Privacy Policy
Last updated: April 27, 2026
The short version
Reforma is a quiet place for your Pilates practice. We back up your practice journal (sessions, pledge, favorites) to your account so you never lose your progress. Your photos are always stored only on your device and are never uploaded. We do not sell your data. We do not run ads. Your practice is yours.
What data Reforma stores
Reforma stores your practice data (sessions, pledge, favorites) on your device and syncs it to our servers so you can restore it on a new device. We collect certain anonymous usage data for analytics and app improvement. Photos are the exception: they are always stored only on your device and are never uploaded to our servers.
- Your name, pledge, weekly goal, and season progress
- Your session history (dates, durations, class types, instructors, notes)
- Favorited studios (including the studio’s public name and address as returned by Apple MapKit)
- Your saved articles and saved moves
- Studio reviews you submit (star rating, optional text, the studio it attaches to). Reviews are public — see “Reviews and public content” below.
- Notification preferences and scheduled reminders (on-device only)
- Milestone photos you choose to take (on-device only, never uploaded)
Reviews and public content
When you write a review of a Pilates studio, we store the star rating, the optional text body, the studio it attaches to, the timestamp, and the link back to your account. The review's star rating, text, your first name only(or “Reforma user” if you haven't set one), and the relative time are publicly visible— both inside the Reforma app and on the public studio directory at reformaco.com/studios. Your email address, last name, and account ID are never displayed.
Editing a review:updates the visible content and stamps the review as “edited.” The previous version is not retained.
Deleting a review: we use a soft-delete model. The review's text is cleared immediately from our database (set to NULL) so it can no longer be displayed, indexed, or analyzed. We retain the otherwise-empty record (review id, studio id, user id, deleted-at timestamp, no content) for one reason only: it holds the database constraint that prevents a single user from posting more than one review per studio. Without the empty record on file, a user could delete and immediately re-post a review of the same studio indefinitely. The empty record is never displayed, never returned by any public API, and never analyzed.
Deleting your account (Settings → Account → Delete account) deletes the empty record and the rest of your data completely. No retention beyond that point.
Reviews held in our brief moderation queue (1-3 star reviews, before publishing — see our Community Guidelines) are visible to the founder for the moderation read. They are not shared with third parties.
When another user flags one of your reviews, the flag (with the reason and any note the flagger provided) is delivered to our moderation inbox at moderation@reformaco.com. We do not share the flagger's identity with the reviewer. We do not notify the reviewer about the flag itself; we only notify them if we end up removing the review.
Accounts
You sign in with Sign in with Apple, Sign in with Google, or an email address and password. Your practice data is linked to your account so you can recover it if you change phones.
Account data is hosted by Supabase, our backend provider. Each user can only access their own data, enforced at the database level. You can delete your account at any time from Settings → Account → Delete account, which permanently removes all data we hold for you on our servers.
If you sign in with Apple using Apple’s private email relay, we only see the forwarding address Apple provides. You can revoke that link any time from your Apple ID settings.
Email verification
When you sign in with email and password for the first time, we send a verification email containing a one-time link. The email is delivered via Resend, our email service provider, which processes your email address and the verification link solely to deliver the message. The verification link expires after 24 hours. You can use Reforma fully without verifying, but verifying helps you recover your account if you forget your password.
Photos
Reforma may ask to access your camera to take progress photos. These photos are saved to a private directory on your device. They are never uploaded to our servers. Reforma does not access your photo library. If you reset your journey or delete the app, all photo files are removed from your device.
Location
The Studios tab uses your location to find Pilates studios near you via Apple MapKit. Your location is sent directly from your device to Apple’s mapping service. Reforma itself does not receive, store, or transmit precise location for studio search. Location access is optional and the app functions without it.
When you opt in to event alerts, Reforma stores your approximate location (rounded to roughly 1 km) so we can notify you about events posted near you. The rounded coordinate is associated with your account and persists until you turn off the subscription. We do not share it with third parties.
Notifications
Reforma can send you a weekly practice reminder and a reminder before your next scheduled session. These notifications are scheduled locally on your device. No push notification server is involved.
Analytics
Reforma uses PostHogto collect anonymous, aggregate usage analytics (for example: “a session was logged”, “a milestone was reached”, “an article was opened”). We do not send PostHog your name, email, pledge, session notes, photos, or any content you create in the app. We use analytics only to understand which features are used so we can improve the product. You can learn more at posthog.com/privacy.
Optional in-app purchase
Reforma offers a single optional in-app purchase called “Support Reforma”: a small tip that does not unlock any features. The tip can be given any number of times if you’d like to support the app repeatedly. Each purchase is processed entirely by Apple through the App Store. Reforma does not see or store your payment details (card number, billing address, etc.); we only store a boolean flag indicating you have supported the app and the date of your first tip. You can use Reforma fully without ever making this purchase.
Crash reporting
Reforma uses Sentry to collect crash reports and error diagnostics. Crash reports may include device type, operating system version, and anonymous error stack traces. They do not include your name, session data, photos, or any personally identifiable information. You can learn more at sentry.io/privacy.
Third-party services
Reforma uses the following third-party services:
- Apple MapKit — for studio search. Subject to Apple’s Privacy Policy.
- Sign in with Apple — account provider. Subject to Apple’s Privacy Policy.
- Sign in with Google — account provider. Subject to Google’s Privacy Policy.
- Supabase— hosts practice data and the authentication service. Subject to Supabase’s Privacy Policy.
- Resend— delivers verification and transactional emails. Subject to Resend’s Privacy Policy.
- PostHog — anonymous usage analytics. Subject to PostHog’s Privacy Policy.
- Sentry — crash reporting. Subject to Sentry’s Privacy Policy.
- YouTube — for embedded move tutorial videos. Subject to Google’s Privacy Policy.
- Apple App Store / StoreKit— processes the optional Support Reforma in-app purchase. Reforma never receives your payment details. Subject to Apple’s Privacy Policy.
Your rights
You can stop using Reforma at any time. On-device data is removed by deleting the app or using Reset Journey in the You tab. If you have an account, you can delete it from Settings → Account → Delete account, which permanently removes all data we hold for you on our servers. If you have questions about the data we hold, email us at hello@reformaco.com.
Children
Reforma is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove the data.
Changes to this policy
If we update this policy, we will post the revised version on this page with an updated date. Material changes will be noted in the app’s release notes.
Contact
Questions about this policy? Email us at hello@reformaco.com.