Privacy Policy

1. Scope and who we are

This Privacy Policy applies to Bebeca Health, https://www.bebecahealth.com, member accounts, movement classes, live sessions, questionnaires, the wellness journal, support, and related services (together, the “Service”). Bebeca Health is operated by Bebeca Iglesias. In this policy, “Bebeca Health,” “we,” “us,” and “our” refer to the operator of the Service.

Questions or privacy requests may be sent to contact@bebecahealth.com. This policy should be read together with our Consumer Health Data Privacy Notice and Cookie Policy.

2. Information we collect

We collect information you provide, information created when you use the Service, and limited technical information needed to operate and protect it.

• Account information: name, email address, encrypted authentication credentials, email-verification status, account status, sign-in timestamps, and account preferences.
• Profile information: display name, profile photo, biography, time zone, movement preferences, practice goals, preferred class duration, and whether you choose to make profile information public.
• Membership and transaction information: membership plan, billing interval, subscription status, renewal or cancellation status, Stripe customer and subscription identifiers, and transaction records. Bebeca Health does not receive or store full payment-card numbers.
• Practice information: saved classes, favorites, video progress, completion status, live-class reservations, attendance, and participation history.
• Wellness information: questionnaire answers and scores you choose to save and share, height, weight entries, goals, and related wellness preferences. Additional detail appears in the Consumer Health Data Privacy Notice.
• Live-class information: participant identity, meeting permissions, attendance events, camera and microphone device choices, and audio or video transmitted during an active class. We do not record live classes unless participants receive a separate, clear notice before recording begins.
• Content and communications: support requests, contact messages, newsletter preferences, files or images you upload, and communications about your account or the Service.
• Technical information: IP address, browser and device information, timestamps, referral URL, security events, error logs, and service diagnostics. Video playback providers may also process viewing and engagement information.

3. How we use information

We use information only for legitimate service, safety, communication, and legal purposes.

• Create and secure accounts, authenticate users, maintain profiles, and remember settings.
• Provide recorded and live classes, honor reservations, track practice progress, and show saved content.
• Process memberships, payments, renewals, billing changes, and cancellations.
• Calculate and store questionnaire or weight-history results at your direction, and allow authorized Bebeca Health administrators to review information you intentionally share.
• Send account confirmations, password-reset messages, class or service notices, and requested support responses.
• Operate, debug, protect, and improve the Service; detect fraud, abuse, unauthorized access, and security incidents.
• Comply with law, enforce our Terms of Use, and establish or defend legal claims.

4. When we disclose information

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not use third-party advertising networks.

We disclose information only as described below and only to the extent reasonably necessary.

• Bebeca Health personnel and instructors: authorized administrators may access account, membership, reservation, progress, and expressly shared questionnaire information to operate classes and support members. Instructors receive information needed to conduct a class.
• Supabase: authentication, database, private file storage, access controls, and related infrastructure.
• Stripe: checkout, payment processing, subscription management, fraud prevention, invoices, and the customer billing portal.
• Mux: recorded-video upload, storage, playback, thumbnails, captions, and video-quality or engagement diagnostics.
• LiveKit: secure interactive live-class audio, video, screen sharing, meeting permissions, and connection diagnostics.
• Resend: delivery of account confirmation, password-reset, support, and other service emails.
• Vercel: website hosting, content delivery, security, and operational logs.
• Professional advisers and authorities: lawyers, accountants, insurers, courts, regulators, or law enforcement when reasonably necessary and legally permitted.
• Business changes: a successor may receive relevant information as part of a merger, financing, reorganization, or sale, subject to applicable law and continued protection of the information.

5. Legal grounds and your instructions

Depending on where you live, we process information to perform our agreement with you, based on your consent, for our legitimate interests in operating and securing the Service, or to comply with legal obligations. Where consent is the legal basis, you may withdraw it for future processing. Withdrawal does not affect processing already completed lawfully.

Saving a questionnaire result, sharing it with Bebeca Health, enabling a camera or microphone, joining a live class, or submitting a contact form is initiated by your choice. You may stop using those features, cancel attendance, or contact us about deletion as described below.

6. Retention

We keep information only as long as reasonably needed for the purposes described here, including to provide the Service, maintain security and audit records, comply with tax or accounting duties, resolve disputes, and enforce agreements.

• Account and profile information is generally retained while your account is active and for a limited period afterward so deletion, fraud-prevention, and legal requests can be completed.
• Membership and transaction records may be retained for the period required by tax, accounting, chargeback, and financial-services rules.
• Practice progress, saved results, reservations, and weight history remain available until you delete the relevant information, request account deletion, or retention is no longer necessary.
• Support messages and related delivery records are kept only as long as needed to resolve the request, prevent abuse, and document the response.
• Security and service logs are retained for limited operational periods that may vary by provider and incident needs.
• Records of legal consent are retained as evidence of the version accepted and may remain after account deletion where reasonably required to document compliance or resolve a dispute.

7. Security and account protection

We use administrative, technical, and organizational safeguards designed to protect information, including managed authentication, access controls, row-level database security, encrypted network connections, private storage, limited administrator permissions, and short-lived access tokens for protected video and live classes. No online system can guarantee absolute security.

Use a unique password, keep access links confidential, sign out on shared devices, and contact us promptly if you believe your account has been accessed without permission.

8. International processing

Bebeca Health serves users online and uses providers that may process information in the United States and other countries. Privacy laws in those locations may differ from those where you live. Where required, we and our providers use legally recognized safeguards for international transfers.

9. Your privacy choices and rights

You may update profile information in your account, manage billing through the secure Stripe portal, change communication preferences, or contact contact@bebecahealth.com to request access, correction, deletion, or a portable copy of eligible information. We may need to verify your identity before completing a request. Some information may be retained where law permits or requires it.

Depending on your location, you may also have rights to know categories and specific pieces of information collected, correct inaccurate information, delete information, limit certain uses of sensitive information, withdraw consent, appeal a denied request, and receive equal service without discrimination for exercising privacy rights. An authorized agent may submit a request where applicable, subject to verification.

Because we do not sell personal information or share it for cross-context behavioral advertising, there is no sale or advertising-sharing opt-out to process. A Global Privacy Control signal therefore does not change how the Service operates today. If these practices change, we will update the Service and provide required controls before the change takes effect.

10. Children

The Service and member accounts are intended for adults age 18 or older and are not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child provided information, contact contact@bebecahealth.com so we can investigate and delete it as appropriate.

11. Changes to this policy

We may update this policy as the Service, providers, or laws change. The version and effective date appear at the top. We will provide notice appropriate to the change. If a change materially affects how required account or wellness information is handled, signed-in users will be asked to review and accept the new version before continuing to use account features.

12. Contact

Privacy questions and requests: contact@bebecahealth.com. You may also use the Contact page or WhatsApp support at +1 (336) 988-2405. Please do not send detailed medical information through ordinary email or WhatsApp.