and to which record. The copies of your details in that log are blanked. A note also stays that the account was deleted, with its ID and any credits or passes it gave up.
• Email already sent stays in the mailboxes it reached.
• Crash reports already sent to Expo, which don't name you.
• If you teach at PCI, your instructor listing stays on the schedule, no longer linked to your login.

If you are the studio's only remaining owner, the app can't delete your account until another owner is in place.

The app is for people aged 16 and over. If you are younger, please don't create an account.

Power Conditioning Inc. is responsible for your personal information. Ryan Power, the studio's owner, is accountable for how we handle it. Send any question, request or concern to powerconditioninginc@gmail.com or call 709-427-1747. If we can't resolve it, you can contact the Office of the Privacy Commissioner of Canada.

If this policy changes, the new version will be posted at this address with a new date. If a change affects what we do with information you've already given us, we'll tell you in the app or by email.