Privacy Policy

Last updated: November 7, 2026


Summary

  • ZenFit is a chair yoga app. We collect a small profile (name, birthday, gender, goals, activity level), the sessions and programs you complete, and basic account information, so the app can recommend sessions and track your progress.
  • You can use ZenFit without an account: the app creates an anonymous account automatically. You can optionally connect an email address, or sign in with Apple or Google.
  • Your profile and progress are stored in the cloud (Supabase) and protected so only you can access them.
  • Apple Health and Health Connect data stays on your device. If you allow it, ZenFit reads your steps and weight to show them in the app and saves finished sessions as workouts. We do not upload this health data to our servers.
  • We use PostHog for analytics and Sentry for error tracking. Both can record session replays of how you use the app.
  • Reminders are scheduled on your device. We do not collect push notification tokens.
  • We never sell your personal data.
  • You can delete your account and all your data at any time in the app (Settings → your account card → Delete Account) or at zenfityoga.com/delete-account.

1. Introduction

This Privacy Policy explains how NOTJUST.DEV, SL ("Company", "we", "us" or "our"), a company registered at C/ Balmes 129bis 4º 2ª, 08008 Barcelona, Spain, collects, uses, shares and protects your information when you use the ZenFit mobile application ("App") and the website zenfityoga.com ("Website").

We process personal data in accordance with:

  • GDPR: General Data Protection Regulation (EU) 2016/679
  • LOPDGDD: Spanish Organic Law 3/2018 on the Protection of Personal Data
  • CCPA/CPRA: California Consumer Privacy Act and California Privacy Rights Act
  • ePrivacy Directive: Directive 2002/58/EC

2. Data Controller

NOTJUST.DEV, SL
C/ Balmes 129bis 4º 2ª, 08008 Barcelona, Spain
NIF: B26785477
Email: support@zenfityoga.com

For privacy questions or to exercise your rights, email support@zenfityoga.com with "Privacy Request" in the subject line.

3. Information We Collect

3.1 Information you provide

  • Account information: if you connect an email address, your email and a password (stored securely by our authentication provider, never readable by us). If you sign in with Apple or Google, we receive your name and email from that provider. If you use the App anonymously, we create an account with a random identifier and no name or email.
  • Profile: your first name, birthday, gender, goals (for example mobility or better sleep) and activity level, which you enter during onboarding. We use them to personalize recommendations.
  • Progress: the programs you start, the sessions you complete (with start and end times and program day) and, if you choose to give it, a thumbs-up or thumbs-down rating and a short reason.
  • Support requests: anything you send us, including feedback and screenshots sent through the in-app feedback form.

3.2 Information collected automatically

  • Usage data: how you use the App (screens viewed, sessions started and finished, buttons tapped, onboarding steps, paywall views), collected with PostHog, including session replays (see section 7).
  • Device information: device model, operating system and version, app version, language, and device identifiers.
  • Purchase data: subscription status and purchase history, processed through RevenueCat and the App Store or Google Play. We never see your card details.
  • Error and performance data: crash reports, diagnostics and session replays collected with Sentry, linked to your user identifier and, if you have one, your email address.
  • Advertising identifier: on iOS, only if you allow tracking in Apple's App Tracking Transparency prompt. Your choice is recorded with our purchase provider to measure where installs come from. You can change it at any time in iOS Settings.

3.3 Data that stays on your device

  • Apple Health / Health Connect: if you give permission, the App reads your steps and weight to display them and to estimate calories burned, and writes finished sessions as yoga workouts and mindful minutes. This data is read and written directly on your device and is not sent to our servers.
  • Calendar: if you choose to schedule sessions, the App adds events to your device calendar. We don't upload your calendar.
  • Reminders, widgets and Live Activities are created on your device.

3.4 Data we do not collect

We do not collect precise location, contacts, photos, microphone or camera data, or biometric data.

4. Anonymous Accounts

When you tap "Get Started", the App creates an anonymous account so your progress can be saved. Usage analytics, error reports and the profile and progress you enter are linked to that anonymous identifier. You can connect an email, Apple or Google account later and keep all your progress. If you delete the App without connecting an account, your progress may not be recoverable.

5. Legal Bases for Processing (GDPR)

ProcessingLegal basisGDPR article
Providing the App, your account, sessions and progressPerformance of a contractArt. 6(1)(b)
Subscriptions and paymentsPerformance of a contractArt. 6(1)(b)
Personalizing recommendations from your profilePerformance of a contractArt. 6(1)(b)
Analytics and improving the App (PostHog)Legitimate interestArt. 6(1)(f)
Session replays (PostHog and Sentry)Legitimate interestArt. 6(1)(f)
Error tracking (Sentry)Legitimate interestArt. 6(1)(f)
Apple Health / Health Connect, calendar, notifications, trackingConsent (your permission in the system prompt)Art. 6(1)(a)
Fraud prevention and securityLegitimate interestArt. 6(1)(f)
Legal complianceLegal obligationArt. 6(1)(c)

Where we rely on legitimate interest, we have weighed it against your rights. You can object at any time (see section 11).

6. How We Use Your Information

  • Provide the App: sessions, programs, progress, streaks and reminders
  • Recommend sessions that fit your goals and activity level
  • Manage subscriptions
  • Fix bugs and improve the App, using analytics and session replays
  • Answer support requests
  • Prevent fraud and abuse
  • Comply with the law

7. Session Replays

To find bugs and understand where the App is confusing, PostHog and Sentry can record session replays: a reconstruction of the screens you see and the taps you make.

  • PostHog: records screen interactions and navigation. Text and images on screen are not masked, so what you type (for example your name during onboarding) can appear in a replay. Passwords are always masked. Network request metrics (iOS) and app logs (Android) may be captured.
  • Sentry: records about 10% of sessions and sessions where an error occurs. Text and images are not masked. Error reports include your user identifier and, if you have one, your email.

Replays are used only to improve the App. To have your replays deleted, email support@zenfityoga.com.

8. Sharing and Processors

We do not sell or rent your personal data, and we do not share it for cross-context behavioral advertising. We use these service providers, under data processing agreements:

ProviderPurposeDataLocation
SupabaseDatabase and authenticationAccount, profile, progressUS
PostHogAnalytics and session replayUsage events, replays, device infoUS
SentryError tracking and session replayCrash reports, replays, user ID, emailUS
RevenueCatSubscription managementPurchase history, subscription status, device identifiers, tracking choiceUS
Apple / GoogleSign-in, app stores, paymentsAccount identifiers, purchase recordsUS
CloudflareDelivering session videosIP address and request logs (no account data)Global
VercelHosting the WebsiteIP address and request logsGlobal

We may also disclose information to comply with the law, to protect rights and safety, or in a merger or acquisition (you will be notified).

9. International Transfers

We are based in the EU (Spain). Some providers process data in the United States. These transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards at support@zenfityoga.com.

10. Data Retention

DataKept for
Account, profile and progressWhile your account is active; deleted within 30 days of a deletion request
Analytics (PostHog)Up to 12 months, then deleted or anonymized
Session replays (PostHog)30 days
Error reports and replays (Sentry)90 days
Purchase recordsAs required by tax and accounting law

Anonymous accounts that are inactive for 24 months may be deleted.

11. Your Rights (EU/EEA)

You have the right to access, correct, delete, restrict and port your data, to object to processing based on legitimate interest (including analytics and session replays), and to withdraw consent at any time (for example by turning off Apple Health access in iOS Settings). You can also complain to the Spanish Data Protection Agency (AEPD) (www.aepd.es) or your local authority.

Email support@zenfityoga.com to exercise your rights. We answer within 30 days and may need to verify your identity.

12. Your Rights (California)

California residents can ask to know, delete and correct their personal information, and will not be discriminated against for doing so. We do not sell or share personal information. Categories we collect: identifiers (name, email, account and device IDs), internet activity (usage data, session replays), commercial information (subscriptions) and characteristics you provide (birthday, gender). Email support@zenfityoga.com or use zenfityoga.com/delete-account. We answer within 45 days.

13. Security

We encrypt data in transit and at rest, restrict access so each user can only read their own data (row-level security), and require data processing agreements from our providers. No system is perfectly secure, but we work to protect your data and will notify the authority within 72 hours, and you without undue delay, if a breach puts your rights at high risk.

14. Children

ZenFit is made for adults. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, contact support@zenfityoga.com and we will delete it.

15. The Website

zenfityoga.com uses PostHog analytics in cookieless mode: we measure page views and button clicks without setting cookies or storing identifiers on your device. When you open a download link, we record the campaign and source (for example "TikTok") to learn which posts bring people to the App. The Website does not use advertising cookies.

16. Changes

We may update this policy. We will change the date at the top, and for important changes we will tell you in the App. Where consent is needed, we will ask again.

17. Contact

NOTJUST.DEV, SL
C/ Balmes 129bis 4º 2ª, 08008 Barcelona, Spain
NIF: B26785477
Email: support@zenfityoga.com