Privacy policy

This Privacy Policy explains how Fitness Booking, Inc. ("Corvi," "we," "us") collects, uses, and shares information when you use the Corvi apps for iPhone and Android, the web app at app.getcorvi.com, and getcorvi.com (together, the "Service").

The short version:

• We collect what the Service needs to work: your account, what you post, the classes you log, and basic device and usage data.
• We do not sell your personal information, and we do not share it with other companies for their advertising.
• We do not track you across other companies' apps or websites.
• Your precise location is used only while you look for nearby studios. We don't store it.
• You can download or delete your data at any time.

Information you give us

Account information. Your name, email address, handle, and password (stored as a one-way hash). If you sign in with Apple or Google, we receive the name and email address that service shares with us, plus an account identifier, and from Google, your profile photo.

Profile information. Anything you add to your profile, such as a photo, banner image, bio, and weekly class goal, plus your privacy and messaging settings.

Content you post. Posts, photos, comments, likes, reposts, quote posts, bookmarks, mentions, and ratings and reviews of instructors.

Classes you log. When you check in to a class, we record the studio, location, class, instructor, and time. We use this to build your history, streaks, milestones, and goals.

Messages. Direct and group messages you send, including photos and reactions. Messages are encrypted in transit but are not end-to-end encrypted. We do not read your messages, except when needed to investigate a report, enforce our Terms, keep people safe, respond to a support request you make, or comply with the law.

Social connections. Who you follow, who follows you, follow requests, and who you block or mute.

Instructor profile claims. If you are an instructor and claim your profile, the information you give us to confirm it's you.

Support and reports. What you send us when you contact us or report content or another user.

Information we collect automatically

Location. If you allow it, the app uses your device's precise location while it is open to show studios, classes, and instructors near you. Your coordinates are used to answer that search and are not saved to your account. We never collect location in the background. You can turn location off in your device settings and search by city instead.

We also estimate your general location (city, region, and country) from your IP address when you sign in. We use this to secure your account, for example to spot sign-ins from unusual places.

Device information. Device type, operating system, app version, and a push notification token if you turn notifications on.

Usage information. How you use the Service, such as screens and profiles you view, searches, and the actions you take. We collect this ourselves and store it on our own systems. We do not use third-party analytics or advertising SDKs.

Sign-in records. IP address, browser or device type, sign-in method, and whether the sign-in succeeded.

Cookies. The web app uses cookies to keep you signed in and secure your session. We do not use advertising or cross-site tracking cookies.

Information about instructors and studios from public sources

Corvi lists fitness studios, class schedules, and instructors so members can find classes. We collect this from studios' public booking pages and websites. For instructors, this can include name, photo, bio, and public social media links. If you are an instructor, you can claim your profile to manage it, or email privacy@getcorvi.com to correct it or ask us to remove it.

How we use information

• To run the Service: create your account, show your profile and posts, log classes, power streaks and goals, deliver messages, and send notifications you've turned on.
• To show you relevant content, such as nearby studios, classes, instructors, and posts.
• To keep the Service safe: secure accounts, prevent fraud and spam, review reports, and enforce our Terms.
• To improve the Service: fix bugs and understand which features people use.
• To show ads, as described below.
• To communicate with you about your account, security, and changes to the Service or these policies.
• To comply with the law.

Advertising

Corvi is free, and we plan to support it with ads. Any ads in Corvi are placed by us. When we choose which ads to show you, we may use information inside Corvi, such as the types of classes you take and your general area (city level). This information stays with us.

Advertisers do not receive your name, email address, profile, posts, messages, precise location, or device identifiers. We give advertisers aggregate reports only, such as how many people saw or tapped an ad. Ads are labeled as ads.

We don't use your information to track you across other companies' apps or websites, and we don't use data from other companies to target ads to you. If that ever changes, we'll update this policy first, ask your permission where the law or your device requires it (for example, Apple's App Tracking Transparency prompt), and give you a way to opt out.

How we share information

With other users. Your name, handle, and profile photo are visible to other users. Your posts, class check-ins, and other activity are visible according to your privacy settings (public, followers only, or private). Instructor ratings and reviews you post are visible to other users. Your messages are visible to the people in the conversation.

With service providers. Companies that host and run the Service for us, under contracts that limit their use of your data to providing services to us:

• Hosting and storage: Hetzner (servers), Cloudflare (network, security, and media storage)
• Email: Amazon Web Services (account and security emails)
• Push notifications: Expo, Apple, and Google
• Sign-in: Apple and Google, if you choose to sign in with them
• Maps: Apple Maps in the iPhone app; OpenStreetMap map tiles in the web app

For legal reasons and safety. When we believe in good faith it is required by law or a valid legal request, or needed to protect the rights, property, or safety of Corvi, our users, or others.

In a business transfer. If Corvi is part of a merger, acquisition, or sale of assets, information may transfer as part of that deal, and this policy will continue to apply to it.

With your permission. In any other case where you ask us to or agree to it.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising (targeted advertising), as those terms are defined under California and other U.S. state privacy laws.

How long we keep information

• Your account: while your account is open.
• Deleted posts and messages: removed from the Service right away and erased from our systems within 30 days.
• Deleted accounts: your profile and content are removed from the Service right away, and your personal information is erased within 30 days. Copies may stay in encrypted backups for up to 60 more days before they are overwritten.
• Usage events: 90 days.
• Sign-in records: 180 days.
• Reports and safety records: as long as needed to protect the Service and comply with the law.

We may keep information longer when the law requires it, to resolve disputes, or to prevent abuse (for example, to stop a banned user from creating a new account). We may keep data that has been aggregated or de-identified so it can no longer be linked to you.

Your choices and rights

• Delete your account: in the app under Settings, or in the web app under Settings. This deletes your account and your data as described above.
• Download your data: email privacy@getcorvi.com from the address on your account, and we'll send you a copy.
• Correct your information: edit your profile at any time, or contact us.
• Control who sees your activity: set your account to public, followers only, or private, and choose who can message you.
• Block and mute other users at any time.
• Notifications: turn each notification type on or off in Settings or in your device settings.
• Location: turn location access off in your device settings.

Depending on where you live, including California, Virginia, Colorado, Connecticut, Texas, Oregon, and other U.S. states, you may have the right to know what personal information we have about you, get a copy of it, correct it, delete it, and opt out of its sale, of targeted advertising, and of certain profiling. We give these rights to all users, wherever you live. We don't sell personal information or use it for targeted advertising, so there's nothing to opt out of today. We honor Global Privacy Control signals as an opt-out request.

To make a request, email privacy@getcorvi.com. We'll confirm your identity, usually by checking that the request comes from the email address on your account, and respond within 45 days. You can use an authorized agent to make a request for you. We won't treat you differently for using these rights. If we deny your request, you can appeal by replying to our decision with "Appeal" in the subject line. If you're not satisfied with the outcome of your appeal, you can contact your state attorney general.

Security

We encrypt data in transit (HTTPS), store photos and backups encrypted, store passwords as one-way hashes, offer two-factor authentication, and limit access to personal information to people who need it to run the Service. No system is perfectly secure, so please use a strong password and turn on two-factor authentication.

Age requirement

Corvi is for people 18 and older. We don't knowingly collect personal information from anyone under 18. If we learn that someone under 18 has an account, we'll delete it. If you believe a minor is using Corvi, email privacy@getcorvi.com.

Where we process data

Corvi is operated from the United States, and our servers are in the United States. If you use Corvi from outside the U.S., your information will be processed in the U.S.

Changes to this policy

When we update this policy, we'll change the "Last updated" date above. If a change materially affects how we use your personal information, we'll tell you in the app or by email before it takes effect.

Contact us

Fitness Booking, Inc.
privacy@getcorvi.com
1111B S Governors Ave #79007
Dover, DE 19904