Gym Booking Platform

Privacy Policy

Rettu Privacy Policy

Last updated: 04/09/2025

Rettu (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your data when you use the Retu app and website (rettu.app).


1. Data We Collect

We only collect the information necessary to provide our services:

  • Account Information: name, email address, phone number.

  • Booking Data: gym/class reservations, subscriptions, and attendance history.

  • Technical Data: device information, IP address, app usage statistics (via analytics tools). We use New Relic to store performance and error logs.

  • Communication Data: notification emails we send and chat/message history within the app.

  • Cookies (website only): used for functionality, analytics, and to improve user experience.

We do not collect health/fitness data, payment information, or profile pictures.


2. How We Use Your Data

We process your personal data to:

  • Provide and manage your account.

  • Process your gym/class bookings and subscriptions.

  • Improve app performance, security, and user experience.

  • Communicate with you regarding updates, support, and important notices.

  • Comply with legal and regulatory obligations.


3. Legal Basis for Processing

We rely on the following lawful bases under GDPR:

  • Contract: to provide you with the services you request.

  • Consent: for analytics, cookies, or marketing (where applicable).

  • Legitimate Interest: to maintain security, monitor system performance, and improve services.


4. Data Sharing

We only share your personal data with trusted third parties that help us provide and operate our services, such as:

  • Cloud hosting and infrastructure providers (e.g., DigitalOcean for PostgreSQL databases).

  • Monitoring and analytics providers (e.g., New Relic, Google Analytics).

All third parties are GDPR-compliant and bound by Data Processing Agreements. We never sell or rent your personal data.


5. Data Retention

  • Your account and booking data are retained as long as your account remains active.

  • If you delete your account, your personal data will be erased or anonymized within 90 days, unless we are legally required to retain it for longer.


6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data.

  • Request correction of your data.

  • Request deletion of your account and data (“right to be forgotten”).

  • Withdraw consent at any time (e.g., for analytics/cookies).

  • Request data portability in a commonly used format.

To exercise your rights, please contact us at info@rettu.app.


7. Data Security

We take appropriate technical and organizational measures to protect your personal data, including encryption, secure storage, limited access, and regular monitoring.


8. International Transfers

If your data is transferred outside the EU/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs).


9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will always be available within the app and on our website.


10. Contact Us

For questions about this Privacy Policy or to exercise your GDPR rights, please contact us:
📧 info@rettu.app