Privacy Policy

• Full name, date of birth (optional), and gender (optional) — collected at registration
• Email address
• Payment information — processed exclusively by Stripe. We never store your card details.
• Video watch progress, viewing history (video, trainer, and seconds watched — retained 2 years), favourites, bookmarks, program and trainer follows, content-category interests, and playback preferences — to power your personalised experience
• Marketing attribution — UTM campaign parameters (source, medium, campaign) are stored in your account record; a referral attribution cookie (st_referral) is also set for 30 days when you arrive via a trainer link, and a member-invite attribution cookie (st_invite) is set for 30 days when you arrive via a member's invite link
• Trainer video audio — used to generate automatic subtitles (applies to trainers only, not regular members)
• Training preferences — your fitness goal, experience level, weekly session goal, how many days a week you train, and your time zone — used to personalise your plan and reminders
• Support and application forms — if you apply as a trainer or contact us through a form we store the name, email address, phone number, social handle and message you send, along with your IP address and browser string
• Gift purchases — the buyer's email address, the recipient's name, the sender name and the gift message, kept as part of the payment record
• Technical error reports — the page address, your browser string and the error text, so we can fix faults

Salem Moves is not for people under 16. You must confirm you are at least 16 to register; if we learn an account belongs to someone younger we delete it.

To activate your account, process payments, send transactional and lifecycle emails (verification, password reset, payment reminders, account notifications) via SendGrid, personalise your content feed, and improve the platform.

We never sell your data. Data is shared only with the following processors:

• Stripe — payment processing. Your email address and account metadata are shared with Stripe when you subscribe. Card details are entered directly on Stripe's secure form and are never stored by Salem Moves.
• Cloudflare — hosting, file storage, video delivery, automatic subtitle translation (Workers AI) and bot prevention (Turnstile — used on sign-in and registration forms)
• ElevenLabs — trainer video audio is sent to ElevenLabs for Speech-to-Text subtitle generation. Audio is processed under ElevenLabs' standard data-retention policy.
• Google Analytics — visit analytics, enabled only if you opt in via the cookie-consent banner
• SendGrid (Twilio) — transactional and lifecycle email delivery. Your email address and the full content of emails sent to you (verification, password reset, welcome, payment notifications) are transmitted to SendGrid's API for delivery.
• Telegram — if you link Telegram for member notifications, your Telegram chat id and the text of each notification we send you are transmitted to Telegram's API.
• WhatsApp (Meta) — support conversations and data-subject requests you send to our WhatsApp number are processed by Meta.

If you are an EU or UK resident, GDPR grants you these rights:

• Access to your personal data
• Correction of inaccurate information
• Right to deletion — delete your account yourself from Dashboard → Profile → Delete account; deletion becomes permanent after a 30-day recovery window
• Restriction of processing
• Access and portability — download a machine-readable copy of your data from Dashboard → Profile → Download my data

Contact us via WhatsApp to exercise any of these rights.

We use the following cookies:

• Essential: authentication cookies (HttpOnly, SameSite=Strict) — required for sign-in to work. A locale-preference cookie (NEXT_LOCALE, 1-year lifetime) remembers your language choice.
• Functional: referral/attribution cookies — st_referral (30-day lifetime) attributes visitors to referring trainers; st_invite (30-day lifetime) attributes visitors to the member who invited them. The relevant identifier is also stored server-side to link your visit to the referrer. Neither is an advertising cookie and neither shares data with third parties.
• Analytics (with consent): Google Analytics — activated only if you choose "Analytics" in the cookie-consent banner.
• Your cookie choice: your answer to the consent banner is stored in your browser (sm_cookie_consent). You can change it at any time from “Cookie settings” in the site footer.

Your account data is retained while your account is active. Specific retention periods apply to certain data: viewing history — 2 years; in-app notifications — 1 year; security and audit logs (including IP address and browser information) — 2 years; session tokens — 30 days. Changes to your records are also written to an internal replication log kept for up to 180 days. When you delete your account it enters a 30-day recovery window; after that your profile is permanently anonymised. Payment and subscription records, revenue-ledger entries and administrative audit rows are kept afterwards for accounting and legal reasons, and deletion can be delayed while money is still owed to a trainer.

Some of what you do on Salem Moves is visible to other people. Comments you post on articles and classes publish your account name and profile picture on a page anyone can read, whether they are signed in or not. If you take part in community challenges, the leaderboard, team rosters and spotlight publish your display name (or the alias you choose), your profile picture, your progress and your team. You control this: you can set an alias, or take part privately so you do not appear on public boards.

Privacy questions: email us at support@salemmoves.app