Privacy policy

We respect your privacy. Personal data is processed in accordance with the applicable laws of the Republic of Serbia, including the Law on Personal Data Protection, and, where applicable, with GDPR principles.

By using the Application you accept the processing described in this policy to the extent needed to provide the service (for example account and bookings).

The controller of personal data processing is:

• Brand / studio: Reformee Pilates
• Legal name: MIRJANA JOKIĆ PR PILATES STUDIO NS REFORMEE VETERNIK
• Registered address: Stevana Peći Popovića 46, Veternik
• Studio address: Stevana Peći Popovića 46, Veternik
• Tax ID (PIB): 115803910
• Company registration number (MB): 68648068
• Data protection contact: studio@reformee.rs
• Phone: 060 308 4646

Account and profile data: first name, last name, email, password (stored by the authentication system in hashed form and not available to the studio in readable form), optional phone, optional profile photo (avatar), role in the system (user / administrator), creation and update timestamps.

Reservation data: which session you booked, status (booked, attended, cancelled, late cancelled, no-show), booking and cancellation times. The studio may also enter guest reservations (guest name) without a user account.

Session packages: total and used session counts, class type, validity period, notes, and who assigned the package (administrator).

Administrative data: possible booking suspension, records of late cancellations and no-shows for managing booking access.

Technical data: session cookies required for sign-in (authentication), and local device storage related to the PWA install prompt (for example whether you dismissed the reminder). We use Vercel Web Analytics for aggregated page visits (without cookies and without Google Analytics).

• Providing the service — creating an account, sign-in, bookings, cancellations, displaying profile and packages (performance of a contract / steps at the user’s request).
• Communication — email confirmation, password reset, booking and cancellation confirmations, notice of class cancellation by the studio, welcome message after the first successful sign-in (legitimate interest / performance of a contract).
• Studio operations — attendance records, class capacity, package administration and suspensions (legitimate interest / contract).
• Security — preventing abuse and protecting the system (legitimate interest).
• Legal obligations — when regulations require retention or disclosure of data.

Online payments are not processed through the Application; card payment data is not collected by this system.

We obtain data directly from you (registration, profile, bookings) and from studio administrators (reservation statuses, packages, guest reservations where applicable, suspension).

We do not sell your data. We share it only with service providers necessary for the Application to operate:

• Supabase — authentication, database, access policies (RLS), and file storage (for example avatars and content images).
• Resend — sending transactional emails (when configured).
• Vercel — hosting and delivery of the web Application.

These providers may process data outside the Republic of Serbia, with appropriate safeguards in accordance with their terms and applicable law. Studio administrators have access to user data needed for operations (profile, reservations, packages).

If you upload an avatar, the file is stored and may be available via a public URL (within the configured bucket). Use only photos you have the right to use. Maximum size and allowed formats are limited in the Application.

We use necessary session cookies to keep you signed in (Supabase Auth). Without them you cannot remain signed in.

We do not show third-party marketing cookies. Vercel Web Analytics measures visits without cookies. Local storage (localStorage) may be used to remember whether you closed the PWA install prompt.

We retain account data while the account exists and while it is needed to provide the service. Reservations and statuses are not permanently deleted on cancellation (the status is updated), for history and studio administration.

You may request account deletion by emailing studio@reformee.rs. After identity verification, we will delete or anonymise the data within a reasonable time, unless longer retention is required for legal obligations or dispute resolution.

Under applicable law, you may have the right to:

• access your data;
• rectify inaccurate data (some of which you can update yourself in your profile);
• erasure (“right to be forgotten”), subject to legal limits;
• restriction of processing;
• data portability, where applicable;
• object to processing based on legitimate interest;
• lodge a complaint with the competent authority — the Commissioner for Information of Public Importance and Personal Data Protection (Republic of Serbia).

Send requests to: studio@reformee.rs. We may ask for identity verification before acting on a request.

The Application is not intended for children under 16 without parental / guardian consent. If we learn that we collected a child’s data contrary to the rules, we will take steps to delete it.

We apply technical and organisational measures (for example HTTPS encryption, access control, RLS policies in the database, separation of admin functions). No system is 100% secure; in case of an incident we will act in accordance with the law.

We may update this policy. The date of the latest change is shown at the top of the page. Material changes will be published on this page; we may notify you further if needed.

For all privacy questions:

• Email: studio@reformee.rs
• Phone: 060 308 4646
• Address: Stevana Peći Popovića 46, Veternik

You can read more about booking rules and account use in the Terms of use.