SQZ - Privacy Policy

1. Information We Collect

We collect information in three broad ways: what you give us directly, what is generated when you use the app and what comes from your device or browser automatically. The exact details depend on how you use the Services.

Information you provide

• Account and profile. Such as your name, email address, password or authentication details (we store credentials using industry-standard protections and do not keep your password in plain text), language or region preferences and other settings you choose to save.
• Subscription and billing. When you subscribe, our payment partners process card or wallet details. We typically receive a limited subset of billing information (for example subscription status, plan type, transaction references and the last four digits of a card when shown in receipts), not your full payment card number.
• Communications. If you contact support or reply to surveys, we keep the content of those messages, your contact details and metadata needed to respond (such as timestamps and ticket identifiers).

Activity, progress and app-generated data

When you use workout or training features, we process data you generate inside the app (for example session completion, streaks, reminders you set, in-app progress or preferences tied to your training plan). This helps us run the core product. It is wellness and self-reported or app-recorded activity data, not a medical record and not a substitute for professional health advice unless we say otherwise in a separate agreement.

Automatically collected information

• Device and diagnostics. Such as device type, operating system version, app version, general locale or time zone, IP address, crash logs and performance or error reports that help us fix bugs and improve stability.
• Usage and analytics. Such as screens viewed, feature usage, taps or flows aggregated to understand product quality. Where we use cookies, SDKs or similar technologies, we use them for security, preferences, analytics and product improvement as described in this policy and in any in-product notices.
• Notifications. If you enable push notifications, your device token or equivalent identifier is processed so we can deliver messages you opt into.

We do not intend to collect sensitive categories of data beyond what you voluntarily provide through normal use of the Services (for example we do not ask for government ID through the app for routine sign-up). If we ever introduce a feature that collects noticeably more sensitive data, we will describe it clearly and, where required, ask for your consent before turning it on.

2. Purpose of Data Collection

We use personal information for the following purposes. We aim to collect only what we need for each purpose and to retire data when it is no longer needed, subject to legal retention described in Section 4.

• Provide and operate the Services. Including creating and securing your account, syncing progress across devices where we offer that, delivering workouts and content you request and maintaining core infrastructure.
• Process payments and subscriptions. Including validating purchases, managing renewals, cancellations, refunds where applicable and preventing fraud or abuse of promotional offers.
• Personalize your experience. Including adapting reminders, difficulty or pacing where the product supports it and remembering preferences so you do not have to re-enter them.
• Communicate with you. Including service emails (such as receipts, security alerts and account notices), responses to support requests and optional product updates or tips where the law allows and you have not opted out where an opt-out applies.
• Improve, secure and debug. Including analytics, quality assurance, A/B tests where used, abuse detection and protecting the integrity of the Services and our users.
• Comply with law and enforce our terms. Including responding to lawful requests from authorities, defending legal claims and enforcing our Terms of Service or acceptable use rules.

Depending on where you live, we rely on one or more legal bases such as performing our contract with you, legitimate interests that are not overridden by your rights (for example fraud prevention or product analytics with appropriate safeguards), your consent where required and compliance with legal obligations. Where consent is the basis, you may withdraw it without affecting processing that already occurred, though some features may stop working if you withdraw consent for data they depend on.

3. Data Sharing

We do not sell your personal information and we do not share it for cross-context behavioral advertising as those terms are commonly understood in privacy laws. We share information only in the limited circumstances below.

• Service providers. We use trusted vendors who process data on our instructions to host the Services, authenticate users, send email, process payments, provide analytics, customer support tooling or similar functions. They may access personal information only to perform those services for us and are contractually required to protect it.
• Legal and safety. We may disclose information if we believe in good faith that disclosure is necessary to comply with law, regulation, legal process or governmental requests, to protect the safety of any person, to address fraud, security or technical issues or to protect our rights or property.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, information may be transferred as part of that transaction. We will require the successor to honor this Privacy Policy or tell you if a materially different policy will apply.
• With your direction. For example when you ask us to share information with an integration you explicitly connect, if and when we offer such integrations.

Some providers may process or store data in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards required by applicable law (such as standard contractual clauses or equivalent mechanisms) when those safeguards are required.

4. Data Retention

We keep your personal information only for as long as we need it for the purposes described in this policy, unless a longer period is required or allowed by law. We apply data minimization in design: we avoid collecting fields we do not need and we review retention for key systems as the product evolves.

• Account and profile data. We retain your name, email address, workout and progress data, and related account information for as long as your account is active. If you delete your account or ask us to delete your personal data, we will delete or anonymize that information from our active systems within a reasonable period, typically within 30 days, unless we must keep certain information longer to meet legal obligations.
• Backups and residual copies. Deleted data may persist for a limited time in encrypted backups before those backups are rotated or overwritten. That period is typically no longer than 90 days.
• Payment and billing records. Transaction and subscription records needed for accounting, tax, fraud prevention and dispute resolution may be retained for the length of time required by applicable law (often several years), including in systems operated by our payment processors under their own retention policies.
• Analytics and usage data. Aggregated or de-identified analytics may be retained for as long as it remains useful to improve the app, generally for up to 26 months unless a shorter period applies for a specific tool we use.
• Support and legal records. Emails or tickets you send us may be kept for a period that lets us resolve follow-up issues, train staff on recurring problems (using real examples only when appropriate and with identifiers removed where feasible) and meet legal or insurance requirements. Typical active retention for routine support correspondence is up to 24 months unless a dispute requires longer retention for that thread.

If you want to know more about retention for a specific type of data, contact us using the details in Section 10.

5. Children's Privacy

SQZ is not directed at children under 13 (or the higher minimum age required in your jurisdiction for consenting to data processing without parental involvement). We do not knowingly collect personal information from children below that age.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the email in Section 10 with a description of the situation. We will take steps to delete the information from our systems promptly, subject to any narrow legal exception (for example if we must retain a minimal record to prove we complied with your request).

If you are between the minimum age in your region and 18, you should review this policy with a parent or guardian and only use paid features with permission where your local law requires it.

6. Security

We use administrative, technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse or alteration. Examples include encrypting data in transit where appropriate for the channel, limiting access on a need-to-know basis within our team, logging administrative actions where feasible and vetting subprocessors for baseline security practices.

You also play a role in security: use a strong unique password, do not share your login, log out on shared devices and keep your operating system and the app updated. Enable device-level protections (screen lock, biometrics) if you store sensitive information on your phone.

No method of transmission over the internet or electronic storage is completely secure. While we work hard to protect your data, we cannot guarantee absolute security. By using SQZ, you understand and accept that residual risk exists.

7. Disclaimer of Liability

Privacy-related matters. To the fullest extent permitted by applicable law, SQZ and its owners, affiliates, contractors and suppliers are not liable for any indirect, incidental, special, consequential or punitive damages, or for loss of profits, goodwill or data, arising out of or related to your use of the Services or any unauthorized access to or alteration of your information, except where liability cannot be excluded or limited under mandatory law (in which case our liability is limited to the extent allowed).

Health and wellness content. The Services provide general pelvic floor training and educational content. They are not medical devices and do not replace diagnosis or treatment by a qualified clinician. You use exercises and recommendations at your own risk. If you have pain, bleeding, acute symptoms or a medical condition, consult a healthcare professional before starting or continuing a program.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, partners or legal requirements. When we make changes, we will revise the effective date at the top of this page and, where the change is material, we will provide a clearer notice such as an in-app message, an email to the address on your account or a banner the first time you open the app after the update.

We encourage you to review this page periodically. If you continue to use the Services after an update takes effect, that use is subject to the updated policy unless applicable law requires a different process (for example explicit consent for a new processing activity).

9. Your Rights and Choices

Depending on your region, you may have some or all of the following rights regarding personal information we hold about you. We will respond to verified requests consistent with applicable law.

• Access and portability. You may ask for a copy of certain personal information we hold or for it to be provided in a structured, commonly used format where that right exists.
• Correction. You may ask us to correct inaccurate or incomplete information. You can also update much of your profile directly in the app or account settings where available.
• Deletion. You may ask us to delete personal information, subject to exceptions such as legal retention for billing or security logs as described in Section 4.
• Restriction or objection. In some jurisdictions you may ask us to restrict processing or object to processing based on legitimate interests, including profiling in limited cases.
• Opt-out of marketing. You can unsubscribe from promotional emails using the link in those emails or by contacting us. Transactional and security-related messages may continue even if you opt out of marketing.
• Withdraw consent. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Complaints. If you believe we have handled your data unlawfully, you may lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at the email in Section 10. We may need to confirm your identity before fulfilling a request. We will generally respond within 30 days or within the timeframe your local law requires, and we will explain any extension if we need more time.

10. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights or want to raise a concern about how we handle personal information, please contact us at: support@kegel-men.com

Please include enough detail for us to understand your request (for example the email address associated with your account) and we will work with you in good faith to resolve the matter.