Privacy Notice
[EFFECTIVE DATE PLACEHOLDER]
This Privacy Notice explains what information The Mobility Map collects when you take the free assessment, why we collect it, and how we use it. This page is part of the required Privacy Notice referenced on the Lead Capture screen's consent line.
Who we are
The Mobility Map is a free mobility assessment built by Ain, a Bali-based stretch therapist and personal trainer. [LEGAL ENTITY NAME PLACEHOLDER], [REGISTERED ADDRESS PLACEHOLDER].
This is an educational tool, not medical advice
The Mobility Map assessment is educational. It does not diagnose injuries, treat any condition, or replace professional medical care. If the assessment identifies a safety concern (for example, sharp pain, numbness, recent surgery, or a condition with prescribed movement restrictions), you are routed to a 'Start With the Right Support' result instead of an automated product recommendation, and you are never left at a dead end.
What we collect
When you take the assessment and complete Lead Capture, we collect: your first name, email address, WhatsApp number (in international E.164 format), preferred language, your general location, and your optional Instagram handle and free-text response. We also record your assessment answers (the mobility-focused questions you answer) and, separately, your explicit consent choices: which consent you granted or declined, the exact copy version you agreed to, the date and time, your IP address and browser at the time, the page you consented from, and your preferred language.
Consent: operational vs. marketing
We ask for two separate, clearly labeled consents, and neither is pre-ticked for you: operational-delivery consent (required, to send you your result and requested guide by email and WhatsApp) and marketing consent (optional, for occasional practical mobility, recovery, training, and offer updates — you can opt out anytime, including by replying STOP to any marketing message). We keep these two consents in separate records and never treat a 'yes' to one as a 'yes' to the other.
How we message you
Messages are sent only through the official Meta WhatsApp Cloud API and standard email delivery — never bulk or gray-market messaging tools. If you opt out of marketing messages, we suppress future promotional sends immediately; operational messages tied to a result or purchase you actively requested may still be sent.
Where your data is stored
Your data is stored in a Postgres database (Supabase), with row-level security enabled on every table and no direct client access — every read and write goes through our own server, using credentials that are never exposed in the browser. Access to safety-flag data (whether your assessment triggered a medical-caution routing) is restricted.
How long we keep your data
[DATA RETENTION PERIOD PLACEHOLDER — the build spec requires a deletion-request process but does not specify a default retention period; this needs a real decision from Ain/legal before publishing.]
Your rights and deletion requests
You can ask us to delete your data at any time. To make a deletion request, contact [DELETION REQUEST CONTACT EMAIL PLACEHOLDER]. [JURISDICTION-SPECIFIC RIGHTS LANGUAGE PLACEHOLDER — e.g. GDPR/UU PDP rights, to be added once the relevant jurisdiction(s) are confirmed.]
Security
This site is served over HTTPS only. No API keys, database credentials, or WhatsApp secrets are ever included in code that runs in your browser. Form submissions are rate-limited to reduce automated abuse.
Changes to this notice
If this notice changes, we will update the effective date above. [CHANGE-NOTIFICATION PROCESS PLACEHOLDER.]
Contact
Questions about this notice or your data: [CONTACT EMAIL PLACEHOLDER].