Privacy Policy
Effective date: [10 September 2025]
Who we are. Posture Yoga Center LLC, registered in the United Arab Emirates at Unit 10B, Building 4, Golden Mile Galleria Mall, Palm Jumeirah, Dubai, UAE (“we”, “us”, or “our”), operates the POSTURE. The App mobile application and related websites/services (together, the “Services”). We are the data controller for personal data we process about you, unless stated otherwise.
We are licensed by the Dubai Department of Economy and Tourism (DED) in mainland UAE. This policy is designed to meet the UAE Federal Decree‑Law No. 45 of 2021 concerning the protection of personal data (“PDPL”).
1) What data we collect
We collect the following categories of information:
Account & identity – name, email address, phone number, password, profile photo.
Booking & purchase data – class bookings, attendance, membership and package details, gift cards, vouchers, refund records.
Payment information – we do not store full card numbers. Payments are processed by Mindbody payment provider (Stripe). We may receive tokens and limited card metadata (e.g., last 4 digits, card type) and payment status.
Wellness/health information (optional) – information you choose to share such as injuries, pregnancy status or other notes to tailor classes and ensure your safety. We only collect this with your consent.
Device & usage data – IP address, device identifiers (e.g., advertising identifier/push token), app version, language, crash logs, and interaction events for analytics and to improve performance.
Location data (optional) – city/approximate location to show nearby studios or class times. Precise GPS is only used with your permission.
Communications – messages, emails, support requests, feedback, and responses to surveys/marketing.
2) Why we use your data (purposes) and our legal bases
We process personal data for the following purposes and legal bases recognised by the PDPL (and equivalent free‑zone laws):
You can withdraw consent at any time in the app or by contacting us (this does not affect processing prior to withdrawal).
3) Cookies and mobile identifiers
Our app and website use cookies and similar technologies (SDKs, device IDs, push tokens) for functionality, analytics, and (if you opt‑in) marketing. Platform controls (e.g., iOS tracking permissions/Android advertising ID settings) and in‑app settings let you manage these choices.
4) Sharing your information
We share personal data only as needed for the purposes above:
- Service providers (processors): cloud hosting, analytics (e.g., Firebase/Crashlytics), messaging (email/SMS/push), Stripe (payments), Mindbody (booking/CRM), IT/security, customer support tools. Providers act on our instructions and under contracts that protect your data.
